Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/784a9fd2-0e64-37b9-8c83-c9dde5b10cdc.roa
File:                     784a9fd2-0e64-37b9-8c83-c9dde5b10cdc.roa (raw, json)
Hash identifier:          0Z0ZnUPzmDTvXd2ibafkDikIjAHVvaDWP94fWK+YQXQ=
Subject key identifier:   D6:CD:59:79:C9:59:49:A2:CC:B4:2C:1B:C1:05:70:0A:02:2B:5B:DE
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584981D44ADE202B8F6A2FD3AE00
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/784a9fd2-0e64-37b9-8c83-c9dde5b10cdc.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     22652
IP address blocks:        207.253.202.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:4a:de:20:2b:8f:6a:2f:d3:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=04641d5a-b4e5-4db9-b2a0-8d1b4b8c8616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:eb:00:ce:e2:35:38:43:30:55:23:79:f2:ee:
                    4e:c3:3c:b2:0e:5f:06:99:05:61:10:ba:8d:56:3c:
                    75:3a:f9:d9:42:a9:3a:fb:59:ae:e8:7e:75:0c:4b:
                    68:9c:4e:5b:36:ef:de:f1:4f:e4:a5:32:75:35:d5:
                    1a:56:05:cf:37:23:13:ef:9e:95:0f:6a:86:ce:48:
                    61:66:09:3d:64:e3:4e:43:f9:17:53:50:95:31:20:
                    e1:14:80:69:2a:b9:13:fa:b5:a9:ae:e8:c1:7f:a2:
                    d2:de:40:26:8e:1b:a8:7c:be:72:7c:5c:92:b0:6a:
                    b3:ea:e7:fb:c6:20:23:b9:a5:26:c3:65:64:0d:05:
                    6d:ec:21:97:a3:1f:81:00:7d:ae:40:9d:f8:cf:31:
                    33:51:8f:55:86:fa:dc:06:37:77:a4:0f:da:9e:22:
                    f5:81:5c:9e:29:9e:1a:83:45:4e:e4:18:3b:28:7b:
                    82:fa:26:78:38:51:12:16:08:b4:ed:b7:96:7d:03:
                    d6:2a:fe:e3:ac:7e:c1:b1:17:c8:23:e4:8f:93:54:
                    1e:1b:f1:9e:1e:c1:3f:3e:35:af:dd:08:4e:e6:98:
                    9d:ae:64:91:fa:5e:a2:33:7f:9f:24:e6:05:84:f0:
                    31:21:1e:66:04:4a:f2:e1:b4:5e:14:07:4b:9c:01:
                    d7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CD:59:79:C9:59:49:A2:CC:B4:2C:1B:C1:05:70:0A:02:2B:5B:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/784a9fd2-0e64-37b9-8c83-c9dde5b10cdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.253.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:1d:11:8a:dc:a8:e9:d7:30:3a:a3:45:f2:4c:88:fd:4e:b9:
         19:55:ad:4d:63:44:23:86:de:66:cd:2d:68:23:af:73:b4:a7:
         e2:ec:aa:fe:9a:5e:7e:e4:ab:45:9d:f1:ed:6c:3d:14:3c:f4:
         67:68:cb:98:68:85:5d:63:98:80:43:02:15:01:5e:8a:59:53:
         d7:6d:5c:e1:1e:d5:2c:1d:19:18:e6:e9:99:13:f7:9f:07:ce:
         71:69:ab:75:07:da:e8:83:b7:e5:a5:90:6a:d1:1f:2e:45:43:
         92:aa:ab:5f:fa:2e:38:44:df:bc:6d:36:a4:f0:49:aa:6c:eb:
         8a:e0:e8:9a:b1:e1:b1:e9:26:02:06:cb:93:ff:71:8c:9e:92:
         b8:e9:7d:25:3c:ff:01:d3:ae:ea:05:4f:c5:8f:fe:6a:e4:f5:
         92:bc:29:82:8f:e1:5b:05:c0:d7:8e:38:1d:8c:c3:95:57:cc:
         6f:16:31:c9:dd:19:b9:a8:d6:f2:09:c1:8b:7e:67:73:69:75:
         a0:ae:3e:ac:c7:82:58:0d:b1:31:6e:2f:33:c9:f1:95:31:69:
         6e:f0:b8:0c:5a:68:28:2a:0b:19:e8:2d:2c:0d:4b:24:e2:79:
         69:69:8b:5b:e6:d3:47:26:f9:59:64:8c:5a:5f:12:b5:47:d7:
         06:f1:b6:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmB1EreICuPai/TrgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk
MDQ2NDFkNWEtYjRlNS00ZGI5LWIyYTAtOGQxYjRiOGM4NjE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+sAzuI1OEMwVSN58u5OwzyyDl8GmQVhELqN
Vjx1OvnZQqk6+1mu6H51DEtonE5bNu/e8U/kpTJ1NdUaVgXPNyMT756VD2qGzkhh
Zgk9ZONOQ/kXU1CVMSDhFIBpKrkT+rWprujBf6LS3kAmjhuofL5yfFySsGqz6uf7
xiAjuaUmw2VkDQVt7CGXox+BAH2uQJ34zzEzUY9VhvrcBjd3pA/aniL1gVyeKZ4a
g0VO5Bg7KHuC+iZ4OFESFgi07beWfQPWKv7jrH7BsRfII+SPk1QeG/GeHsE/PjWv
3QhO5pidrmSR+l6iM3+fJOYFhPAxIR5mBEry4bReFAdLnAHX2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNbNWXnJWUmizLQsG8EFcAoCK1veMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvNzg0YTlmZDItMGU2NC0z
N2I5LThjODMtYzlkZGU1YjEwY2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/3KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHwdEYrcqOnXMDqjRfJMiP1OuRlVrU1jRCOG3mbNLWgjr3O0p+Lsqv6a
Xn7kq0Wd8e1sPRQ89Gdoy5hohV1jmIBDAhUBXopZU9dtXOEe1SwdGRjm6ZkT958H
znFpq3UH2uiDt+WlkGrRHy5FQ5Kqq1/6LjhE37xtNqTwSaps64rg6Jqx4bHpJgIG
y5P/cYyekrjpfSU8/wHTruoFT8WP/mrk9ZK8KYKP4VsFwNeOOB2Mw5VXzG8WMcnd
Gbmo1vIJwYt+Z3NpdaCuPqzHglgNsTFuLzPJ8ZUxaW7wuAxaaCgqCxnoLSwNSyTi
eWlpi1vm00cm+VlkjFpfErVH1wbxtjM=
-----END CERTIFICATE-----