Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/1c0a76cd-a848-347a-8534-bb81117de2e4.roa
File:                     1c0a76cd-a848-347a-8534-bb81117de2e4.roa (raw, json)
Hash identifier:          8JpTaOmy4uQeaV3dXzAq99aGShZ02Sb1xLBdfReYem4=
Subject key identifier:   A2:D9:10:2E:3A:4C:A0:C3:85:40:2B:7B:0F:B7:9E:94:CB:77:2F:06
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584929BB4C202026B386FF21E2A0
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/1c0a76cd-a848-347a-8534-bb81117de2e4.roa
Signing time:             Wed 12 Mar 2025 11:39:21 +0000
ROA not before:           Wed 12 Mar 2025 11:39:21 +0000
ROA not after:            Tue 10 Jun 2025 11:39:21 +0000
asID:                     63360
IP address blocks:        168.225.23.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:29:bb:4c:20:20:26:b3:86:ff:21:e2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Mar 12 11:39:21 2025 GMT
            Not After : Jun 10 11:39:21 2025 GMT
        Subject: CN=2c5acc28-c9cb-40cf-aaf5-1188059e07d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3a:36:e1:9b:e5:61:fb:2f:2a:32:0a:cf:6e:
                    36:48:d7:f9:f4:09:85:68:fb:56:e2:50:ad:df:3a:
                    99:fd:7f:c4:8b:65:f6:6a:b6:87:8c:9a:10:ad:2c:
                    0f:40:ef:71:80:9e:3e:43:99:9b:e9:0c:df:f9:10:
                    f2:98:da:8e:b3:45:52:91:cd:d8:f6:a9:14:aa:54:
                    23:5a:42:7c:02:d3:2c:f5:e7:c2:4e:b2:e0:64:c5:
                    f3:73:6b:90:81:b5:76:38:b3:7d:d6:2a:07:dd:7c:
                    fe:a2:b0:91:d9:cd:84:0d:54:61:a2:8f:76:08:92:
                    42:97:46:70:62:1d:0a:44:ed:39:1c:79:64:f9:a5:
                    e5:e5:08:57:d4:26:20:d8:a9:07:6c:64:db:79:66:
                    59:97:43:19:8d:53:a0:ab:1a:e1:62:92:a5:c5:5d:
                    01:19:2e:7f:f6:d6:e4:c7:41:c7:70:e2:05:d5:10:
                    e8:58:44:64:3b:9d:e2:79:1b:39:a7:5a:14:6a:1d:
                    15:70:20:38:46:54:1c:4d:ba:41:0a:9f:08:5a:e5:
                    05:1e:20:bc:08:22:e5:c5:66:e0:90:b9:84:f4:05:
                    62:83:eb:cc:90:59:4a:0f:5d:7a:5a:be:24:5e:8d:
                    10:cd:cf:65:b8:50:3f:a0:4d:49:d0:b0:6e:cf:e1:
                    d6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D9:10:2E:3A:4C:A0:C3:85:40:2B:7B:0F:B7:9E:94:CB:77:2F:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/1c0a76cd-a848-347a-8534-bb81117de2e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:ea:d5:38:44:37:99:75:24:c8:20:b0:88:b0:e0:e3:28:de:
         c1:f9:fd:b4:5a:63:af:15:d3:75:ee:23:df:bc:36:40:9f:d4:
         6f:32:0a:53:fa:25:4a:52:6b:e9:1e:5f:63:ca:75:3c:a9:0d:
         54:6f:35:df:55:16:74:5f:28:fb:b6:bf:aa:6e:50:bc:59:38:
         1e:39:3f:a1:5e:2f:99:35:b7:b3:81:4c:4e:97:d2:05:7f:ac:
         58:7f:51:be:0a:19:97:04:24:3b:c6:14:ab:cd:01:6e:6d:11:
         b5:2c:43:b9:7e:e4:e6:a6:9e:cf:f8:88:e9:a2:af:af:95:bd:
         9a:7d:ad:d4:a0:7e:4f:f9:ce:1f:23:86:09:22:01:d9:7f:19:
         3c:cc:b5:57:1d:b4:df:cd:5e:34:54:50:83:9a:06:65:2a:6c:
         6a:23:2c:32:ec:08:db:e3:f2:01:f8:2a:da:0f:96:42:a1:dd:
         7b:5b:2f:66:66:ca:0b:d0:45:87:e4:ab:84:a9:49:5f:5e:30:
         ea:92:81:ba:5f:1c:64:97:15:7d:d2:e1:a6:15:e2:e0:ae:00:
         5b:99:21:e1:bd:81:2d:07:a5:6c:79:b4:ba:0a:04:a2:c0:cc:
         27:f2:7f:ed:db:2e:a7:ab:63:08:c0:66:d0:2a:f2:b8:63:10:
         a3:c0:c4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----