Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/2ae40c95-4cc5-33a5-8aa3-054c920d5b48.roa
File:                     2ae40c95-4cc5-33a5-8aa3-054c920d5b48.roa (raw, json)
Hash identifier:          0cCIREmkJ27lNYMNlwQKsk/6OKvhvKDlKuX4WlIaXmk=
Subject key identifier:   BE:37:66:DA:78:82:C3:90:15:21:B4:B7:6C:CA:DA:AD:D2:D5:33:70
Certificate issuer:       /CN=cbf6809f-0b45-47d5-b7cc-7f892ddda0dc
Certificate serial:       010D0C9F43285848EF615AAAF64EDD73BBE56080
Authority key identifier: 9B:06:A9:E2:32:92:2E:F1:AD:4C:84:04:3E:28:D8:DF:11:75:0D:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/2ae40c95-4cc5-33a5-8aa3-054c920d5b48.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        192.58.252.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:5a:aa:f6:4e:dd:73:bb:e5:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbf6809f-0b45-47d5-b7cc-7f892ddda0dc
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=bf8b5c60-0036-4bd1-a761-07f27f6601d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e9:ff:32:29:33:16:e7:96:1f:29:14:45:52:
                    ba:8d:25:03:8b:6f:c6:fa:08:2f:0b:08:27:57:bb:
                    d9:74:84:48:c3:7e:28:39:0f:f8:06:aa:b9:6a:f6:
                    ac:51:ae:23:f9:c0:c4:8c:37:1c:72:b3:47:dd:75:
                    5b:67:c4:6d:db:22:79:bd:22:86:6c:7e:6d:40:d8:
                    04:0a:a7:8f:76:14:60:85:c4:ae:bd:e5:f9:65:3c:
                    3c:f0:28:a7:ac:83:b8:dc:1e:03:da:93:f4:29:c2:
                    cd:20:89:78:bd:bb:e3:1d:bf:27:54:01:95:2c:2e:
                    ac:ba:a8:2d:34:d0:55:48:46:96:09:c0:6c:1b:62:
                    8c:7d:9d:d8:52:c2:71:74:39:7c:16:8c:89:e5:55:
                    71:1e:57:33:da:00:3e:01:02:e0:11:bd:ff:e6:3c:
                    cc:d4:9c:57:10:a6:83:62:f1:d4:48:86:f1:5e:f4:
                    17:eb:75:39:de:c9:f9:62:82:ed:18:00:5f:56:d3:
                    8d:83:55:ae:5b:67:ae:e2:b9:17:8c:bb:58:41:63:
                    e7:da:4e:67:a3:b1:21:e0:82:fe:29:9b:61:25:96:
                    8b:7f:89:10:64:44:02:b4:59:14:4b:c5:24:01:62:
                    43:51:5f:32:28:0d:05:25:68:14:d9:85:6c:9a:ff:
                    15:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:37:66:DA:78:82:C3:90:15:21:B4:B7:6C:CA:DA:AD:D2:D5:33:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/2ae40c95-4cc5-33a5-8aa3-054c920d5b48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.crl

            X509v3 Authority Key Identifier:
                keyid:9B:06:A9:E2:32:92:2E:F1:AD:4C:84:04:3E:28:D8:DF:11:75:0D:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:65:75:5a:84:d2:33:ff:e7:c6:f2:9e:15:09:e9:09:51:b5:
         54:42:1e:34:54:31:d8:a5:9d:c4:d8:b4:66:0d:cc:c0:2b:e3:
         5d:ca:87:9d:ac:67:84:59:02:d6:2c:15:2c:b8:ee:d5:01:66:
         c4:ff:f6:87:64:16:2e:bd:7c:af:89:1a:b3:aa:fa:50:d5:20:
         fc:b7:e5:58:ed:e7:7c:97:87:ef:15:ff:62:6b:56:76:0a:d3:
         c6:c3:bc:e3:9a:70:7d:90:2a:dd:23:5e:de:76:9a:cb:5a:52:
         7d:26:50:ac:df:86:79:b9:97:b0:55:9f:1f:c4:41:f7:1d:1c:
         da:a4:5c:35:41:1e:f1:7d:cc:f3:99:f3:f7:03:54:e5:35:7f:
         8e:0e:ed:c1:d3:bb:86:c9:70:0c:ee:36:5c:d5:d1:02:26:ce:
         1c:71:91:70:47:6a:dc:ae:3a:5c:0d:30:d8:88:79:cb:2b:b4:
         48:fd:0f:ca:17:8e:5a:99:42:46:d7:ed:53:d1:79:40:d8:96:
         5e:80:27:14:41:7d:fd:76:96:17:4c:63:f2:e5:8d:be:60:bd:
         f6:b9:8d:bc:19:0b:be:e4:0c:42:a6:a7:19:17:e2:1f:a4:e0:
         1c:db:35:a7:7c:4f:90:f4:d8:25:69:35:1c:61:1e:35:65:25:
         a7:c9:5c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----