Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5b79329b-0239-3860-a1f5-bd4c772a7ca8.roa
File:                     5b79329b-0239-3860-a1f5-bd4c772a7ca8.roa (raw, json)
Hash identifier:          ko2kgynvC7ihMEgLQiSAPz78rStg4lcnpyU7DDnDxXc=
Subject key identifier:   2E:1C:D5:EF:BC:A6:14:65:97:91:A0:3C:2E:A1:3D:BA:1F:DA:4B:5C
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584981D4497973C84A07FD168B40
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5b79329b-0239-3860-a1f5-bd4c772a7ca8.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     5769
IP address blocks:        207.253.99.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:49:79:73:c8:4a:07:fd:16:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=a3f119b0-08df-4331-9c97-c30bf7ffb0ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bd:98:6c:77:14:e8:a4:6a:88:b9:3d:56:78:
                    99:99:56:af:28:5a:5e:ef:18:02:5c:da:b7:c9:5d:
                    12:c8:b1:4c:24:57:20:47:c0:2a:3f:cc:63:6d:32:
                    e9:0b:5d:b3:79:7f:c2:59:cb:84:4d:28:14:88:83:
                    b0:88:18:eb:42:7a:6b:63:8c:b0:6e:a7:9c:b6:10:
                    de:a7:45:ab:af:16:7d:27:64:27:23:10:c2:ea:59:
                    7e:95:e8:53:74:fb:5f:86:6c:99:1b:27:61:2f:9f:
                    14:10:cf:ba:36:83:fb:37:4a:b8:1f:80:0f:8c:dc:
                    d1:f7:40:b2:e3:58:47:bb:57:1a:33:e6:31:c8:b9:
                    6a:18:ec:ee:bb:b8:e2:8e:c4:51:8d:65:e1:6b:4e:
                    d5:6b:06:da:eb:98:60:ef:72:91:1c:96:fe:a9:68:
                    fa:f9:26:c3:03:c4:fb:ad:e4:1b:92:c7:44:81:92:
                    fc:37:9a:ae:86:70:24:46:cc:6f:e3:6c:bc:d5:e4:
                    5a:cf:9c:81:2d:97:97:e0:c6:e2:a8:42:5f:84:7e:
                    2a:db:ed:14:fc:d3:27:4c:b8:55:0e:42:e4:40:f3:
                    59:0e:c3:43:25:a2:8c:b8:c8:28:6b:d7:25:32:6e:
                    e0:db:1d:68:cf:e1:c6:00:8b:d6:c2:02:2f:18:c5:
                    e0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:1C:D5:EF:BC:A6:14:65:97:91:A0:3C:2E:A1:3D:BA:1F:DA:4B:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5b79329b-0239-3860-a1f5-bd4c772a7ca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.253.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:7e:32:7c:f0:c9:65:4a:fe:e1:9f:fa:e7:40:8c:55:1d:fe:
         5e:bc:9b:d3:d6:d4:aa:cc:b9:8c:ef:35:fd:9e:ec:98:c8:a6:
         87:db:41:7e:a4:a0:5e:b7:d0:b9:5f:75:97:f1:c4:2e:3e:72:
         9c:0c:1f:af:14:1f:0f:a1:ce:71:67:d7:0d:6b:34:e6:f0:69:
         4b:f2:65:66:c4:3b:3e:54:c2:a3:92:ad:10:7b:f0:58:4f:d0:
         47:d8:77:f8:e1:e7:08:44:cb:cf:e7:a0:b6:13:d6:19:a8:8d:
         4e:ff:b0:c8:4b:ce:0f:04:7e:42:94:5a:66:b8:38:57:7b:55:
         87:af:d1:13:c8:c2:6b:18:0d:09:ea:27:d1:7c:06:bd:92:a4:
         54:6b:c9:23:16:8c:9a:d1:61:f7:10:41:43:33:5d:22:3e:5e:
         f5:05:ea:0a:11:80:54:f9:55:df:3b:ee:7f:89:78:27:c7:6f:
         de:32:cf:cd:2f:1b:98:cc:65:57:22:c2:af:f5:e8:88:a1:91:
         0c:26:0a:fa:67:af:3c:e5:41:65:f7:e5:05:62:6f:6e:d7:f9:
         12:a6:68:22:ca:51:ce:14:e6:c6:f0:1d:68:3b:e0:a9:25:78:
         51:a0:71:e8:71:30:3f:44:78:33:c3:42:58:ae:ef:40:64:56:
         8b:be:ae:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmB1El5c8hKB/0Wi0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk
YTNmMTE5YjAtMDhkZi00MzMxLTljOTctYzMwYmY3ZmZiMGVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb2YbHcU6KRqiLk9VniZmVavKFpe7xgCXNq3
yV0SyLFMJFcgR8AqP8xjbTLpC12zeX/CWcuETSgUiIOwiBjrQnprY4ywbqecthDe
p0WrrxZ9J2QnIxDC6ll+lehTdPtfhmyZGydhL58UEM+6NoP7N0q4H4APjNzR90Cy
41hHu1caM+YxyLlqGOzuu7jijsRRjWXha07Vawba65hg73KRHJb+qWj6+SbDA8T7
reQbksdEgZL8N5quhnAkRsxv42y81eRaz5yBLZeX4MbiqEJfhH4q2+0U/NMnTLhV
DkLkQPNZDsNDJaKMuMgoa9clMm7g2x1oz+HGAIvWwgIvGMXgHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC4c1e+8phRll5GgPC6hPbof2ktcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvNWI3OTMyOWItMDIzOS0z
ODYwLWExZjUtYmQ0Yzc3MmE3Y2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/1jMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIt+MnzwyWVK/uGf+udAjFUd/l68m9PW1KrMuYzvNf2e7JjIpofbQX6k
oF630LlfdZfxxC4+cpwMH68UHw+hznFn1w1rNObwaUvyZWbEOz5UwqOSrRB78FhP
0EfYd/jh5whEy8/noLYT1hmojU7/sMhLzg8EfkKUWma4OFd7VYev0RPIwmsYDQnq
J9F8Br2SpFRrySMWjJrRYfcQQUMzXSI+XvUF6goRgFT5Vd877n+JeCfHb94yz80v
G5jMZVciwq/16IihkQwmCvpnrzzlQWX35QVib27X+RKmaCLKUc4U5sbwHWg74Kkl
eFGgcehxMD9EeDPDQliu70BkVou+rlA=
-----END CERTIFICATE-----