Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/15524210-f3ac-3301-aed6-e5d3d074a655.roa
File:                     15524210-f3ac-3301-aed6-e5d3d074a655.roa (raw, json)
Hash identifier:          drFri32mt7VOJRJWb2Nvek6Bxyhz/PhdIGxJuu54hfk=
Subject key identifier:   44:A1:83:4F:2B:26:8F:17:90:C0:C5:83:F0:EB:4E:27:9B:5B:88:26
Certificate issuer:       /CN=2c2b1124-f433-4440-b52c-8f0b5650e2bb
Certificate serial:       010D0C9F432858498199083DA9A85E96CBEB67C0
Authority key identifier: 5F:EE:E2:BF:7F:FE:5E:32:1F:29:95:6C:7D:EC:5D:BE:2E:21:D0:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/15524210-f3ac-3301-aed6-e5d3d074a655.roa
Signing time:             Sat 12 Apr 2025 23:01:27 +0000
ROA not before:           Sat 12 Apr 2025 23:01:27 +0000
ROA not after:            Fri 11 Jul 2025 23:01:27 +0000
asID:                     13875
IP address blocks:        207.228.201.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:99:08:3d:a9:a8:5e:96:cb:eb:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c2b1124-f433-4440-b52c-8f0b5650e2bb
        Validity
            Not Before: Apr 12 23:01:27 2025 GMT
            Not After : Jul 11 23:01:27 2025 GMT
        Subject: CN=20447fdb-58b0-417a-b160-6e5ab80a7a79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:10:3d:75:6b:b4:6d:8a:67:86:f0:50:92:f5:
                    93:3b:93:52:7c:e4:6e:3f:86:ae:7d:c5:07:9d:ff:
                    26:97:88:aa:42:dc:2b:19:33:a3:30:45:2f:57:ea:
                    b7:d4:90:5a:0c:e1:24:3d:24:a5:35:b0:77:e6:0b:
                    7f:c9:11:5f:ce:20:89:99:aa:be:07:65:5e:f0:b0:
                    93:29:90:db:b8:f4:10:7b:a2:09:6f:69:f9:d4:a8:
                    b1:de:31:2a:26:63:74:61:12:e8:e0:61:ab:92:05:
                    4a:c0:bf:0c:32:5f:32:bc:18:af:81:f0:e5:5c:31:
                    2d:3e:61:d7:87:0e:fb:1b:00:a2:97:71:5e:9d:48:
                    3e:37:62:37:70:5d:05:20:aa:a0:5f:ea:e7:a2:04:
                    d0:60:f3:3b:30:99:a7:b2:85:ec:3d:5c:3c:27:90:
                    f2:48:00:4d:0e:cd:a8:89:99:85:c9:68:ee:7f:ac:
                    6c:c2:ee:6a:1a:7f:f5:2a:47:2a:fa:05:e5:80:b4:
                    44:b6:d6:64:42:4d:ca:e9:01:42:29:cc:70:06:ee:
                    b6:79:e7:b5:d5:d2:8b:3c:5b:0a:f5:d4:61:62:de:
                    69:4b:22:dc:b6:3a:21:84:8a:23:1c:29:c2:c1:74:
                    8f:55:41:1c:5a:7e:06:bb:d3:dd:b0:b6:c1:d0:df:
                    12:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A1:83:4F:2B:26:8F:17:90:C0:C5:83:F0:EB:4E:27:9B:5B:88:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/15524210-f3ac-3301-aed6-e5d3d074a655.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/2c2b1124-f433-4440-b52c-8f0b5650e2bb.crl

            X509v3 Authority Key Identifier:
                keyid:5F:EE:E2:BF:7F:FE:5E:32:1F:29:95:6C:7D:EC:5D:BE:2E:21:D0:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.228.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ef:8f:8c:bc:ba:0a:47:35:7a:27:ad:56:f9:f3:f0:ad:11:
         66:2e:42:63:ba:8c:b1:41:1c:a6:eb:5d:ea:e6:56:2e:89:d9:
         e3:37:4c:0f:6e:55:46:cc:ea:1b:a7:0e:0c:e6:fa:5e:b9:61:
         1c:a1:cf:d5:4d:14:c1:b1:28:d6:c2:94:94:3a:30:1e:cb:16:
         e6:6e:3b:77:71:26:5d:c9:b8:4f:7b:39:b6:52:73:59:05:6f:
         af:b6:0e:31:28:d3:dc:8f:80:34:76:a9:f4:55:6c:96:97:1c:
         1c:1e:0c:14:71:6a:c6:ef:d6:31:cd:19:7a:c3:21:b1:6c:e2:
         2a:52:07:92:07:94:c9:6e:4c:12:1e:63:b3:a1:8c:dd:70:2d:
         55:21:4d:71:d9:b3:f3:a9:2f:c9:11:53:0e:62:4a:46:88:1f:
         00:59:c1:3c:98:5f:e0:61:a5:69:8d:4c:d2:d5:3f:18:18:39:
         d8:f2:7a:aa:54:a8:d0:96:d8:aa:ae:d9:7e:fa:38:4d:ec:ec:
         e3:8a:04:a5:f9:59:ce:24:34:97:d8:f4:2b:bb:7f:9c:0c:9f:
         a3:7d:1e:31:2e:59:ad:33:f1:2a:38:6f:1b:c8:d5:66:47:3d:
         49:d7:f8:42:b5:f3:6c:22:4f:1a:a8:bc:1c:c6:a8:13:f4:48:
         46:eb:ce:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----