Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/08a1aae1-bf76-3858-b6ae-a1eff354e303.roa
File:                     08a1aae1-bf76-3858-b6ae-a1eff354e303.roa (raw, json)
Hash identifier:          wRuoqkPCnQBdvdFAvgUgAXG/xC5PU5US9vLuEMwjrf0=
Subject key identifier:   08:44:33:22:A8:6E:74:FC:54:77:38:7F:5D:91:63:2F:B7:F3:C0:4C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858497DA46F362EBDFE9197E34B80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/08a1aae1-bf76-3858-b6ae-a1eff354e303.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     395111
IP address blocks:        216.122.170.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:6f:36:2e:bd:fe:91:97:e3:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=74cbeb99-459e-4e26-bf3e-0a09810531a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7e:d3:48:3b:96:8b:84:af:1c:66:57:3e:a0:
                    55:69:f8:2e:2c:45:65:7f:6b:6b:79:b6:d8:3e:7b:
                    01:9a:26:98:77:4e:ca:58:8e:62:d7:95:a5:1d:e5:
                    0c:59:b9:d7:47:7d:c2:7e:06:45:27:dc:01:52:17:
                    a1:e9:bf:8c:07:80:51:fe:3f:a9:4d:e5:b3:65:53:
                    d5:4c:ca:4a:0d:62:b1:ff:bd:17:0c:26:3e:39:33:
                    f9:3a:72:27:f5:f3:73:dc:5c:17:4f:4e:26:69:27:
                    65:5c:1b:3c:8a:26:da:67:d4:da:ce:af:67:20:27:
                    2a:af:5d:79:df:97:6a:b7:e4:c9:bb:d5:db:ea:ef:
                    38:46:05:20:6c:c3:a9:7d:6c:72:85:0f:49:87:61:
                    cb:22:37:ab:7b:33:69:71:97:d0:c7:45:49:9a:46:
                    a3:c9:ca:91:87:04:0a:02:19:fa:29:61:6b:2c:49:
                    62:7f:49:e5:b0:3b:ae:73:a1:49:16:09:91:a0:b5:
                    dc:a2:9d:87:96:11:86:d5:13:e8:3d:1e:b2:18:45:
                    ac:92:3d:95:69:d3:c2:68:5c:88:93:4f:39:a6:a4:
                    3f:62:9e:2f:b1:32:e9:dd:b5:15:a5:02:64:82:13:
                    cd:1c:19:1a:91:a6:c5:01:b1:d2:dd:ee:f0:1e:88:
                    24:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:44:33:22:A8:6E:74:FC:54:77:38:7F:5D:91:63:2F:B7:F3:C0:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/08a1aae1-bf76-3858-b6ae-a1eff354e303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:1c:2b:01:db:b1:e8:20:95:4f:c0:73:f3:9c:8b:94:e5:bb:
         62:da:29:22:43:56:04:45:84:cd:c4:a7:25:f6:96:78:53:2b:
         1f:9d:59:0e:d2:da:ea:95:46:2f:6d:bf:ce:05:d5:88:10:0a:
         e6:24:25:fa:49:12:ae:67:8b:62:32:3c:64:a0:61:ec:ba:73:
         06:1d:14:26:62:88:9f:b2:cf:4b:47:8a:26:a3:5f:52:9c:98:
         1d:19:94:d3:75:6d:52:cc:10:bd:c4:c8:63:b5:b3:09:82:38:
         51:c4:af:97:f5:1d:11:7e:3e:fe:d4:b7:c8:1f:ab:32:f9:b8:
         88:c1:7a:ab:f8:58:e9:98:f4:e2:58:db:3f:ec:03:33:73:10:
         67:0b:e9:f5:45:d9:45:41:bd:b4:d8:0a:de:0d:b5:a0:c3:fb:
         ad:26:3c:28:91:cc:5e:43:d2:b3:63:12:2f:d1:cc:23:6a:36:
         4d:af:05:93:6d:2e:9b:c0:8e:54:92:7a:f1:ca:0c:ae:6e:f0:
         b0:af:da:94:d4:c0:c7:cf:ba:07:24:42:28:46:5c:f7:85:98:
         30:18:ac:c3:c8:f4:39:58:3b:4d:de:fb:89:d3:18:68:fe:ff:
         f5:51:dd:f6:d7:97:1b:6d:9c:72:e1:7d:69:64:93:67:2b:76:
         d3:60:51:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----