Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ca29dea6-4217-3d54-90ce-d14c1fd2603b.roa
File:                     ca29dea6-4217-3d54-90ce-d14c1fd2603b.roa (raw, json)
Hash identifier:          7D66lEuNu1H7N090WclyWG+FZdkmkZj6uhPZS+FGpJk=
Subject key identifier:   5B:56:CE:14:F9:F0:4A:2F:17:98:31:F1:36:D2:86:43:DC:08:81:87
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858497D998A289F153DFDF8D75680
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ca29dea6-4217-3d54-90ce-d14c1fd2603b.roa
Signing time:             Fri 11 Apr 2025 12:39:14 +0000
ROA not before:           Fri 11 Apr 2025 12:39:14 +0000
ROA not after:            Thu 10 Jul 2025 12:39:14 +0000
asID:                     18779
IP address blocks:        23.230.146.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:99:8a:28:9f:15:3d:fd:f8:d7:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 11 12:39:14 2025 GMT
            Not After : Jul 10 12:39:14 2025 GMT
        Subject: CN=028b15f1-5fec-4abb-96d9-da80c055c57c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:07:c5:fb:e1:96:5d:99:6f:7a:ac:b8:99:ed:
                    41:b5:cc:db:dc:2b:ac:1d:bb:1c:d2:da:5e:a0:d3:
                    3c:34:45:3d:a4:42:27:52:38:71:78:5a:ea:60:4c:
                    da:bc:60:54:cd:b7:04:1a:f5:1e:d0:63:90:38:af:
                    37:92:d6:18:5c:ca:4e:d1:a4:54:26:1f:6d:89:97:
                    97:33:40:62:91:f4:a1:86:d3:1c:2b:d2:ef:b5:47:
                    09:90:aa:10:b6:82:fc:34:56:62:19:4a:17:35:41:
                    72:ea:57:3e:8f:ca:f6:dc:82:22:28:1e:c0:cd:fd:
                    e1:bf:41:de:fa:ec:87:d0:ff:4d:73:2f:a1:4d:4e:
                    6c:b2:06:e9:b3:e7:a5:6c:da:4e:c1:df:7a:ec:55:
                    b0:12:3c:53:96:2b:79:12:d0:fb:a3:f6:ce:50:8a:
                    aa:f4:7c:5c:09:49:d9:ae:c5:85:a2:81:4d:5f:89:
                    94:16:c1:8b:36:ba:2f:4a:b0:de:93:3c:ea:3d:70:
                    db:da:bb:89:5e:66:df:ac:e5:20:72:bf:ba:1b:91:
                    be:98:8a:f1:2c:ba:fb:04:b9:b8:67:28:0e:5a:94:
                    b4:66:20:29:06:bf:9f:b5:74:25:b2:b7:74:0c:8d:
                    79:e9:81:b6:d0:68:bd:89:af:a4:16:ea:34:74:54:
                    36:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:56:CE:14:F9:F0:4A:2F:17:98:31:F1:36:D2:86:43:DC:08:81:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ca29dea6-4217-3d54-90ce-d14c1fd2603b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:54:08:4a:ef:b6:7c:4f:0f:b2:d7:47:cf:3d:3a:17:bc:e9:
         ed:bd:74:b5:b5:0c:b1:67:61:21:3a:ac:ac:da:83:6d:fd:79:
         b3:2a:27:6e:d3:13:9e:4b:65:e0:ed:d4:b2:e0:0e:7c:44:cf:
         28:78:14:0e:ed:43:49:fc:96:9e:36:17:e2:d9:7a:e8:d1:f6:
         cd:dd:8c:94:c7:ac:5e:b3:05:20:c4:c7:81:e7:46:d7:d1:27:
         18:0e:34:27:d5:31:42:d7:ca:78:b3:aa:dd:50:ee:0d:cf:01:
         7f:21:67:fc:47:80:db:0f:1d:74:3b:a4:dc:f1:9b:05:6c:47:
         e9:e5:84:99:09:17:a8:e4:af:50:b5:ae:6f:3c:05:c9:47:bf:
         3f:82:c2:c1:47:74:67:78:5c:f0:2a:a4:f7:f3:5b:7f:bb:4f:
         38:70:4c:f2:04:2e:19:f7:42:27:8b:7d:b6:b4:1c:da:8f:0b:
         4f:da:85:4f:ee:6a:e0:32:4f:af:ac:45:0d:ca:8e:43:74:18:
         4c:43:89:7b:9e:f7:26:e4:9f:45:a1:0d:75:73:2b:ad:f8:cd:
         7b:c0:78:74:63:61:84:18:0f:ec:25:71:f2:6f:46:08:7b:8c:
         6d:33:7f:5c:d9:ca:76:44:42:86:f6:0d:ad:b3:9e:89:6d:97:
         29:ea:a9:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9mYoonxU9/fjXVoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDQxMTEyMzkxNFoXDTI1MDcxMDEyMzkxNFowLzEtMCsGA1UEAxMk
MDI4YjE1ZjEtNWZlYy00YWJiLTk2ZDktZGE4MGMwNTVjNTdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgfF++GWXZlveqy4me1Btczb3CusHbsc0tpe
oNM8NEU9pEInUjhxeFrqYEzavGBUzbcEGvUe0GOQOK83ktYYXMpO0aRUJh9tiZeX
M0BikfShhtMcK9LvtUcJkKoQtoL8NFZiGUoXNUFy6lc+j8r23IIiKB7Azf3hv0He
+uyH0P9Ncy+hTU5ssgbps+elbNpOwd967FWwEjxTlit5EtD7o/bOUIqq9HxcCUnZ
rsWFooFNX4mUFsGLNrovSrDekzzqPXDb2ruJXmbfrOUgcr+6G5G+mIrxLLr7BLm4
ZygOWpS0ZiApBr+ftXQlsrd0DI156YG20Gi9ia+kFuo0dFQ26wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFtWzhT58EovF5gx8TbShkPcCIGHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvY2EyOWRlYTYtNDIxNy0z
ZDU0LTkwY2UtZDE0YzFmZDI2MDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+aSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAxUCErvtnxPD7LXR889Ohe86e29dLW1DLFnYSE6rKzag239ebMqJ27T
E55LZeDt1LLgDnxEzyh4FA7tQ0n8lp42F+LZeujR9s3djJTHrF6zBSDEx4HnRtfR
JxgONCfVMULXynizqt1Q7g3PAX8hZ/xHgNsPHXQ7pNzxmwVsR+nlhJkJF6jkr1C1
rm88BclHvz+CwsFHdGd4XPAqpPfzW3+7TzhwTPIELhn3QieLfba0HNqPC0/ahU/u
auAyT6+sRQ3KjkN0GExDiXue9ybkn0WhDXVzK634zXvAeHRjYYQYD+wlcfJvRgh7
jG0zf1zZynZEQob2Da2znoltlynqqX8=
-----END CERTIFICATE-----