Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/1fc2f9c1-18b2-3364-9d9a-02587108c597.roa
File:                     1fc2f9c1-18b2-3364-9d9a-02587108c597.roa (raw, json)
Hash identifier:          hVxTj/NXhQj1r2ab6f7qT9PV0qa7Go6j5TlDHjcGK0U=
Subject key identifier:   E4:4D:93:BD:E7:81:2F:F4:EB:13:51:7F:F9:69:CC:D8:9A:0B:6A:FE
Certificate issuer:       /CN=97cac0b7-abb7-43b2-8435-2db8edb2a015
Certificate serial:       010D0C9F432858497DA4734674218D603959EAC0
Authority key identifier: 25:4C:BC:B4:4A:F5:B5:1A:06:D4:CD:E3:A3:9F:B5:07:EF:7B:62:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/1fc2f9c1-18b2-3364-9d9a-02587108c597.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     62802
IP address blocks:        170.4.193.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:73:46:74:21:8d:60:39:59:ea:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97cac0b7-abb7-43b2-8435-2db8edb2a015
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=13a8fe68-6dad-446e-92ca-6f263f72d674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:08:f7:0e:23:d7:7c:28:8a:d7:5b:1d:ae:77:
                    32:18:94:a6:87:25:37:49:e8:34:68:44:25:1f:50:
                    89:38:57:69:ba:c3:cf:fa:4e:e5:8b:df:0b:3a:94:
                    5f:c0:78:db:a4:07:1e:3b:84:f8:07:c1:c5:7d:1a:
                    c9:ca:65:0d:b7:f6:c0:b3:ee:b4:b9:d5:6e:41:e6:
                    fe:a4:67:1c:29:df:7d:ac:cf:8b:a1:91:1a:32:2a:
                    ce:1b:91:cb:02:92:56:7f:6c:da:c0:65:0d:03:88:
                    e8:ca:1f:f1:9f:c0:ae:20:8e:61:79:a1:1b:fe:8d:
                    3d:ce:3b:a3:61:b2:08:7d:5e:aa:f3:b9:5d:b3:dd:
                    dd:ea:bb:b9:64:45:06:6c:aa:3d:4e:ff:09:db:1c:
                    84:02:5c:d9:eb:32:ad:6b:3d:46:ec:a9:b3:52:bf:
                    76:65:a4:d2:ab:ac:ba:5c:5b:e4:df:4a:f0:8b:a3:
                    2f:de:58:46:e6:55:c0:70:5b:a0:d2:0c:0e:ef:ff:
                    95:ce:13:dc:b3:b1:51:b3:b4:76:b8:f1:16:fe:a2:
                    63:f1:f7:8c:ba:c8:e7:e6:a4:40:12:a7:e5:16:96:
                    19:54:2d:5a:d2:f5:03:b9:42:9d:dd:e2:e7:d8:36:
                    22:b0:52:30:ab:ad:ae:76:14:c2:e1:79:5b:dd:5f:
                    51:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4D:93:BD:E7:81:2F:F4:EB:13:51:7F:F9:69:CC:D8:9A:0B:6A:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/1fc2f9c1-18b2-3364-9d9a-02587108c597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/97cac0b7-abb7-43b2-8435-2db8edb2a015.crl

            X509v3 Authority Key Identifier:
                keyid:25:4C:BC:B4:4A:F5:B5:1A:06:D4:CD:E3:A3:9F:B5:07:EF:7B:62:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.4.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:63:94:66:e6:97:71:c2:06:49:f2:b2:10:68:60:a1:82:43:
         39:d0:8d:46:be:8f:da:31:cb:a3:d2:06:71:ee:ea:17:f3:5e:
         3e:dd:26:9a:0c:5d:c5:a4:05:15:d6:cb:d4:9c:96:18:78:a0:
         85:ef:c4:df:b1:b0:a1:d2:a6:05:d7:2c:e9:c8:0c:ca:d1:6f:
         5f:cf:8c:84:0a:69:69:48:aa:08:a7:17:79:8e:4f:ca:52:53:
         b3:38:99:c4:8b:08:77:e4:ae:0b:6c:cb:9b:57:96:68:61:23:
         b5:5b:11:85:46:e7:d6:38:32:2d:06:72:da:47:27:f6:62:6a:
         2f:14:7b:b8:36:db:db:5d:7e:d2:eb:5a:6e:86:e6:68:50:6c:
         29:35:56:7f:ce:9d:ea:0d:87:ec:83:90:58:be:bb:e3:d7:fa:
         f0:26:66:47:65:6c:25:e9:ac:95:5b:54:32:97:df:c4:d1:a1:
         d5:37:9b:78:bc:f9:ec:c6:60:a3:b6:ea:44:99:3d:02:57:2b:
         85:a7:2f:35:e2:4c:de:e5:f9:51:b1:e3:cf:db:53:bb:98:14:
         2a:e1:c0:43:fe:e8:79:4e:0a:96:15:b2:a3:8d:d6:e9:5b:8b:
         f2:04:44:74:11:df:d0:2d:5b:b4:19:32:ca:fd:5e:c4:b8:92:
         db:5d:23:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pHNGdCGNYDlZ6sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTdjYWMwYjctYWJiNy00M2IyLTg0MzUtMmRiOGVkYjJh
MDE1MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
MTNhOGZlNjgtNmRhZC00NDZlLTkyY2EtNmYyNjNmNzJkNjc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgj3DiPXfCiK11sdrncyGJSmhyU3Seg0aEQl
H1CJOFdpusPP+k7li98LOpRfwHjbpAceO4T4B8HFfRrJymUNt/bAs+60udVuQeb+
pGccKd99rM+LoZEaMirOG5HLApJWf2zawGUNA4joyh/xn8CuII5heaEb/o09zjuj
YbIIfV6q87lds93d6ru5ZEUGbKo9Tv8J2xyEAlzZ6zKtaz1G7KmzUr92ZaTSq6y6
XFvk30rwi6Mv3lhG5lXAcFug0gwO7/+VzhPcs7FRs7R2uPEW/qJj8feMusjn5qRA
EqflFpYZVC1a0vUDuUKd3eLn2DYisFIwq62udhTC4Xlb3V9RSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFORNk73ngS/06xNRf/lpzNiaC2r+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85N2Nh
YzBiNy1hYmI3LTQzYjItODQzNS0yZGI4ZWRiMmEwMTUvMWZjMmY5YzEtMThiMi0z
MzY0LTlkOWEtMDI1ODcxMDhjNTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTdjYWMwYjctYWJiNy00M2IyLTg0
MzUtMmRiOGVkYjJhMDE1Lzk3Y2FjMGI3LWFiYjctNDNiMi04NDM1LTJkYjhlZGIy
YTAxNS5jcmwwHwYDVR0jBBgwFoAUJUy8tEr1tRoG1M3jo5+1B+97YukwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85N2NhYzBiNy1hYmI3LTQzYjItODQzNS0yZGI4
ZWRiMmEwMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgTBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIFjlGbml3HCBknyshBoYKGCQznQjUa+j9oxy6PSBnHu6hfzXj7dJpoM
XcWkBRXWy9Sclhh4oIXvxN+xsKHSpgXXLOnIDMrRb1/PjIQKaWlIqginF3mOT8pS
U7M4mcSLCHfkrgtsy5tXlmhhI7VbEYVG59Y4Mi0GctpHJ/Ziai8Ue7g229tdftLr
Wm6G5mhQbCk1Vn/OneoNh+yDkFi+u+PX+vAmZkdlbCXprJVbVDKX38TRodU3m3i8
+ezGYKO26kSZPQJXK4WnLzXiTN7l+VGx48/bU7uYFCrhwEP+6HlOCpYVsqON1ulb
i/IERHQR39AtW7QZMsr9XsS4kttdIyQ=
-----END CERTIFICATE-----