Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/d80ed147-244e-375e-9985-2d43b3e9d55d.roa
File:                     d80ed147-244e-375e-9985-2d43b3e9d55d.roa (raw, json)
Hash identifier:          7QmKWgt0/obsN+AFFpM4JkqcPbCMKFgjXLb1984f03A=
Subject key identifier:   69:0A:CF:BA:53:F3:38:15:7E:B9:97:99:CD:63:C3:B4:24:FC:42:44
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F43285848F22C61486BDB8BD4C04AE380
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/d80ed147-244e-375e-9985-2d43b3e9d55d.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     12271
IP address blocks:        66.110.97.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:61:48:6b:db:8b:d4:c0:4a:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=e26be07f-5c4d-4a76-b102-142d29dc5ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:96:69:60:64:ae:a0:c8:7c:8f:e7:9d:27:7f:
                    22:ba:f8:83:ab:56:28:4b:93:81:b8:01:1e:76:16:
                    b0:c8:c3:37:1a:9c:27:a2:64:bf:ab:97:d8:16:23:
                    dc:78:28:56:2e:23:6c:25:80:6f:c1:89:fe:89:5e:
                    8a:6f:27:0d:e8:1d:fd:8b:89:4a:df:bc:4a:e3:a6:
                    70:18:9a:b5:a3:c0:e6:20:b6:c9:f7:42:d4:b4:bd:
                    da:51:0f:b0:dc:97:e2:18:22:af:86:29:41:96:07:
                    de:e2:40:df:3b:0b:d5:42:12:71:2a:8a:15:10:76:
                    28:bd:73:26:12:06:97:25:a7:11:0d:d3:ae:72:c1:
                    4b:34:78:50:f2:dc:ec:b5:56:7c:0a:da:98:6d:20:
                    e5:b3:85:16:40:e7:e7:a1:7f:e2:39:7d:aa:d6:47:
                    4a:25:8d:67:7f:44:a9:0a:f1:de:a3:56:e8:dc:d6:
                    66:9b:e4:fc:7f:2d:ce:ef:76:8f:06:40:47:dc:c0:
                    a2:d0:6f:e8:64:38:69:f5:cc:9d:83:83:13:0a:43:
                    1a:40:64:54:9d:9d:24:35:01:60:c8:7a:38:f1:ce:
                    a5:79:7a:4f:5d:ca:8c:7a:1d:cb:93:de:33:5a:48:
                    ea:2b:ac:d1:12:12:48:45:a8:d2:d8:31:93:01:a3:
                    97:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0A:CF:BA:53:F3:38:15:7E:B9:97:99:CD:63:C3:B4:24:FC:42:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/d80ed147-244e-375e-9985-2d43b3e9d55d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.110.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:89:ce:b7:29:87:f7:99:1b:7e:e5:35:f2:1a:80:6d:cf:eb:
         a0:be:34:3c:16:33:73:90:1e:69:7d:5f:0d:e4:f1:84:fc:e3:
         01:1d:8f:94:2e:52:67:e0:90:02:49:0a:fd:a3:86:f0:89:89:
         3f:ba:02:ee:bb:70:68:76:e5:c2:7b:88:98:cc:3a:28:f5:9f:
         a9:45:4b:78:61:7e:d6:14:3d:22:ee:c9:ad:61:3d:35:7c:1b:
         dc:7b:1e:a6:76:8a:1f:2f:35:a9:12:65:c0:fd:a9:01:06:40:
         02:48:de:d9:d1:f4:9a:a7:b6:57:9d:4e:90:6d:48:f9:72:8c:
         00:cb:d6:4e:1e:63:31:ef:50:24:1a:f9:7d:ba:91:f3:cc:0c:
         4d:06:31:ef:6a:15:92:82:47:80:0a:ed:ca:87:ab:0c:da:b0:
         a2:6d:6a:37:26:13:df:f4:70:71:7d:f6:9b:86:9a:34:dd:09:
         d0:5c:8a:89:ea:0b:c3:b0:5b:cc:c2:5f:e1:c7:91:e9:96:90:
         b1:ca:2c:fa:21:36:3f:a0:f4:fd:c0:c4:9a:3f:33:c5:60:ad:
         a2:89:1e:00:e7:81:c9:6b:03:e8:9f:72:69:c6:b3:95:bc:e3:
         ae:ab:a6:07:f7:a1:c0:6a:11:35:33:1f:99:b9:d3:ab:ef:3b:
         96:63:b4:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGFIa9uL1MBK44AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm
NzU4MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZTI2YmUwN2YtNWM0ZC00YTc2LWIxMDItMTQyZDI5ZGM1ZWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpZpYGSuoMh8j+edJ38iuviDq1YoS5OBuAEe
dhawyMM3GpwnomS/q5fYFiPceChWLiNsJYBvwYn+iV6KbycN6B39i4lK37xK46Zw
GJq1o8DmILbJ90LUtL3aUQ+w3JfiGCKvhilBlgfe4kDfOwvVQhJxKooVEHYovXMm
EgaXJacRDdOucsFLNHhQ8tzstVZ8CtqYbSDls4UWQOfnoX/iOX2q1kdKJY1nf0Sp
CvHeo1bo3NZmm+T8fy3O73aPBkBH3MCi0G/oZDhp9cydg4MTCkMaQGRUnZ0kNQFg
yHo48c6leXpPXcqMeh3Lk94zWkjqK6zREhJIRajS2DGTAaOX5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGkKz7pT8zgVfrmXmc1jw7Qk/EJEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2
MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvZDgwZWQxNDctMjQ0ZS0z
NzVlLTk5ODUtMmQ0M2IzZTlkNTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk
ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1
Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz
ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQm5hMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADKJzrcph/eZG37lNfIagG3P66C+NDwWM3OQHml9Xw3k8YT84wEdj5Qu
UmfgkAJJCv2jhvCJiT+6Au67cGh25cJ7iJjMOij1n6lFS3hhftYUPSLuya1hPTV8
G9x7HqZ2ih8vNakSZcD9qQEGQAJI3tnR9JqntledTpBtSPlyjADL1k4eYzHvUCQa
+X26kfPMDE0GMe9qFZKCR4AK7cqHqwzasKJtajcmE9/0cHF99puGmjTdCdBcionq
C8OwW8zCX+HHkemWkLHKLPohNj+g9P3AxJo/M8VgraKJHgDngclrA+ifcmnGs5W8
466rpgf3ocBqETUzH5m506vvO5ZjtDs=
-----END CERTIFICATE-----