Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/27dfa34e-e99b-3a95-afac-f983350fa289.roa
File:                     27dfa34e-e99b-3a95-afac-f983350fa289.roa (raw, json)
Hash identifier:          K185m95Vztl0DaQ+3QLyjUNYEM/Zoi3k/05J0O1AVyc=
Subject key identifier:   A5:8F:3E:E3:3E:25:2A:71:92:7C:9F:D5:95:AD:BB:11:AE:61:BC:FA
Certificate issuer:       /CN=961facb0-d9c9-4d9b-8bfa-17d54168d407
Certificate serial:       010D0C9F43285849350E9A31366ED587C657C500
Authority key identifier: 01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/27dfa34e-e99b-3a95-afac-f983350fa289.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     393433
IP address blocks:        162.254.244.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:9a:31:36:6e:d5:87:c6:57:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961facb0-d9c9-4d9b-8bfa-17d54168d407
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=d298c1bb-e83d-434e-a830-a05f59f7ceeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8f:60:04:cf:51:c8:fd:b1:73:8a:64:76:d6:
                    0a:0a:3f:ce:c8:c4:3c:f6:37:77:57:94:e0:50:f4:
                    b4:e1:20:1d:e6:12:fb:95:e2:c6:91:1b:57:f6:b2:
                    6b:15:65:a4:af:13:56:69:a5:c8:e5:ba:a4:19:52:
                    69:4d:3e:f9:6c:31:84:b7:75:79:59:af:69:e0:97:
                    6e:01:a9:37:c9:26:ef:54:5f:59:1d:60:4f:63:70:
                    aa:69:7d:4e:c4:0b:cb:bf:44:c7:26:49:7f:cc:14:
                    f0:16:e3:1f:81:26:b0:ea:75:7b:52:35:49:fd:0b:
                    e3:31:49:c4:de:44:16:08:da:f8:6f:82:08:93:15:
                    d1:d7:04:ea:a0:1f:b8:02:57:54:72:c6:30:e3:48:
                    f8:92:e9:9c:46:6a:83:2d:b2:1d:b3:d9:29:49:02:
                    ca:ef:db:5c:6f:23:3e:72:b1:78:25:42:91:74:d2:
                    a6:51:34:f8:af:97:be:0d:e8:74:1b:57:e7:44:9a:
                    58:27:a3:ee:89:86:58:15:77:10:6d:b3:6d:82:7f:
                    19:58:0c:a4:36:1a:2f:6f:4c:0e:d0:51:11:c9:d2:
                    a6:ea:8f:f0:9c:40:65:2d:cf:19:98:f0:61:60:9f:
                    23:71:b0:44:56:7d:08:fd:cf:dd:36:89:9c:12:d5:
                    07:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:8F:3E:E3:3E:25:2A:71:92:7C:9F:D5:95:AD:BB:11:AE:61:BC:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/27dfa34e-e99b-3a95-afac-f983350fa289.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.crl

            X509v3 Authority Key Identifier:
                keyid:01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:03:d5:33:67:8d:c0:61:5b:d0:c5:da:eb:ed:3d:00:74:85:
         03:13:a2:93:fa:e4:9a:f0:1e:9d:ff:9c:61:c6:b7:3d:4d:50:
         7e:c2:5f:d4:94:81:09:29:bb:c5:a5:38:3f:47:d4:9e:ca:d2:
         88:80:56:ba:bf:44:bc:b8:fc:6f:b4:3b:ff:6a:80:68:2a:70:
         dd:a8:3d:63:25:d1:ad:fe:e0:2c:19:13:8e:f9:92:e1:04:22:
         cd:ff:8e:37:1b:c9:b1:b2:d4:d8:2e:23:ca:07:2a:97:e8:a4:
         80:5e:f3:e5:e9:7c:88:03:5b:91:a5:23:c0:89:d3:1f:29:56:
         50:34:38:b2:a5:ea:91:91:71:aa:a9:cc:ce:1f:6b:a9:97:e8:
         8c:24:c8:03:9c:95:fb:bf:21:ab:96:fa:23:a9:e4:ee:6d:9f:
         2b:f4:ec:89:95:c8:d7:c4:e3:94:ef:43:96:3e:af:84:4e:0f:
         eb:c7:a9:f1:ad:8c:68:f0:3a:a2:af:6f:db:db:c9:a1:05:87:
         5a:58:4b:eb:32:0a:78:50:75:78:e4:fd:c1:3c:bf:2d:94:d1:
         40:22:fd:5b:b9:16:6e:e1:aa:15:ef:9a:09:1e:d6:62:ba:60:
         3a:e9:67:60:81:a2:12:47:86:84:8d:b2:4b:68:1b:f9:29:ae:
         ba:b8:e6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----