Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7f4d4bcd-dc1c-3e3b-94d7-51303119ea78.roa
File:                     7f4d4bcd-dc1c-3e3b-94d7-51303119ea78.roa (raw, json)
Hash identifier:          0NW9OtDMpZO9AIb5nGX8/bDmy27zYBS5VWcentfpHRw=
Subject key identifier:   28:57:A5:88:9C:A1:2C:A3:08:D8:22:54:1E:A7:B8:E5:5D:42:1F:EA
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285848E9DE535E67160D26162FA600
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7f4d4bcd-dc1c-3e3b-94d7-51303119ea78.roa
Signing time:             Mon 17 Feb 2025 14:38:11 +0000
ROA not before:           Mon 17 Feb 2025 14:38:11 +0000
ROA not after:            Sun 18 May 2025 13:38:11 +0000
asID:                     401558
IP address blocks:        206.206.109.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:de:53:5e:67:16:0d:26:16:2f:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb 17 14:38:11 2025 GMT
            Not After : May 18 13:38:11 2025 GMT
        Subject: CN=9f52cd3c-269a-4b21-8ab5-12571ec5fb7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7b:bb:8a:7e:31:c0:89:11:bc:69:2c:74:ed:
                    96:cc:bf:5f:d8:31:5b:ab:f4:32:0d:bf:a3:97:60:
                    38:c6:1a:67:41:ec:cd:3c:10:6c:bb:4c:59:34:a6:
                    ec:3a:3f:54:e9:fb:12:18:6c:28:a4:d2:23:92:ec:
                    5a:55:e6:d8:b4:ac:f5:3a:04:66:11:64:e9:e5:43:
                    e2:35:ce:c4:e9:fd:81:80:3c:c0:a9:72:eb:e8:76:
                    04:e6:13:1b:ab:67:9a:2d:1e:64:8d:81:9e:e3:14:
                    1e:bf:33:ca:22:e9:32:0b:42:0b:78:67:16:df:b3:
                    0d:50:a9:d2:d5:b4:63:02:18:03:d1:2f:8c:84:3d:
                    6f:53:21:a4:f2:cb:fa:e8:30:78:ac:5e:a9:35:58:
                    6a:7d:31:d6:cc:2c:18:60:90:dc:20:e6:eb:2b:ff:
                    34:5b:1b:04:e0:21:d3:24:62:8c:1d:77:a9:cf:42:
                    22:69:3e:b6:58:37:d1:49:38:bc:cc:77:2f:dc:61:
                    b7:52:f8:f6:0e:ac:67:f5:79:9d:a0:50:f1:56:12:
                    b7:a1:2c:44:51:8f:ef:2e:5b:e7:27:65:51:33:a8:
                    23:26:d0:ee:b9:24:fa:44:70:70:92:90:b3:9e:31:
                    76:b8:87:77:b3:1e:53:3b:d7:f2:de:72:7a:a7:08:
                    68:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:57:A5:88:9C:A1:2C:A3:08:D8:22:54:1E:A7:B8:E5:5D:42:1F:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7f4d4bcd-dc1c-3e3b-94d7-51303119ea78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:1b:7e:fe:36:b6:df:3a:7b:7e:33:89:6c:55:2c:28:ec:05:
         c2:9b:15:73:28:97:5c:c3:28:f5:2b:84:a8:87:57:49:51:92:
         a9:b7:5b:a5:36:13:7f:4d:f8:3c:b6:92:85:18:07:1a:71:f2:
         74:09:dd:71:cc:f3:f4:9e:e3:3d:e2:1c:a8:ad:7a:f8:ce:50:
         6a:33:99:cb:42:38:f6:f5:b9:91:96:15:d1:51:f1:6b:3b:15:
         31:cd:ba:0b:fd:16:e0:04:0b:f0:b2:d5:ea:57:38:68:92:5e:
         19:a9:ae:b1:f5:6d:2c:3b:4d:64:aa:39:10:41:9d:50:a0:09:
         2d:b8:95:26:77:91:e9:c9:9b:9d:4a:42:78:72:98:b4:dc:8d:
         64:9d:3c:56:0f:73:7f:e0:e3:49:56:73:1e:4e:29:12:18:d0:
         50:f8:01:81:f4:c0:01:44:df:af:3c:6e:c8:ec:6f:19:7b:f7:
         8c:6e:40:5a:18:ab:64:85:b8:e0:84:4d:99:fb:24:f8:95:0b:
         ac:89:2f:f0:d5:fc:75:8c:d7:18:26:b0:61:b4:53:d8:0b:76:
         ec:f9:a2:1b:4b:e7:25:a5:3f:40:6b:6f:84:26:6e:c7:54:a6:
         6b:af:63:c4:90:7b:89:97:dd:bf:6e:12:c3:95:18:7c:9f:b7:
         8b:b0:dd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----