Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796/9c91bbd7-6bd1-360c-bada-d28f3e0a11c4.roa
File:                     9c91bbd7-6bd1-360c-bada-d28f3e0a11c4.roa (raw, json)
Hash identifier:          cUKEIoSUBSRG7mh44DOJuiATwM+EarAvdCgeASksHRw=
Subject key identifier:   87:94:78:55:ED:49:36:85:C5:5F:00:DE:47:8B:A9:B1:EE:B8:64:90
Certificate issuer:       /CN=5e4e9a46-06dc-462d-a10c-710a3c461796
Certificate serial:       010D0C9F43285848AC60D4B608B5D4FB8015BEFD
Authority key identifier: 7C:40:0D:39:C8:EA:17:EC:66:AD:20:06:D4:15:6B:F8:0F:DC:FB:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796/9c91bbd7-6bd1-360c-bada-d28f3e0a11c4.roa
Signing time:             Sun 26 Jan 2025 14:00:52 +0000
ROA not before:           Sun 26 Jan 2025 14:00:52 +0000
ROA not after:            Sat 26 Apr 2025 13:00:52 +0000
asID:                     237
IP address blocks:        192.88.242.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ac:60:d4:b6:08:b5:d4:fb:80:15:be:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e4e9a46-06dc-462d-a10c-710a3c461796
        Validity
            Not Before: Jan 26 14:00:52 2025 GMT
            Not After : Apr 26 13:00:52 2025 GMT
        Subject: CN=d098caee-dcfa-4419-b28e-b3a46088638e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:23:ab:8b:ca:0e:f8:8e:2b:69:f3:7a:3d:4c:
                    fd:01:29:30:b5:70:c2:6b:44:ce:35:1d:a7:6f:f3:
                    22:1f:32:25:83:f7:7f:e3:b3:bc:08:d3:55:38:fe:
                    e3:e2:47:0c:3f:5f:25:f7:5a:03:dd:5b:27:a6:58:
                    4f:96:fa:3e:75:64:a4:5f:dd:cb:ae:46:4d:7a:37:
                    7d:d6:cc:96:a0:4f:84:77:95:29:53:6b:c8:04:cc:
                    28:1f:1c:28:60:9f:e5:c9:cc:d0:bd:8c:12:f4:4e:
                    d4:05:2e:9a:e8:55:63:e8:2e:1e:4b:f9:2a:54:a4:
                    48:03:48:e5:24:3a:20:23:39:9f:9f:cf:d8:94:70:
                    19:13:55:2a:20:98:72:b3:7a:aa:42:b1:b6:5c:f3:
                    54:d4:68:02:91:e0:cb:3d:44:87:9a:34:60:97:da:
                    4c:99:94:b8:3f:40:db:e7:a6:df:6d:8e:ef:ef:16:
                    58:f3:02:4b:cb:19:a8:78:29:c8:76:11:bd:cb:c5:
                    46:a2:82:fb:b9:12:6c:ec:9b:18:25:35:73:58:05:
                    e2:15:75:1b:e1:30:c3:2f:2d:86:f0:2c:39:6b:59:
                    27:f0:91:af:f3:c0:ba:6e:52:0f:9d:15:43:cd:4a:
                    d0:50:20:f6:ff:96:ca:6c:be:e4:42:9e:c1:4c:1c:
                    9b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:94:78:55:ED:49:36:85:C5:5F:00:DE:47:8B:A9:B1:EE:B8:64:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796/9c91bbd7-6bd1-360c-bada-d28f3e0a11c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796/5e4e9a46-06dc-462d-a10c-710a3c461796.crl

            X509v3 Authority Key Identifier:
                keyid:7C:40:0D:39:C8:EA:17:EC:66:AD:20:06:D4:15:6B:F8:0F:DC:FB:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.88.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:28:93:45:3c:4a:4b:6a:41:42:2e:e2:c9:24:34:52:d5:06:
         0e:0e:f2:82:eb:49:d5:12:2e:57:b3:c4:03:8e:f6:94:02:fc:
         9f:24:a2:38:e1:6b:0e:22:a9:79:f8:d5:39:16:be:b9:f8:65:
         d9:d5:09:e2:46:12:de:b5:8c:1d:b1:2f:da:bd:1b:6c:b8:0e:
         6b:c2:0d:12:e7:ec:07:ed:5c:30:26:5f:3d:4b:21:fd:9c:52:
         58:3a:e2:05:0e:1c:77:c3:a9:12:62:78:74:be:34:76:7b:4d:
         9e:97:50:88:f0:fa:87:cb:92:92:a2:cc:52:72:4e:84:da:7e:
         16:7c:d3:fa:28:6b:f5:2c:0b:f4:ad:09:cb:28:18:4d:de:8b:
         e9:27:be:18:cb:c9:6f:ff:ff:a8:08:62:b6:da:6e:14:0c:d9:
         0d:dd:93:f0:37:f7:eb:df:6b:bf:75:c7:31:38:42:7f:dc:db:
         5f:da:80:2b:91:e8:09:2a:94:5c:20:13:0b:f7:42:6f:26:b5:
         27:a0:8d:fe:d1:79:7d:96:94:da:f9:1e:9c:4a:da:71:03:4b:
         ce:79:c7:ca:87:e8:e3:b2:96:04:51:68:6c:92:22:15:04:83:
         e4:b0:07:60:7f:e5:60:6a:c1:9f:b5:74:e9:eb:09:84:7c:ec:
         66:61:0b:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEisYNS2CLXU+4AVvv0wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU0ZTlhNDYtMDZkYy00NjJkLWExMGMtNzEwYTNjNDYx
Nzk2MB4XDTI1MDEyNjE0MDA1MloXDTI1MDQyNjEzMDA1MlowLzEtMCsGA1UEAxMk
ZDA5OGNhZWUtZGNmYS00NDE5LWIyOGUtYjNhNDYwODg2MzhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCOri8oO+I4rafN6PUz9ASkwtXDCa0TONR2n
b/MiHzIlg/d/47O8CNNVOP7j4kcMP18l91oD3VsnplhPlvo+dWSkX93LrkZNejd9
1syWoE+Ed5UpU2vIBMwoHxwoYJ/lyczQvYwS9E7UBS6a6FVj6C4eS/kqVKRIA0jl
JDogIzmfn8/YlHAZE1UqIJhys3qqQrG2XPNU1GgCkeDLPUSHmjRgl9pMmZS4P0Db
56bfbY7v7xZY8wJLyxmoeCnIdhG9y8VGooL7uRJs7JsYJTVzWAXiFXUb4TDDLy2G
8Cw5a1kn8JGv88C6blIPnRVDzUrQUCD2/5bKbL7kQp7BTBybmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIeUeFXtSTaFxV8A3keLqbHuuGSQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81ZTRl
OWE0Ni0wNmRjLTQ2MmQtYTEwYy03MTBhM2M0NjE3OTYvOWM5MWJiZDctNmJkMS0z
NjBjLWJhZGEtZDI4ZjNlMGExMWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNWU0ZTlhNDYtMDZkYy00NjJkLWEx
MGMtNzEwYTNjNDYxNzk2LzVlNGU5YTQ2LTA2ZGMtNDYyZC1hMTBjLTcxMGEzYzQ2
MTc5Ni5jcmwwHwYDVR0jBBgwFoAUfEANOcjqF+xmrSAG1BVr+A/c+0wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81ZTRlOWE0Ni0wNmRjLTQ2MmQtYTEwYy03MTBh
M2M0NjE3OTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFjyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHgok0U8SktqQUIu4skkNFLVBg4O8oLrSdUSLlezxAOO9pQC/J8kojjh
aw4iqXn41TkWvrn4ZdnVCeJGEt61jB2xL9q9G2y4DmvCDRLn7AftXDAmXz1LIf2c
Ulg64gUOHHfDqRJieHS+NHZ7TZ6XUIjw+ofLkpKizFJyToTafhZ80/ooa/UsC/St
CcsoGE3ei+knvhjLyW///6gIYrbabhQM2Q3dk/A39+vfa791xzE4Qn/c21/agCuR
6AkqlFwgEwv3Qm8mtSegjf7ReX2WlNr5HpxK2nEDS855x8qH6OOylgRRaGySIhUE
g+SwB2B/5WBqwZ+1dOnrCYR87GZhCxk=
-----END CERTIFICATE-----