Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/937264ab-8ff2-3819-9b9d-70b132d5d974.roa
File:                     937264ab-8ff2-3819-9b9d-70b132d5d974.roa (raw, json)
Hash identifier:          VDPI9Fls2Va/jRtsVsOnfeZtMAPkhIrEerDrLrN7yPA=
Subject key identifier:   6C:03:4D:F6:B0:79:DE:01:AF:39:69:F3:46:6E:14:2A:95:43:CD:43
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F43285848F22C5FC5E505984CEC873F80
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/937264ab-8ff2-3819-9b9d-70b132d5d974.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     42298
IP address blocks:        206.82.133.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:5f:c5:e5:05:98:4c:ec:87:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=40318c89-3601-4b4f-ad68-0af91453b202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0e:ce:da:56:11:3e:21:8f:aa:5f:ed:3d:a6:
                    f4:a7:97:a9:ec:fd:c8:cc:ab:d9:08:60:05:ba:06:
                    32:57:8a:30:0e:10:7e:a2:c5:8a:5b:a9:aa:ac:85:
                    0f:c8:9c:6d:86:3c:de:86:4e:ba:e0:d6:8f:ce:8e:
                    1a:c2:56:5b:38:ad:68:f5:c9:58:ee:12:54:b8:80:
                    73:6b:0b:f6:1a:f7:49:56:b1:8b:c4:60:07:a8:4b:
                    37:48:21:25:77:7f:a9:4f:25:92:2c:a7:34:03:03:
                    e7:9b:b8:1c:da:3a:2a:5c:e9:f0:21:55:df:f5:eb:
                    13:0b:84:35:89:79:37:d4:39:9a:98:a2:27:1a:1e:
                    1b:00:8b:66:b9:de:eb:62:b2:9e:16:9f:c2:d5:22:
                    7c:a6:0c:8e:a4:21:7d:4b:25:0e:a4:cf:4b:75:86:
                    20:7a:6c:29:68:cd:65:f0:2d:37:df:3e:25:86:8c:
                    a1:ea:ec:27:c6:a6:bc:ba:fc:98:9a:d0:97:7b:b9:
                    5e:8e:71:90:a7:32:7c:29:6d:64:42:ac:90:c1:1a:
                    05:94:f6:e7:92:2a:eb:3b:de:78:55:dd:f5:4c:5b:
                    d0:cf:7a:2f:95:3d:48:aa:cb:35:14:ec:1f:06:41:
                    d5:bf:18:f1:73:8f:cb:ee:20:81:48:5e:f8:8b:e2:
                    a8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:03:4D:F6:B0:79:DE:01:AF:39:69:F3:46:6E:14:2A:95:43:CD:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/937264ab-8ff2-3819-9b9d-70b132d5d974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:43:74:a9:4d:16:28:eb:0b:7c:e5:2c:74:b5:ac:94:b2:56:
         d2:58:17:e4:83:d9:8b:13:a8:c8:92:83:40:3b:36:86:dc:f5:
         f7:6b:dc:63:bf:9c:c4:49:33:28:07:4e:a7:7c:bc:3f:4e:46:
         cd:ab:f9:c0:35:68:7b:7e:e3:a2:89:2c:ff:8b:ad:83:6b:84:
         9f:8b:10:77:82:46:2b:6f:c3:be:06:ed:ec:9d:be:e6:78:3c:
         5d:6d:71:08:54:2d:2c:02:7f:69:c6:97:f1:8c:61:e6:1c:07:
         61:57:d2:08:b4:b6:a4:8a:1f:b4:c4:36:6f:92:cb:5d:bb:49:
         ba:34:7b:71:69:99:db:f0:65:ca:a0:2f:54:ac:8c:d0:93:8a:
         10:db:0e:c9:0f:99:a9:42:ac:5c:88:c7:87:4b:73:74:7f:c3:
         8f:4b:c9:4c:62:15:0a:01:01:f0:7d:2d:7b:89:a5:52:95:7d:
         99:6f:63:85:11:fc:1b:22:43:31:4b:0f:6e:b8:1c:f4:da:c9:
         5f:ee:a4:ff:9c:82:f6:a1:36:48:0d:4b:de:49:45:b7:6d:e2:
         ce:e7:6f:88:04:5f:25:66:9c:11:5a:92:4f:6e:77:f1:3f:03:
         26:2f:f9:d3:cd:91:cc:3e:20:6b:23:07:f6:06:9a:7e:d7:52:
         5c:6b:6b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----