Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c95032f5-b07e-44ee-b4e6-573f8fb3e50a/fc84b37c-033c-35dd-9cc3-68859b5f0a02.roa
File:                     fc84b37c-033c-35dd-9cc3-68859b5f0a02.roa (raw, json)
Hash identifier:          CyB18ZWW5DrS8o5T3ol3RDIqSALzWwIFPfuiTz3mCy4=
Subject key identifier:   47:54:31:62:A8:77:5E:23:B6:2A:52:5B:7F:E5:34:38:23:1B:1E:1C
Certificate issuer:       /CN=c95032f5-b07e-44ee-b4e6-573f8fb3e50a
Certificate serial:       010D0C9F43285849244E66B77E4330B7794EB5C0
Authority key identifier: A0:6B:64:59:9B:63:CF:12:58:E7:E0:E3:56:9A:A6:85:12:91:AD:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c95032f5-b07e-44ee-b4e6-573f8fb3e50a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c95032f5-b07e-44ee-b4e6-573f8fb3e50a/fc84b37c-033c-35dd-9cc3-68859b5f0a02.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     62642
IP address blocks:        206.220.91.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:66:b7:7e:43:30:b7:79:4e:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c95032f5-b07e-44ee-b4e6-573f8fb3e50a
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=a182a0e4-42a5-433b-8053-dfe177072659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:72:bc:a1:aa:d1:5f:e3:e4:62:95:dc:9d:24:
                    76:7a:68:e3:1a:c2:ef:ab:42:da:9e:f2:0e:77:42:
                    bb:f4:df:79:f5:5f:25:99:f0:5a:c3:3c:43:98:6a:
                    1b:66:7a:19:96:f4:16:c1:63:75:58:17:9b:bf:e2:
                    27:3c:af:87:9c:84:13:7b:39:ce:f6:26:96:d2:7c:
                    f2:9d:89:9d:36:91:af:b8:bd:51:16:6f:44:64:40:
                    80:9d:72:1e:5e:ca:19:e7:8f:76:11:2c:ad:96:23:
                    6a:5a:da:61:97:29:0b:32:5b:b0:da:b5:1d:08:3a:
                    51:4f:d2:53:42:4b:83:15:eb:37:d5:63:ca:9d:4e:
                    31:31:0f:31:56:ae:60:09:e0:9b:d8:fc:0a:6e:e6:
                    d6:6f:b8:fc:20:14:84:09:be:e8:33:87:fc:87:e0:
                    42:41:40:2a:f2:d7:16:b6:76:ee:c9:38:4e:c1:9c:
                    f3:41:10:01:b4:09:4f:35:56:21:74:c5:34:b5:59:
                    2c:fc:4e:22:c0:ae:2e:4f:84:b2:67:77:31:b7:3e:
                    c2:31:2b:bb:fe:a5:5a:71:63:26:00:3e:fe:f5:8e:
                    8f:95:ba:3e:b0:2a:60:ca:d7:6e:2f:38:cf:eb:dc:
                    ca:79:cb:a7:8a:ee:d2:7e:42:55:42:1e:ab:cf:1b:
                    cf:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:54:31:62:A8:77:5E:23:B6:2A:52:5B:7F:E5:34:38:23:1B:1E:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c95032f5-b07e-44ee-b4e6-573f8fb3e50a/fc84b37c-033c-35dd-9cc3-68859b5f0a02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c95032f5-b07e-44ee-b4e6-573f8fb3e50a/c95032f5-b07e-44ee-b4e6-573f8fb3e50a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:6B:64:59:9B:63:CF:12:58:E7:E0:E3:56:9A:A6:85:12:91:AD:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c95032f5-b07e-44ee-b4e6-573f8fb3e50a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.220.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:7c:55:09:6a:b4:cf:3b:a4:74:44:24:7e:5e:2c:9d:5f:d3:
         7e:4d:9d:45:33:f1:5f:0a:17:d9:b7:86:1d:c8:c6:9a:d7:a4:
         8c:35:fc:98:1c:fb:9b:ee:73:e5:bf:48:17:c7:f8:72:bf:8f:
         ea:35:f5:ca:4e:49:f0:fe:28:91:cc:82:74:e2:0c:17:44:8b:
         b5:b1:88:53:9d:f1:8b:0f:3e:b0:65:45:bb:c8:ab:34:b7:8f:
         c1:43:7b:24:a0:6c:91:a8:59:dd:6d:6e:54:f5:82:fb:e0:a7:
         41:fa:67:bb:bc:18:d3:54:24:fd:f1:c6:0d:c7:d5:ff:af:68:
         1e:ca:cf:2d:0c:b8:7a:bb:d5:35:b0:34:72:76:bd:8e:24:39:
         d9:59:53:fd:d5:62:5e:96:d4:1a:12:d9:a1:25:ee:ef:b1:82:
         a8:ca:4e:49:54:59:3e:d7:fb:3a:9d:9a:c9:26:06:df:43:29:
         a3:55:d3:9a:a9:c3:b9:8c:60:0a:f7:12:5d:18:5b:22:5d:96:
         94:2c:98:fa:a3:b8:13:ac:9c:63:27:75:62:c4:ca:5d:9c:51:
         e2:37:fc:06:8c:06:2e:15:1f:41:fc:b3:6d:de:e9:8d:a3:67:
         1a:3c:3b:a7:25:c6:58:82:75:97:fb:c3:9f:66:48:58:94:b9:
         51:15:a5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----