Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/412ca72f-9edd-3e5b-9c01-bafb60c17755.roa
File:                     412ca72f-9edd-3e5b-9c01-bafb60c17755.roa (raw, json)
Hash identifier:          cwRSoTRU3AELMPAI6nk2QqJve61sKeE+hDPC/0YCLxU=
Subject key identifier:   39:AB:D9:C9:3D:51:FC:53:E6:EC:5B:F2:24:AC:7E:22:AA:82:F8:DE
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F432858495D896691E5F07E03A7AEB9E0
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/412ca72f-9edd-3e5b-9c01-bafb60c17755.roa
Signing time:             Mon 31 Mar 2025 01:00:47 +0000
ROA not before:           Mon 31 Mar 2025 01:00:47 +0000
ROA not after:            Sun 29 Jun 2025 01:00:47 +0000
asID:                     22652
IP address blocks:        75.98.132.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5d:89:66:91:e5:f0:7e:03:a7:ae:b9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Mar 31 01:00:47 2025 GMT
            Not After : Jun 29 01:00:47 2025 GMT
        Subject: CN=73b13d47-5208-4499-aec7-3d5ec8fa11ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ed:b2:6d:6d:fa:a2:14:d2:28:d2:4b:55:01:
                    9b:3f:22:79:71:df:0b:f7:82:77:ce:8c:44:4a:13:
                    74:40:4d:46:73:4d:ba:2f:d1:42:00:96:92:7d:da:
                    0e:3d:36:28:08:e7:04:f3:e6:1a:3a:b6:09:38:c2:
                    45:27:8a:0d:1f:ae:e6:f2:f2:03:00:1c:04:d0:59:
                    be:1b:dc:e1:97:f5:b4:0b:90:b1:f2:fd:99:ed:3a:
                    36:47:ca:6c:e1:02:8d:da:ca:61:2b:0f:60:84:5d:
                    dd:c6:99:eb:f7:97:a2:5c:2d:f4:3d:6b:1f:ef:49:
                    0e:32:84:da:ce:cf:f2:1d:a0:1f:79:73:b0:9d:a1:
                    88:fa:94:ea:8a:c9:35:77:5f:61:3e:51:73:a8:1b:
                    c3:43:7e:0e:90:ee:38:f8:9f:36:dc:df:3e:27:ff:
                    fc:5d:78:f8:df:6a:a1:29:22:92:18:4d:91:49:1d:
                    8f:a0:63:a2:95:8c:0b:07:e7:33:62:bd:b1:55:d2:
                    69:91:43:45:2b:ea:b6:dd:e1:a1:01:11:f3:f3:04:
                    03:f2:78:e5:08:71:73:99:24:11:07:42:1f:be:60:
                    ae:fb:87:3c:b4:8b:6a:6a:d2:14:8b:aa:03:67:8d:
                    cc:ad:1d:bb:4a:fa:99:d4:dc:16:d1:f5:61:70:4f:
                    80:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AB:D9:C9:3D:51:FC:53:E6:EC:5B:F2:24:AC:7E:22:AA:82:F8:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/412ca72f-9edd-3e5b-9c01-bafb60c17755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.98.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:55:90:ce:ef:74:09:21:a2:41:e0:33:f8:5b:6e:37:ab:c0:
         b0:49:dd:7b:c3:bf:3c:65:7a:02:7b:3d:77:a9:fb:c4:0e:5c:
         31:04:a5:50:d6:f9:32:93:46:07:2b:79:70:91:90:dc:89:52:
         8e:1c:2c:92:5c:c8:b2:0b:0d:a4:22:80:a2:45:fc:91:81:2e:
         c1:e4:68:ff:c2:55:58:46:12:17:de:e2:d7:0f:51:9e:7d:fb:
         a0:7b:bc:65:88:20:47:c9:54:db:53:d0:55:9f:0b:c6:e9:15:
         2b:c0:cf:e1:54:3b:0e:98:0d:b9:1e:13:f3:e1:c5:a0:fe:89:
         f6:0b:12:59:74:ae:8f:21:fd:6e:15:48:29:f7:b9:3e:5f:ef:
         77:57:e9:67:31:67:6c:91:17:62:62:ed:aa:31:65:d2:13:e3:
         ec:67:4b:cc:b3:87:40:43:3a:22:33:f1:26:dc:5a:e9:23:6a:
         66:8c:a5:84:b3:26:85:1a:5c:29:df:ec:88:cd:20:ed:f4:65:
         09:0e:33:d2:a3:c1:ff:fa:16:8e:4d:2f:b2:4b:65:34:40:14:
         77:cf:78:84:89:05:dd:b8:96:f7:14:eb:fb:b5:b4:0c:fa:8c:
         d8:a6:17:2f:b7:1c:c7:f7:51:c0:8b:66:5f:cf:5b:b2:43:ca:
         3c:56:8d:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEldiWaR5fB+A6euueAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI1MDMzMTAxMDA0N1oXDTI1MDYyOTAxMDA0N1owLzEtMCsGA1UEAxMk
NzNiMTNkNDctNTIwOC00NDk5LWFlYzctM2Q1ZWM4ZmExMWNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju2ybW36ohTSKNJLVQGbPyJ5cd8L94J3zoxE
ShN0QE1Gc026L9FCAJaSfdoOPTYoCOcE8+YaOrYJOMJFJ4oNH67m8vIDABwE0Fm+
G9zhl/W0C5Cx8v2Z7To2R8ps4QKN2sphKw9ghF3dxpnr95eiXC30PWsf70kOMoTa
zs/yHaAfeXOwnaGI+pTqisk1d19hPlFzqBvDQ34OkO44+J823N8+J//8XXj432qh
KSKSGE2RSR2PoGOilYwLB+czYr2xVdJpkUNFK+q23eGhARHz8wQD8njlCHFzmSQR
B0IfvmCu+4c8tItqatIUi6oDZ43MrR27SvqZ1NwW0fVhcE+AgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDmr2ck9UfxT5uxb8iSsfiKqgvjeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvNDEyY2E3MmYtOWVkZC0z
ZTViLTljMDEtYmFmYjYwYzE3NzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2KEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA1VkM7vdAkhokHgM/hbbjerwLBJ3XvDvzxlegJ7PXep+8QOXDEEpVDW
+TKTRgcreXCRkNyJUo4cLJJcyLILDaQigKJF/JGBLsHkaP/CVVhGEhfe4tcPUZ59
+6B7vGWIIEfJVNtT0FWfC8bpFSvAz+FUOw6YDbkeE/PhxaD+ifYLEll0ro8h/W4V
SCn3uT5f73dX6WcxZ2yRF2Ji7aoxZdIT4+xnS8yzh0BDOiIz8SbcWukjamaMpYSz
JoUaXCnf7IjNIO30ZQkOM9Kjwf/6Fo5NL7JLZTRAFHfPeISJBd24lvcU6/u1tAz6
jNimFy+3HMf3UcCLZl/PW7JDyjxWjSA=
-----END CERTIFICATE-----