Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/dfcdde2c-ae45-3bdf-8e16-faf694b42aca.roa
File:                     dfcdde2c-ae45-3bdf-8e16-faf694b42aca.roa (raw, json)
Hash identifier:          zBtQ5R1lwI8lLcohfL+uyFpR/DhymOlwGP264mkinS4=
Subject key identifier:   84:18:01:EB:E6:D4:7B:B5:72:0D:9F:B9:16:03:D8:3A:E9:42:03:29
Certificate issuer:       /CN=a91f81ff-5317-40f4-a544-5df2e3358a57
Certificate serial:       010D0C9F432858495ABECAAA06BFC7FB67B45300
Authority key identifier: 34:07:13:67:0F:11:1D:B3:4C:B2:2E:75:BD:B0:6E:4B:D4:5F:22:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/dfcdde2c-ae45-3bdf-8e16-faf694b42aca.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     40628
IP address blocks:        199.190.128.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:ca:aa:06:bf:c7:fb:67:b4:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a91f81ff-5317-40f4-a544-5df2e3358a57
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=ef56fb78-ed6b-40f0-b0c3-a3aac7a0aaaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:26:ab:cb:a8:c8:c1:82:0b:aa:59:cb:f1:b1:
                    80:b1:1c:ca:c1:df:a5:55:12:0f:14:36:4f:1c:33:
                    da:66:dd:f0:1d:a1:b7:d5:cf:3f:0a:a7:51:4f:c6:
                    de:e6:b2:84:9d:4a:93:4a:36:8a:b1:59:dc:38:2f:
                    42:57:02:f8:0e:ae:a5:00:eb:55:33:8b:e0:e2:bb:
                    37:cd:31:b9:0e:25:18:c2:6f:db:9a:65:3d:dc:cc:
                    0c:05:29:50:18:0f:a5:ff:e1:d4:ee:aa:ed:da:bd:
                    43:2c:65:ef:9f:9a:ac:0f:23:b3:2a:4f:25:4f:8d:
                    a3:fc:72:3a:70:9b:f7:8f:50:83:b2:c3:f7:39:f1:
                    54:4d:86:1c:ed:7b:42:f2:d7:49:d1:db:88:97:99:
                    fa:f0:14:ba:d2:5b:a7:67:5d:cf:b6:50:fc:bd:10:
                    e2:3b:6b:0d:d1:cc:c2:be:3b:7e:5e:1e:70:8c:87:
                    b0:df:e5:39:62:00:37:47:0b:4b:1c:76:3c:4b:d5:
                    f5:b6:e2:bd:2d:dd:08:f5:68:49:92:85:95:95:a9:
                    79:71:11:a0:d6:7d:e1:dc:df:ce:12:0e:e5:84:c5:
                    2a:36:0a:ff:55:1b:5e:dd:c1:bb:ba:b6:13:ba:fd:
                    e7:6c:2e:cf:69:9c:1b:7a:4f:4b:47:ae:b7:f4:bb:
                    54:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:18:01:EB:E6:D4:7B:B5:72:0D:9F:B9:16:03:D8:3A:E9:42:03:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/dfcdde2c-ae45-3bdf-8e16-faf694b42aca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.crl

            X509v3 Authority Key Identifier:
                keyid:34:07:13:67:0F:11:1D:B3:4C:B2:2E:75:BD:B0:6E:4B:D4:5F:22:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.190.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:6c:fc:57:58:c6:b1:31:db:fa:1b:c0:41:ec:1b:24:dc:ad:
         28:8a:b7:1f:d4:5f:8f:7d:fd:1a:e8:82:53:94:0e:de:ca:03:
         d2:02:86:11:13:0d:64:84:11:18:b6:f4:53:78:7c:02:a1:d9:
         83:f1:1d:9b:b3:39:bd:22:29:d6:32:54:f7:0c:96:4e:bb:29:
         61:d4:2b:bb:97:2b:0c:05:b8:a2:76:da:48:a0:d5:96:49:dc:
         a6:ec:68:20:9e:48:dc:cb:be:82:da:e6:88:be:a6:4e:c7:85:
         92:d4:09:8e:e3:47:90:76:62:5b:ea:3a:55:18:85:fa:03:8b:
         99:4c:a9:ec:2e:4c:82:75:94:88:2d:25:7d:6a:85:dd:b7:72:
         4d:63:6c:24:84:e5:b9:2d:36:f9:cc:b8:ed:3c:af:89:30:37:
         94:0d:66:35:df:f2:8a:ee:d5:29:a1:c7:b9:f6:b3:73:47:1d:
         3d:fa:14:23:01:e0:e5:6b:5c:82:2d:38:30:19:c9:fb:14:a2:
         57:ef:ff:21:37:3f:2a:96:1c:bf:d3:a1:a3:26:ad:b9:aa:a1:
         cd:a3:21:b3:f9:ee:15:74:fe:16:6c:53:d2:d7:e3:4d:d6:53:
         6f:ec:55:c5:c4:18:fa:95:8e:c6:29:ce:a7:1d:a1:b7:73:c7:
         8f:53:40:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----