Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6379d5df-905c-33ca-afa7-bea1f6e6f24a.roa
File:                     6379d5df-905c-33ca-afa7-bea1f6e6f24a.roa (raw, json)
Hash identifier:          MN5iuSZPpIZFu+92D77Iu1jPo5n8UUCgg9pPocuH8Y4=
Subject key identifier:   A6:B6:31:29:B9:62:08:9C:4D:06:3B:17:2E:BC:B0:3E:2D:6B:DD:DA
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848EC96A9AA12FE03757A66E340
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6379d5df-905c-33ca-afa7-bea1f6e6f24a.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     397373
IP address blocks:        104.165.226.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:a9:aa:12:fe:03:75:7a:66:e3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=2acea551-1cb1-4367-924a-17c8ab8da079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:05:8d:ac:74:8f:43:1a:ae:5b:bf:e6:53:e5:
                    29:52:7b:ad:fb:1b:8c:5e:49:6d:ba:23:48:93:28:
                    bb:95:ec:a4:70:7d:b8:00:4c:13:de:2f:68:92:d8:
                    fc:44:04:d8:39:17:c1:af:38:e1:0d:60:b4:f9:9f:
                    9a:e6:9f:16:ab:47:3c:8a:10:5b:b4:3f:c2:65:4f:
                    04:9a:fe:61:95:04:87:4f:c8:14:06:21:6a:5c:ca:
                    71:56:e3:b9:b2:ec:da:db:dc:3f:c3:01:c1:9c:f4:
                    ec:22:6f:d9:a5:e5:8d:b0:8b:60:1d:43:b4:92:47:
                    19:58:86:a8:f3:b2:b8:ad:9d:b1:be:8a:07:a5:b9:
                    29:b4:0f:c7:ab:52:61:7c:ce:17:f9:21:22:d0:c1:
                    3d:83:76:e0:4f:ef:46:02:d4:9a:26:03:21:2b:21:
                    28:c7:87:4b:d3:71:79:44:98:03:f8:15:c0:09:f5:
                    12:50:eb:f9:a1:01:cf:76:40:9b:cd:2c:6d:d6:22:
                    a6:0a:f9:af:ff:92:41:6a:82:2e:c5:d4:cc:27:12:
                    b3:01:14:c1:5e:c0:47:ec:c5:ef:97:2f:a6:8a:48:
                    0d:76:5a:46:b4:c7:bf:5b:e0:d3:c3:1f:14:2f:f7:
                    64:b4:32:63:06:44:1b:a7:19:22:fd:76:ad:04:d5:
                    2a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B6:31:29:B9:62:08:9C:4D:06:3B:17:2E:BC:B0:3E:2D:6B:DD:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6379d5df-905c-33ca-afa7-bea1f6e6f24a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:65:f4:ae:a9:cf:27:85:95:a7:aa:29:3d:a5:d2:db:f6:ad:
         ed:3a:49:80:90:0b:53:7f:0e:47:a4:a3:0d:08:c4:b5:16:06:
         ad:48:92:db:cf:f0:77:4c:1f:89:d5:19:6f:72:21:5a:9a:b9:
         f4:a2:54:79:03:da:f8:76:fd:b9:44:7e:44:36:31:70:1e:82:
         59:2d:31:df:4d:6e:02:72:56:03:af:1e:dd:24:66:30:9b:d9:
         b1:17:26:09:7f:8d:fe:a1:b7:10:03:e0:b1:f4:46:34:7b:63:
         17:db:9b:7e:c7:d7:e3:a7:ef:f6:62:e3:00:b6:ac:66:c0:0c:
         ea:ac:3a:f7:2d:56:a6:d4:6d:9d:07:6c:85:de:fc:2a:1b:ea:
         4e:b3:bb:7c:2b:1d:dc:58:0e:5e:d5:6a:09:0e:e0:05:92:55:
         72:56:48:f6:b3:f8:f5:e0:31:98:d9:c2:eb:08:dd:2c:f3:e3:
         02:e8:12:c9:9f:85:21:5f:98:2b:5e:d7:97:09:86:0a:34:c9:
         a4:45:5f:ee:52:ca:e1:06:c3:28:77:1f:00:45:c9:6b:66:1f:
         94:b7:ca:df:8c:85:d6:31:70:9e:ab:53:78:d6:ea:c6:7d:85:
         a8:55:c7:9f:b5:59:f2:96:8b:d1:87:f6:d7:43:b9:b4:4b:ae:
         55:f2:37:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslqmqEv4DdXpm40AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk
MmFjZWE1NTEtMWNiMS00MzY3LTkyNGEtMTdjOGFiOGRhMDc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgWNrHSPQxquW7/mU+UpUnut+xuMXkltuiNI
kyi7leykcH24AEwT3i9oktj8RATYORfBrzjhDWC0+Z+a5p8Wq0c8ihBbtD/CZU8E
mv5hlQSHT8gUBiFqXMpxVuO5suza29w/wwHBnPTsIm/ZpeWNsItgHUO0kkcZWIao
87K4rZ2xvooHpbkptA/Hq1JhfM4X+SEi0ME9g3bgT+9GAtSaJgMhKyEox4dL03F5
RJgD+BXACfUSUOv5oQHPdkCbzSxt1iKmCvmv/5JBaoIuxdTMJxKzARTBXsBH7MXv
ly+mikgNdlpGtMe/W+DTwx8UL/dktDJjBkQbpxki/XatBNUqjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKa2MSm5YgicTQY7Fy68sD4ta93aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNjM3OWQ1ZGYtOTA1Yy0z
M2NhLWFmYTctYmVhMWY2ZTZmMjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKXiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI9l9K6pzyeFlaeqKT2l0tv2re06SYCQC1N/Dkekow0IxLUWBq1IktvP
8HdMH4nVGW9yIVqaufSiVHkD2vh2/blEfkQ2MXAeglktMd9NbgJyVgOvHt0kZjCb
2bEXJgl/jf6htxAD4LH0RjR7Yxfbm37H1+On7/Zi4wC2rGbADOqsOvctVqbUbZ0H
bIXe/Cob6k6zu3wrHdxYDl7VagkO4AWSVXJWSPaz+PXgMZjZwusI3Szz4wLoEsmf
hSFfmCte15cJhgo0yaRFX+5SyuEGwyh3HwBFyWtmH5S3yt+MhdYxcJ6rU3jW6sZ9
hahVx5+1WfKWi9GH9tdDubRLrlXyN3Q=
-----END CERTIFICATE-----