Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/0af33e37-3fbd-37d4-ae50-a7e7f28fa9ca.roa
File:                     0af33e37-3fbd-37d4-ae50-a7e7f28fa9ca.roa (raw, json)
Hash identifier:          Wj6l4csu2ROQlQlfXR/UokXbEJ16CIx01u8A9AUg+bI=
Subject key identifier:   41:3C:28:BD:0B:78:55:BB:8B:A9:EB:09:46:E1:D6:42:C8:5D:09:F7
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F43285848F22C657FBC4FF7E36E905800
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/0af33e37-3fbd-37d4-ae50-a7e7f28fa9ca.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     24439
IP address blocks:        64.86.23.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:65:7f:bc:4f:f7:e3:6e:90:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=d09dec5f-dba5-4af4-89c3-9c7ba7cd6979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c4:df:37:d6:a4:28:d8:ec:52:f5:c6:b2:41:
                    28:b9:69:39:b6:1d:05:2a:fb:a2:34:30:12:10:fe:
                    e1:21:cb:77:54:0d:27:85:3e:aa:03:43:b8:eb:2a:
                    cb:f2:08:80:a8:98:80:df:9c:a7:c4:d5:d1:92:07:
                    d4:58:af:be:da:c8:48:ce:7d:c5:a0:22:8d:ce:cb:
                    30:6f:67:f5:e4:a5:2f:6a:0c:99:46:a2:1f:2b:cc:
                    6c:95:b2:3e:5e:09:fc:b3:38:ba:bc:a9:22:24:04:
                    2b:51:fb:b7:8c:aa:81:3a:1c:1c:d3:8b:43:28:5b:
                    0f:27:73:a6:50:22:e0:64:b7:4f:de:fe:8c:22:a7:
                    99:e1:22:d4:1a:3c:63:9e:8e:79:03:44:15:0d:ef:
                    ad:64:dc:4b:7c:a5:e9:1b:bc:5c:4d:e7:fd:1c:a2:
                    42:f5:24:d1:fa:13:8d:6d:e4:d8:61:27:89:28:6b:
                    da:42:1e:78:63:e4:9c:6a:32:e4:98:b6:e8:eb:ce:
                    60:5b:81:5e:ee:4b:b5:2c:16:3b:d5:b2:1d:51:7f:
                    26:7f:72:22:22:5c:de:be:9c:4c:42:34:b5:64:df:
                    f0:66:7b:e5:a6:0b:28:42:1f:ae:18:64:66:9e:54:
                    35:37:76:a5:a9:28:21:25:4d:db:5e:c1:b9:24:1e:
                    0f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:3C:28:BD:0B:78:55:BB:8B:A9:EB:09:46:E1:D6:42:C8:5D:09:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/0af33e37-3fbd-37d4-ae50-a7e7f28fa9ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.86.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:83:d1:de:d4:e6:ee:11:e0:28:43:4a:1d:09:09:95:32:6f:
         7f:60:47:71:a9:b5:e3:04:bf:9f:d4:70:f8:96:ad:41:32:89:
         8d:1e:c5:24:da:72:9e:8a:bb:0a:32:d4:78:af:2b:4c:dd:03:
         b6:bd:8c:7e:f3:95:77:1a:8a:8f:de:7a:66:69:c4:2d:d5:0e:
         c2:28:a5:ec:cc:bb:c8:e9:75:26:05:ed:7d:8a:be:52:05:39:
         b4:4a:06:0d:7e:eb:73:27:c7:e2:18:3a:f5:49:b9:91:da:19:
         e0:81:8d:1a:a1:aa:84:ea:13:ca:03:82:27:d5:14:f2:a1:e6:
         b2:c8:25:69:f6:a4:10:d3:19:17:fc:61:45:0a:a5:04:34:d9:
         5d:17:d1:49:2f:83:c3:dd:b1:a1:75:e0:e7:3d:18:2d:52:80:
         b2:8c:8c:e1:9e:c6:36:28:a1:ba:ec:95:f0:f0:8f:1c:ea:72:
         ee:2e:ca:ab:9b:85:3b:83:0e:17:0d:f6:97:dd:b4:df:7a:cd:
         ea:93:8f:ce:53:71:ae:26:ba:63:9a:55:07:de:96:5b:92:53:
         3a:48:4e:36:fa:42:9a:18:2e:7f:a6:d9:9b:7b:fa:ac:3f:ac:
         da:0e:47:3e:05:97:97:ec:2c:ec:32:a7:68:80:3a:20:01:75:
         0e:27:3b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----