Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/d18c2d05-c95b-3673-893c-f2c5d5ffa612.roa
File:                     d18c2d05-c95b-3673-893c-f2c5d5ffa612.roa (raw, json)
Hash identifier:          gOs25Yk3ABALi/73xkhn4fTzEWmfQCpWosAwXITCKj4=
Subject key identifier:   28:C8:9A:E6:EF:69:72:CF:B6:2A:40:6F:96:12:73:EC:BE:F2:52:2C
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F432858494733E1C86FC65DD8B4F49980
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/d18c2d05-c95b-3673-893c-f2c5d5ffa612.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     396982
IP address blocks:        74.120.14.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:e1:c8:6f:c6:5d:d8:b4:f4:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=8ebb25c7-4251-471b-ab31-8838696bd90c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:30:ef:d2:35:52:1e:4b:4e:5b:3a:9b:cd:5b:
                    b5:5a:79:2c:c3:13:41:c8:20:af:e2:a5:26:ca:60:
                    62:8d:7a:80:d0:de:1f:f9:45:50:76:93:44:fb:cc:
                    d8:09:a1:95:41:b2:c0:5c:b4:59:c0:10:49:fb:9f:
                    7d:b7:21:44:dc:2e:33:5a:0f:41:b4:45:44:55:24:
                    61:1a:2e:36:f0:68:82:00:17:0c:80:21:2f:88:37:
                    6d:45:f8:3f:8d:61:8f:97:10:84:e0:86:77:7b:3d:
                    49:12:0d:69:1e:30:a2:d6:ca:bd:a9:c9:5b:6f:16:
                    aa:04:d9:62:92:75:af:43:54:c0:ae:3d:b7:ca:2a:
                    18:96:44:75:cf:eb:65:f1:e4:ad:48:6f:a8:2a:d9:
                    6f:3b:5b:87:a3:38:5f:75:f8:b7:52:da:d6:c4:e6:
                    14:e5:5c:df:dc:ee:6a:2d:83:90:0a:85:5e:13:93:
                    8c:c7:8c:2a:a7:ef:a0:a2:4c:a3:55:24:01:8a:d3:
                    b7:84:1b:52:53:a6:da:70:bc:f8:53:11:3d:0f:0f:
                    f3:4f:be:2d:04:1e:a8:06:a4:9d:fb:3d:8e:38:8f:
                    3a:fe:7e:51:5a:c7:80:b5:cf:d6:24:d9:76:b7:44:
                    7d:a4:e2:34:f3:62:0d:a2:6e:d0:51:9b:de:dc:34:
                    8d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C8:9A:E6:EF:69:72:CF:B6:2A:40:6F:96:12:73:EC:BE:F2:52:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/d18c2d05-c95b-3673-893c-f2c5d5ffa612.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:93:f9:c4:dc:6f:8c:8d:ae:0a:f9:4c:17:ca:b7:4a:fe:f3:
         1c:89:6a:ce:92:3d:db:1c:12:48:4d:79:87:12:2b:6c:2f:04:
         5b:92:e5:f8:56:6f:0c:a6:04:26:1f:b5:a9:7f:46:18:17:69:
         b8:8b:20:ad:88:4e:66:08:7e:ae:30:bc:2e:ea:e8:ca:37:41:
         fd:27:8a:1f:e0:b4:9a:4e:44:0b:eb:33:4c:05:f3:28:ee:43:
         2e:af:3c:10:68:35:39:a3:1e:e2:99:0b:d8:8e:52:a7:71:b3:
         14:a8:d8:51:8b:d7:a5:18:12:b9:7e:8e:b8:82:15:a5:69:98:
         ca:29:fa:9f:54:3f:a0:cc:a3:45:01:09:d7:a3:6a:20:7a:99:
         be:32:83:d7:f1:8f:7e:53:21:45:9a:f1:c3:88:c8:1f:b4:1a:
         d5:84:c3:fb:ef:3b:ed:19:c9:9b:df:28:e3:15:e4:ea:9f:47:
         29:d4:96:db:41:0d:91:82:69:5d:37:2c:39:d0:1e:47:17:2c:
         0e:70:5a:8d:16:a4:52:36:1c:a1:a0:fd:24:c3:00:3a:a8:78:
         ec:8e:6c:d3:2b:95:d4:26:3d:86:1a:8c:ea:59:0c:dc:c3:f2:
         5e:a9:d3:78:9b:48:d4:6a:df:b8:86:1f:db:e1:33:64:80:21:
         a7:79:5a:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM+HIb8Zd2LT0mYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmM2ODg0ZDYtYjExZS00MjgwLTljNGMtODE3NzI4N2Q5
ODY5MB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk
OGViYjI1YzctNDI1MS00NzFiLWFiMzEtODgzODY5NmJkOTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjDv0jVSHktOWzqbzVu1WnkswxNByCCv4qUm
ymBijXqA0N4f+UVQdpNE+8zYCaGVQbLAXLRZwBBJ+599tyFE3C4zWg9BtEVEVSRh
Gi428GiCABcMgCEviDdtRfg/jWGPlxCE4IZ3ez1JEg1pHjCi1sq9qclbbxaqBNli
knWvQ1TArj23yioYlkR1z+tl8eStSG+oKtlvO1uHozhfdfi3UtrWxOYU5Vzf3O5q
LYOQCoVeE5OMx4wqp++gokyjVSQBitO3hBtSU6bacLz4UxE9Dw/zT74tBB6oBqSd
+z2OOI86/n5RWseAtc/WJNl2t0R9pOI082INom7QUZve3DSN+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCjImubvaXLPtipAb5YSc+y+8lIsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYzY4
ODRkNi1iMTFlLTQyODAtOWM0Yy04MTc3Mjg3ZDk4NjkvZDE4YzJkMDUtYzk1Yi0z
NjczLTg5M2MtZjJjNWQ1ZmZhNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmM2ODg0ZDYtYjExZS00MjgwLTlj
NGMtODE3NzI4N2Q5ODY5L2JjNjg4NGQ2LWIxMWUtNDI4MC05YzRjLTgxNzcyODdk
OTg2OS5jcmwwHwYDVR0jBBgwFoAUFcjuvBdfaxDD3HrPV9TR85APDocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYzY4ODRkNi1iMTFlLTQyODAtOWM0Yy04MTc3
Mjg3ZDk4NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASngOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC6T+cTcb4yNrgr5TBfKt0r+8xyJas6SPdscEkhNeYcSK2wvBFuS5fhW
bwymBCYftal/RhgXabiLIK2ITmYIfq4wvC7q6Mo3Qf0nih/gtJpORAvrM0wF8yju
Qy6vPBBoNTmjHuKZC9iOUqdxsxSo2FGL16UYErl+jriCFaVpmMop+p9UP6DMo0UB
CdejaiB6mb4yg9fxj35TIUWa8cOIyB+0GtWEw/vvO+0ZyZvfKOMV5OqfRynUlttB
DZGCaV03LDnQHkcXLA5wWo0WpFI2HKGg/STDADqoeOyObNMrldQmPYYajOpZDNzD
8l6p03ibSNRq37iGH9vhM2SAIad5Wr4=
-----END CERTIFICATE-----