Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/ac6d9daf-5bf7-3f4c-9125-9dc6b663c5d2.roa
File:                     ac6d9daf-5bf7-3f4c-9125-9dc6b663c5d2.roa (raw, json)
Hash identifier:          u/epdzw/Woyr8/xdlAa2iCbmxJdSUnaKsVvAZzy/+z8=
Subject key identifier:   66:2D:7C:0B:88:3B:E5:5E:62:2D:76:A7:3F:9B:EC:31:A6:80:BB:81
Certificate issuer:       /CN=141d1fb1-9841-4771-b75f-7e85f1329175
Certificate serial:       010D0C9F43285848EC96998400DA5F5414F82080
Authority key identifier: 32:F7:5B:FA:D4:1D:B4:2F:67:4A:39:86:40:97:21:08:A4:FB:86:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/ac6d9daf-5bf7-3f4c-9125-9dc6b663c5d2.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     15830
IP address blocks:        142.215.4.0/22 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:99:84:00:da:5f:54:14:f8:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=141d1fb1-9841-4771-b75f-7e85f1329175
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=592ad483-737e-4c4e-994e-0e441e1caeee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:49:c0:a4:e6:c0:04:d3:d0:08:11:34:86:fa:
                    e5:49:cf:9b:e4:c4:39:6b:a5:58:04:f9:a5:5f:7f:
                    f2:36:75:cc:2e:2b:d3:a5:ac:36:7b:d4:c8:0a:9e:
                    99:e0:66:39:a5:37:0e:8d:0a:1a:ca:d8:d0:5e:03:
                    6e:7a:d4:b8:e0:59:0d:55:82:4c:93:48:43:91:b7:
                    4f:f1:94:48:4f:df:7f:2b:ac:0e:99:97:21:9f:b1:
                    16:e5:60:90:68:52:fd:fd:7e:3d:db:53:92:93:0c:
                    c5:a1:fc:43:01:8d:ec:9c:6a:f8:d9:12:d0:04:18:
                    0c:36:9b:a0:25:45:d9:6c:15:ab:25:ae:c8:93:b1:
                    e9:ec:cc:49:9a:d9:0c:8c:9e:f2:65:85:01:d0:53:
                    28:33:bc:69:00:0e:3f:c9:c5:23:f1:df:22:7b:5a:
                    01:d0:dc:0c:af:21:40:85:85:a5:b2:1d:4e:31:3a:
                    5d:af:b7:7f:8e:93:83:3d:f6:81:74:17:a0:bf:ec:
                    ee:33:82:77:9b:94:b3:ee:9c:a2:a0:09:2c:82:3f:
                    2b:21:57:6c:ee:6e:b2:a2:e8:28:91:5a:8c:a8:63:
                    43:5f:62:81:1b:51:dc:98:36:d5:5e:08:c5:75:7b:
                    c8:06:c9:18:6d:dd:61:8a:d5:2e:37:1c:6c:d8:19:
                    44:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:2D:7C:0B:88:3B:E5:5E:62:2D:76:A7:3F:9B:EC:31:A6:80:BB:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/ac6d9daf-5bf7-3f4c-9125-9dc6b663c5d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/141d1fb1-9841-4771-b75f-7e85f1329175.crl

            X509v3 Authority Key Identifier:
                keyid:32:F7:5B:FA:D4:1D:B4:2F:67:4A:39:86:40:97:21:08:A4:FB:86:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.215.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:ec:79:f6:91:2a:cd:44:f8:ee:64:ac:2e:6b:79:fc:f2:35:
         ca:82:f4:e4:10:dc:30:99:c8:11:35:8e:e2:bd:31:75:57:21:
         e2:db:dd:7b:7a:dd:f6:19:65:9e:78:91:48:f4:32:a2:12:95:
         75:2a:7e:f3:86:36:35:fb:f9:34:0b:0d:0b:10:ed:73:3d:7e:
         ad:6e:b2:40:09:8a:04:fe:fb:7e:ab:25:61:d7:b9:89:2c:af:
         bd:a7:82:f8:2e:b5:cc:5f:bf:d5:d8:75:53:96:be:38:b2:d6:
         7a:2e:98:ae:13:0c:d2:49:36:67:69:16:74:ed:e5:c2:48:db:
         82:57:01:cd:36:b0:c9:ce:70:d9:bb:18:cb:d6:d4:22:9f:a3:
         95:e4:b2:03:90:76:3f:8c:3b:0e:ee:a2:84:15:9c:82:28:ab:
         0a:c9:c8:e7:63:b5:99:b8:90:b2:72:6d:fb:3c:41:45:a0:48:
         c3:10:2a:fc:21:80:58:20:32:00:dd:71:7a:22:f6:21:b0:56:
         4e:f9:83:5b:e9:53:9c:76:81:3d:fd:39:1d:ba:8b:36:45:aa:
         00:de:3d:69:52:ef:91:f7:1d:2d:17:f0:b7:95:0a:34:41:d2:
         f9:f1:35:8f:1f:43:5c:bb:0e:06:05:7b:3d:01:0a:f5:d2:2f:
         58:fa:98:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslpmEANpfVBT4IIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTQxZDFmYjEtOTg0MS00NzcxLWI3NWYtN2U4NWYxMzI5
MTc1MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk
NTkyYWQ0ODMtNzM3ZS00YzRlLTk5NGUtMGU0NDFlMWNhZWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoknApObABNPQCBE0hvrlSc+b5MQ5a6VYBPml
X3/yNnXMLivTpaw2e9TICp6Z4GY5pTcOjQoaytjQXgNuetS44FkNVYJMk0hDkbdP
8ZRIT99/K6wOmZchn7EW5WCQaFL9/X4921OSkwzFofxDAY3snGr42RLQBBgMNpug
JUXZbBWrJa7Ik7Hp7MxJmtkMjJ7yZYUB0FMoM7xpAA4/ycUj8d8ie1oB0NwMryFA
hYWlsh1OMTpdr7d/jpODPfaBdBegv+zuM4J3m5Sz7pyioAksgj8rIVds7m6yougo
kVqMqGNDX2KBG1HcmDbVXgjFdXvIBskYbd1hitUuNxxs2BlElwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGYtfAuIO+VeYi12pz+b7DGmgLuBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNDFk
MWZiMS05ODQxLTQ3NzEtYjc1Zi03ZTg1ZjEzMjkxNzUvYWM2ZDlkYWYtNWJmNy0z
ZjRjLTkxMjUtOWRjNmI2NjNjNWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTQxZDFmYjEtOTg0MS00NzcxLWI3
NWYtN2U4NWYxMzI5MTc1LzE0MWQxZmIxLTk4NDEtNDc3MS1iNzVmLTdlODVmMTMy
OTE3NS5jcmwwHwYDVR0jBBgwFoAUMvdb+tQdtC9nSjmGQJchCKT7hggwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8xNDFkMWZiMS05ODQxLTQ3NzEtYjc1Zi03ZTg1
ZjEzMjkxNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjtcEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANPsefaRKs1E+O5krC5refzyNcqC9OQQ3DCZyBE1juK9MXVXIeLb3Xt6
3fYZZZ54kUj0MqISlXUqfvOGNjX7+TQLDQsQ7XM9fq1uskAJigT++36rJWHXuYks
r72ngvgutcxfv9XYdVOWvjiy1noumK4TDNJJNmdpFnTt5cJI24JXAc02sMnOcNm7
GMvW1CKfo5XksgOQdj+MOw7uooQVnIIoqwrJyOdjtZm4kLJybfs8QUWgSMMQKvwh
gFggMgDdcXoi9iGwVk75g1vpU5x2gT39OR26izZFqgDePWlS75H3HS0X8LeVCjRB
0vnxNY8fQ1y7DgYFez0BCvXSL1j6mEg=
-----END CERTIFICATE-----