Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5efdcf1c-5627-3808-a14b-64f618cbc7b1.roa
File:                     5efdcf1c-5627-3808-a14b-64f618cbc7b1.roa (raw, json)
Hash identifier:          689Q4HO26iPthb1pMGvqzIBhmCwLKScr9RZoeG/uoQc=
Subject key identifier:   04:2F:A5:3F:1A:22:AF:E2:A2:8A:E5:E9:95:E9:40:32:D7:7E:DB:D2
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858497C3EEEF74909410ED95682C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5efdcf1c-5627-3808-a14b-64f618cbc7b1.roa
Signing time:             Fri 11 Apr 2025 01:00:48 +0000
ROA not before:           Fri 11 Apr 2025 01:00:48 +0000
ROA not after:            Thu 10 Jul 2025 01:00:48 +0000
asID:                     400536
IP address blocks:        104.253.70.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7c:3e:ee:f7:49:09:41:0e:d9:56:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 11 01:00:48 2025 GMT
            Not After : Jul 10 01:00:48 2025 GMT
        Subject: CN=c6dc85b8-7c2a-4522-9710-034e8d1f9993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:36:bc:03:5a:dc:29:3f:aa:1b:26:4f:da:5a:
                    d0:45:79:f9:91:6b:9d:01:ff:da:b5:2e:7f:40:e5:
                    cd:bf:0b:38:25:25:1a:68:1a:62:b9:ba:a7:f1:43:
                    78:83:f2:8d:43:60:5f:06:b2:f6:b0:f2:4a:1b:e1:
                    de:ff:c2:bc:44:0e:fb:ad:cf:d8:64:9d:40:5f:f4:
                    11:89:0a:88:cf:20:3a:cd:8c:c4:49:ac:61:d1:93:
                    a4:cc:9f:88:ca:2b:8f:7a:83:a4:53:71:aa:6a:df:
                    1b:2d:9d:68:0e:1e:98:20:70:a9:64:80:06:85:b8:
                    5a:84:a2:e0:7b:10:9a:9c:cf:c1:68:b3:de:74:c2:
                    1d:23:af:0e:5f:6f:63:2f:7c:42:22:be:aa:3e:99:
                    14:b3:f0:ec:ca:da:9a:e3:d9:92:ee:23:2c:d0:aa:
                    4e:d5:85:76:84:2e:08:74:a8:67:45:c7:5c:8a:1a:
                    a4:48:58:f3:21:94:ae:e5:0a:c4:76:f3:77:2d:95:
                    42:cf:90:92:97:e3:7a:65:ea:ac:d6:57:13:aa:b0:
                    77:67:36:77:cf:59:6a:c4:95:1f:f8:7f:f1:2c:b0:
                    b1:59:6d:a5:f1:a6:a1:c3:c8:dd:2b:bc:04:97:7b:
                    05:59:d9:5a:af:dd:e7:4a:f2:54:66:a8:d0:c9:fe:
                    61:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2F:A5:3F:1A:22:AF:E2:A2:8A:E5:E9:95:E9:40:32:D7:7E:DB:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5efdcf1c-5627-3808-a14b-64f618cbc7b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:c5:e6:f6:a0:4c:97:69:d7:9c:dd:3f:37:67:67:8b:e7:94:
         92:b6:44:84:e5:2a:a4:06:c6:47:97:54:26:2b:86:c5:d0:70:
         c5:84:6a:26:9d:ef:6f:67:f3:10:30:0c:5b:69:08:9a:86:38:
         5e:43:14:d6:63:7b:c7:1e:82:7c:c1:c8:53:9d:21:c6:01:1d:
         22:10:d4:ad:8c:2d:c6:9e:b2:4a:ec:07:33:74:5e:98:14:72:
         4c:ab:f8:b8:9d:75:d1:64:e9:a6:fa:6b:dc:a7:e3:59:6d:3d:
         28:ff:3a:78:79:61:c0:74:39:7c:db:a6:11:57:87:58:6a:cd:
         81:a2:d2:13:d1:f7:87:16:a4:56:38:85:6b:b2:76:74:87:13:
         9a:0a:49:3d:7b:4b:72:fd:6c:c3:1a:17:c8:37:01:74:ac:0b:
         e0:c9:eb:42:bf:5b:f4:15:18:c9:9c:88:a8:e5:ef:36:a5:10:
         2a:38:b1:9f:fd:f6:29:1f:f4:ad:7c:b7:07:53:1b:5a:4d:64:
         52:95:aa:17:ef:75:3f:d6:83:53:2a:85:3e:e2:eb:92:2a:71:
         40:cd:23:2f:be:1c:00:a8:73:31:00:1c:1f:77:ab:02:4f:cd:
         a8:86:c7:9b:ec:18:10:8f:62:95:af:0f:16:6b:0a:f4:0f:f3:
         4c:d0:77:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl8Pu73SQlBDtlWgsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDQxMTAxMDA0OFoXDTI1MDcxMDAxMDA0OFowLzEtMCsGA1UEAxMk
YzZkYzg1YjgtN2MyYS00NTIyLTk3MTAtMDM0ZThkMWY5OTkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDa8A1rcKT+qGyZP2lrQRXn5kWudAf/atS5/
QOXNvws4JSUaaBpiubqn8UN4g/KNQ2BfBrL2sPJKG+He/8K8RA77rc/YZJ1AX/QR
iQqIzyA6zYzESaxh0ZOkzJ+IyiuPeoOkU3Gqat8bLZ1oDh6YIHCpZIAGhbhahKLg
exCanM/BaLPedMIdI68OX29jL3xCIr6qPpkUs/Dsytqa49mS7iMs0KpO1YV2hC4I
dKhnRcdcihqkSFjzIZSu5QrEdvN3LZVCz5CSl+N6Zeqs1lcTqrB3ZzZ3z1lqxJUf
+H/xLLCxWW2l8aahw8jdK7wEl3sFWdlar93nSvJUZqjQyf5hDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAQvpT8aIq/ioorl6ZXpQDLXftvSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNWVmZGNmMWMtNTYyNy0z
ODA4LWExNGItNjRmNjE4Y2JjN2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP1GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJDF5vagTJdp15zdPzdnZ4vnlJK2RITlKqQGxkeXVCYrhsXQcMWEaiad
729n8xAwDFtpCJqGOF5DFNZje8cegnzByFOdIcYBHSIQ1K2MLcaeskrsBzN0XpgU
ckyr+LidddFk6ab6a9yn41ltPSj/Onh5YcB0OXzbphFXh1hqzYGi0hPR94cWpFY4
hWuydnSHE5oKST17S3L9bMMaF8g3AXSsC+DJ60K/W/QVGMmciKjl7zalECo4sZ/9
9ikf9K18twdTG1pNZFKVqhfvdT/Wg1MqhT7i65IqcUDNIy++HACoczEAHB93qwJP
zaiGx5vsGBCPYpWvDxZrCvQP80zQd44=
-----END CERTIFICATE-----