Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/df25fe14-a67f-3ad6-85c9-b047a6d9a916.roa
File:                     df25fe14-a67f-3ad6-85c9-b047a6d9a916.roa (raw, json)
Hash identifier:          WnChSzqjZj1r9f4abzU9vgTx+BmJxC6y2CNmKDLp0r8=
Subject key identifier:   0E:9A:95:3E:F5:EB:D5:74:0E:80:CD:B7:6B:03:A4:9B:8B:F0:1E:A3
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584902EC175577366AE727087900
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/df25fe14-a67f-3ad6-85c9-b047a6d9a916.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     7018
IP address blocks:        206.206.96.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:17:55:77:36:6a:e7:27:08:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=4f6fa01c-d3c5-4eac-89d5-bca97092a437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:69:24:ac:bf:53:16:5e:df:ac:5b:36:cb:e1:
                    d1:b5:ce:92:e9:9d:81:4d:8c:fe:ff:8a:32:1b:26:
                    4a:73:34:8e:48:7f:59:5c:f9:c9:44:29:b2:00:b5:
                    d8:d1:f1:c0:b7:2d:27:68:a4:ae:53:1f:74:ae:e7:
                    8e:a3:61:04:79:65:24:e8:53:e3:68:8c:71:2a:b5:
                    e1:6c:ab:83:cf:79:5f:77:03:2d:3c:d9:40:50:d6:
                    f2:70:29:c9:e2:ac:99:2d:01:23:93:91:e0:19:ec:
                    61:81:a4:be:3a:db:6d:71:79:b0:8b:7d:89:b2:81:
                    2d:ec:41:b8:1d:f2:b0:d5:b1:71:1e:63:76:26:b9:
                    f2:ed:c9:44:98:76:01:8f:cd:c7:67:16:4d:30:6a:
                    7a:74:2a:b2:c0:d6:21:e8:15:6a:0a:10:c2:10:25:
                    68:4f:d3:41:66:41:19:e1:fa:d8:20:e1:15:75:04:
                    80:7b:b2:5f:a1:8a:72:0f:2b:02:96:06:30:d4:2b:
                    6c:58:15:14:09:1f:6c:56:ad:0c:95:82:de:c6:cf:
                    9b:d3:0f:80:73:07:69:5c:42:f2:0d:0c:ed:a9:e8:
                    89:4b:92:5f:cc:ad:14:9a:f3:4f:3a:11:8b:29:a7:
                    98:e2:78:34:22:fd:0d:bf:47:c5:cf:24:54:5d:94:
                    ec:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9A:95:3E:F5:EB:D5:74:0E:80:CD:B7:6B:03:A4:9B:8B:F0:1E:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/df25fe14-a67f-3ad6-85c9-b047a6d9a916.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:bd:26:0e:33:b9:00:dd:1a:fc:cf:91:63:90:35:0b:f1:b9:
         fd:c4:64:04:85:26:cb:61:12:99:69:08:4c:db:84:cd:b9:55:
         61:4d:76:be:3b:2b:88:56:aa:5d:21:f3:01:fb:8e:cb:ed:3e:
         02:b6:e0:00:a6:0a:5c:82:5d:c2:e8:c9:27:14:5c:49:37:c1:
         d4:d3:8b:ba:b9:9c:6e:27:34:3e:ee:26:68:b7:cd:49:02:d5:
         0a:ca:bc:bd:43:90:6d:ae:5d:a8:8a:ea:92:50:a2:bf:7a:d2:
         a0:56:58:6e:df:12:c1:b8:72:22:79:94:f2:75:4e:13:ad:06:
         bc:b4:0d:f1:82:c1:67:3b:96:20:e6:51:6e:42:ac:f4:94:93:
         7e:7e:b0:65:a9:06:ca:ec:ce:9d:2b:68:ef:81:58:b6:6f:1d:
         96:fb:ae:85:51:0f:03:3d:30:94:28:28:71:ed:1b:48:d7:e6:
         f5:19:b2:ee:e7:2c:11:7d:62:eb:18:d4:ab:21:4b:7b:8c:ff:
         a1:53:3e:d7:8e:72:db:91:75:96:91:9a:c9:d3:b3:81:6f:d9:
         71:c9:96:eb:57:16:9d:d2:bd:b2:8b:9f:19:ec:2c:55:e0:e2:
         94:71:98:d7:17:7c:47:81:7a:45:30:50:98:a8:58:f3:02:84:
         c5:92:fb:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7BdVdzZq5ycIeQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
NGY2ZmEwMWMtZDNjNS00ZWFjLTg5ZDUtYmNhOTcwOTJhNDM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGkkrL9TFl7frFs2y+HRtc6S6Z2BTYz+/4oy
GyZKczSOSH9ZXPnJRCmyALXY0fHAty0naKSuUx90rueOo2EEeWUk6FPjaIxxKrXh
bKuDz3lfdwMtPNlAUNbycCnJ4qyZLQEjk5HgGexhgaS+OtttcXmwi32JsoEt7EG4
HfKw1bFxHmN2Jrny7clEmHYBj83HZxZNMGp6dCqywNYh6BVqChDCECVoT9NBZkEZ
4frYIOEVdQSAe7JfoYpyDysClgYw1CtsWBUUCR9sVq0MlYLexs+b0w+AcwdpXELy
DQztqeiJS5JfzK0UmvNPOhGLKaeY4ng0Iv0Nv0fFzyRUXZTs+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA6alT7169V0DoDNt2sDpJuL8B6jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZGYyNWZlMTQtYTY3Zi0z
YWQ2LTg1YzktYjA0N2E2ZDlhOTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzs5gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABW9Jg4zuQDdGvzPkWOQNQvxuf3EZASFJsthEplpCEzbhM25VWFNdr47
K4hWql0h8wH7jsvtPgK24ACmClyCXcLoyScUXEk3wdTTi7q5nG4nND7uJmi3zUkC
1QrKvL1DkG2uXaiK6pJQor960qBWWG7fEsG4ciJ5lPJ1ThOtBry0DfGCwWc7liDm
UW5CrPSUk35+sGWpBsrszp0raO+BWLZvHZb7roVRDwM9MJQoKHHtG0jX5vUZsu7n
LBF9YusY1KshS3uM/6FTPteOctuRdZaRmsnTs4Fv2XHJlutXFp3SvbKLnxnsLFXg
4pRxmNcXfEeBekUwUJioWPMChMWS+ys=
-----END CERTIFICATE-----