Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c827858-1cad-41b0-8c6d-96db973693e9/7c37a5af-af60-36df-838f-5950ccac2dd5.roa
File:                     7c37a5af-af60-36df-838f-5950ccac2dd5.roa (raw, json)
Hash identifier:          5Ck7uihWTkNbPEQcMd7PghBlh4637BhgAcifl6AyPUM=
Subject key identifier:   3F:D8:E7:93:8D:08:30:F1:88:04:70:D4:DA:72:0F:72:B7:5C:F3:A2
Certificate issuer:       /CN=7c827858-1cad-41b0-8c6d-96db973693e9
Certificate serial:       010D0C9F432858495D896E8AE84F3ACFBE1C2298
Authority key identifier: C7:E8:89:64:C3:8F:FE:5F:40:DC:81:69:AD:4E:E1:28:CA:0E:D4:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c827858-1cad-41b0-8c6d-96db973693e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c827858-1cad-41b0-8c6d-96db973693e9/7c37a5af-af60-36df-838f-5950ccac2dd5.roa
Signing time:             Mon 31 Mar 2025 01:00:47 +0000
ROA not before:           Mon 31 Mar 2025 01:00:47 +0000
ROA not after:            Sun 29 Jun 2025 01:00:47 +0000
asID:                     398953
IP address blocks:        163.123.137.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5d:89:6e:8a:e8:4f:3a:cf:be:1c:22:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c827858-1cad-41b0-8c6d-96db973693e9
        Validity
            Not Before: Mar 31 01:00:47 2025 GMT
            Not After : Jun 29 01:00:47 2025 GMT
        Subject: CN=9487c549-ca0f-43d9-ba08-4f794a959648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b4:31:50:4e:bc:61:51:e0:75:1c:64:eb:2d:
                    34:e4:7d:d4:ce:74:b5:51:55:55:f6:c9:00:62:45:
                    49:a8:b9:84:31:47:df:b2:9c:44:ee:ba:d5:20:ca:
                    42:61:32:5c:cd:f7:1c:22:3e:ef:86:a3:d1:6b:01:
                    90:02:98:b2:15:60:fd:86:b1:79:13:2b:6a:99:bd:
                    8c:c3:44:bb:63:49:bc:79:b3:94:eb:4f:e7:93:67:
                    ef:6a:15:65:f9:b8:2a:72:e1:a7:16:88:cb:cd:30:
                    7c:6e:45:7a:13:f9:ac:4e:14:b1:bf:50:f6:76:89:
                    8e:be:a9:21:e3:b6:26:5e:07:bb:71:81:ff:a9:dd:
                    ea:05:65:44:82:a5:72:99:c6:40:46:6e:be:3b:09:
                    4d:9e:8d:92:64:63:3a:f7:7c:7c:d6:bc:a9:79:41:
                    84:08:14:55:23:7d:0b:51:22:a6:9b:10:4d:4c:50:
                    42:c7:03:e3:99:0a:1b:ea:90:60:cd:e2:b6:45:5d:
                    43:66:78:53:9f:20:01:ef:48:6e:ee:8f:af:47:4d:
                    00:e6:a1:ef:c2:34:02:7d:62:c4:a6:c7:56:df:ff:
                    b0:33:3e:e9:5e:35:b2:71:2a:b6:ff:16:7d:ac:78:
                    63:b6:95:1a:19:06:c5:f1:68:0b:1f:e6:5d:29:bd:
                    9e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D8:E7:93:8D:08:30:F1:88:04:70:D4:DA:72:0F:72:B7:5C:F3:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c827858-1cad-41b0-8c6d-96db973693e9/7c37a5af-af60-36df-838f-5950ccac2dd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c827858-1cad-41b0-8c6d-96db973693e9/7c827858-1cad-41b0-8c6d-96db973693e9.crl

            X509v3 Authority Key Identifier:
                keyid:C7:E8:89:64:C3:8F:FE:5F:40:DC:81:69:AD:4E:E1:28:CA:0E:D4:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c827858-1cad-41b0-8c6d-96db973693e9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:9b:0c:40:d6:ca:ba:31:ab:0e:ad:97:37:96:4a:23:8a:56:
         b2:8f:14:aa:a6:f1:01:63:53:8e:e6:ce:a1:55:43:46:97:b0:
         94:ff:c3:84:b7:69:04:be:e4:7a:cb:fa:a7:5a:b8:d9:f5:0e:
         48:ce:5f:6e:0f:83:44:9e:0c:16:e8:07:1c:ba:9a:8e:41:ce:
         e8:e7:cd:b9:4f:bb:78:44:c9:79:38:5c:81:e5:d0:26:06:10:
         6c:7b:1f:09:b3:9c:72:68:23:08:f6:03:10:98:04:d9:ac:7d:
         9c:82:9a:64:75:06:69:2d:8b:1d:34:fe:4b:eb:ac:30:42:f6:
         39:8c:07:a8:bc:6f:2e:16:db:2b:cd:1c:e9:a6:98:99:14:83:
         12:65:7e:af:3c:6c:c5:74:d6:2f:64:45:15:9a:d1:f2:3a:23:
         1b:9b:d0:97:1d:fb:d2:e8:58:61:73:0a:a6:37:25:82:6f:94:
         03:37:47:93:b3:4d:04:f5:0d:8e:51:41:e6:0f:46:0e:e4:64:
         66:10:cc:53:63:2d:1f:ca:b6:74:16:b5:6c:e7:92:e2:2e:f3:
         9c:7f:fc:41:9e:47:b9:f0:13:af:79:bb:f8:37:ed:ec:fd:73:
         a0:2f:b5:1a:49:2a:52:c1:5a:d8:fe:ab:e2:cb:79:80:b9:67:
         8b:ff:b9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----