Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3d0e2bff-51e1-3c6e-93da-17db8903257b.roa
File:                     3d0e2bff-51e1-3c6e-93da-17db8903257b.roa (raw, json)
Hash identifier:          hS7Fd1IKA1jbD45UrExFW3AAJ36Pi3aqX1cVq7ebVbE=
Subject key identifier:   0F:A2:1F:0D:1C:38:CF:C5:AB:48:12:EE:69:F3:5C:47:F6:F5:4E:74
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858497D98A2CD5A53D6753F4EBE40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3d0e2bff-51e1-3c6e-93da-17db8903257b.roa
Signing time:             Fri 11 Apr 2025 12:37:25 +0000
ROA not before:           Fri 11 Apr 2025 12:37:25 +0000
ROA not after:            Thu 10 Jul 2025 12:37:25 +0000
asID:                     18779
IP address blocks:        23.230.4.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:98:a2:cd:5a:53:d6:75:3f:4e:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 11 12:37:25 2025 GMT
            Not After : Jul 10 12:37:25 2025 GMT
        Subject: CN=e57e6c9b-67e5-4673-b91d-919ad8f0e297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6d:7d:65:ea:e2:2e:bf:7d:d9:09:c3:3a:c0:
                    9a:01:e9:f6:d2:22:ca:83:b8:3e:a8:80:8c:1a:d8:
                    5a:94:ba:b5:3a:24:4a:01:47:0a:8d:dd:19:3d:7f:
                    57:59:bd:a7:96:73:4c:18:3f:63:7d:f9:84:25:0c:
                    f0:16:9c:cc:c9:5e:a7:ce:10:3f:25:21:de:ec:e3:
                    9d:87:b1:88:c9:0a:25:eb:a0:ea:58:3c:bd:35:37:
                    42:f6:b1:50:53:04:48:da:53:d4:1d:e5:87:6e:88:
                    32:7e:76:d5:11:70:c2:ad:42:fb:46:52:bb:36:0a:
                    60:92:bb:5d:10:2d:ff:5f:dd:a1:2e:aa:54:ed:a6:
                    5a:e3:80:46:d2:c1:1d:5d:26:1e:20:bd:5c:33:06:
                    d4:64:2b:39:ea:be:5a:1b:82:ba:ef:f6:71:94:b0:
                    a7:05:ad:d9:7d:54:6d:3f:98:6a:d3:88:c4:eb:69:
                    29:c6:1f:78:e4:03:8a:88:7d:e1:e3:ac:75:f3:89:
                    bf:ea:ad:18:78:4d:67:2e:9f:93:02:f8:ec:29:f1:
                    ac:80:0a:d5:c6:4b:4e:3f:c7:9b:2a:06:97:a4:e3:
                    3e:24:09:2e:46:05:e0:b4:3c:09:a2:61:66:7a:26:
                    d4:f3:cb:e1:ce:ec:45:3e:e5:2c:36:2d:b5:5d:35:
                    86:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A2:1F:0D:1C:38:CF:C5:AB:48:12:EE:69:F3:5C:47:F6:F5:4E:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3d0e2bff-51e1-3c6e-93da-17db8903257b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:c8:1d:ca:72:7a:6f:f7:83:3b:c7:60:de:97:34:b5:6f:5c:
         7f:b5:d3:8b:9c:48:93:85:bc:9c:04:fc:dc:1f:c3:66:19:b0:
         7d:03:5a:57:a0:a9:31:fe:88:4c:29:ec:2f:4b:2a:1e:38:7f:
         0c:06:b3:d2:0f:dd:e0:6f:47:87:e9:c0:b4:34:d4:0f:6c:20:
         3c:d8:c4:91:4f:18:2d:4f:ee:c8:3c:08:a3:02:d3:25:0c:56:
         96:ec:65:29:08:d5:01:8c:bc:c0:6d:d4:9d:76:46:59:5a:e8:
         56:b0:23:90:74:2f:2d:c7:ea:b6:3d:c4:51:d2:bd:ef:91:60:
         83:aa:7b:88:ca:91:c1:21:8f:04:f2:83:8e:8c:64:8c:91:5b:
         2a:e5:a3:da:2d:bc:c7:05:3b:0c:0d:40:f0:40:6f:b3:9a:72:
         1e:49:3a:3d:8d:7f:12:e3:58:c7:a4:4e:be:3a:16:23:5b:0c:
         56:18:d9:49:11:ae:91:c7:f2:34:25:c8:da:01:90:ba:c5:2f:
         e7:1c:a2:47:db:0b:7f:6f:56:38:a3:44:a2:84:1d:34:45:de:
         d3:0b:aa:57:1d:b2:e1:b3:ef:e1:13:ff:15:a6:2d:d0:b8:69:
         f4:c7:a5:20:26:2e:8d:b7:fb:a1:81:5a:50:00:6e:1b:c2:c3:
         d0:85:e8:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9mKLNWlPWdT9OvkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDQxMTEyMzcyNVoXDTI1MDcxMDEyMzcyNVowLzEtMCsGA1UEAxMk
ZTU3ZTZjOWItNjdlNS00NjczLWI5MWQtOTE5YWQ4ZjBlMjk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm19ZeriLr992QnDOsCaAen20iLKg7g+qICM
GthalLq1OiRKAUcKjd0ZPX9XWb2nlnNMGD9jffmEJQzwFpzMyV6nzhA/JSHe7OOd
h7GIyQol66DqWDy9NTdC9rFQUwRI2lPUHeWHbogyfnbVEXDCrUL7RlK7Ngpgkrtd
EC3/X92hLqpU7aZa44BG0sEdXSYeIL1cMwbUZCs56r5aG4K67/ZxlLCnBa3ZfVRt
P5hq04jE62kpxh945AOKiH3h46x184m/6q0YeE1nLp+TAvjsKfGsgArVxktOP8eb
KgaXpOM+JAkuRgXgtDwJomFmeibU88vhzuxFPuUsNi21XTWGvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA+iHw0cOM/Fq0gS7mnzXEf29U50MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvM2QwZTJiZmYtNTFlMS0z
YzZlLTkzZGEtMTdkYjg5MDMyNTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+YEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFvIHcpyem/3gzvHYN6XNLVvXH+104ucSJOFvJwE/Nwfw2YZsH0DWleg
qTH+iEwp7C9LKh44fwwGs9IP3eBvR4fpwLQ01A9sIDzYxJFPGC1P7sg8CKMC0yUM
VpbsZSkI1QGMvMBt1J12Rlla6FawI5B0Ly3H6rY9xFHSve+RYIOqe4jKkcEhjwTy
g46MZIyRWyrlo9otvMcFOwwNQPBAb7Oach5JOj2NfxLjWMekTr46FiNbDFYY2UkR
rpHH8jQlyNoBkLrFL+ccokfbC39vVjijRKKEHTRF3tMLqlcdsuGz7+ET/xWmLdC4
afTHpSAmLo23+6GBWlAAbhvCw9CF6PQ=
-----END CERTIFICATE-----