Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/edc6c20f-1455-3e54-83dd-1c7f052d0279.roa
File:                     edc6c20f-1455-3e54-83dd-1c7f052d0279.roa (raw, json)
Hash identifier:          8tBit/Z7NABrK2FqHbyOBKgMRjSaMqu6opgCXQhjGMA=
Subject key identifier:   C6:4F:53:37:89:32:CD:24:07:10:47:1D:F3:25:87:B8:BA:50:48:7B
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C431764733EB55DAEE8E40
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/edc6c20f-1455-3e54-83dd-1c7f052d0279.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        172.111.68.128/25 maxlen: 25

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:31:76:47:33:eb:55:da:ee:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=ca15fe88-ab17-419e-b7e1-2d48c3b38c7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:0a:b4:85:2f:5e:5b:0a:5e:83:5b:e8:b8:58:
                    54:a2:c9:97:e0:da:76:80:0e:69:24:f2:57:bb:6f:
                    e9:04:2b:5f:23:66:b0:21:c6:be:34:4f:ea:3b:d9:
                    5d:e3:e0:e2:74:59:b4:2f:d5:ad:13:3c:2a:4b:a6:
                    0e:6c:6a:1c:85:d3:f2:9e:a9:10:73:97:9f:2a:ac:
                    5f:27:a5:7f:c9:7e:f7:66:e0:c2:16:a6:02:54:b1:
                    59:be:2d:62:3d:fb:30:05:c4:42:d3:72:b2:70:a3:
                    da:4a:b6:02:0c:66:42:57:b3:66:ed:a4:f7:56:89:
                    28:86:a8:01:49:83:48:51:28:56:16:1b:c6:40:7b:
                    d5:1e:4c:cc:b7:79:44:45:a3:af:8c:5a:94:8b:c3:
                    92:3f:a8:d2:31:b0:48:79:bd:dd:f8:eb:b3:f2:76:
                    2f:fa:88:a4:c3:85:4a:52:3d:79:1c:48:06:b5:ba:
                    b0:94:86:ea:b5:49:b6:fa:89:20:54:55:59:55:12:
                    b6:60:e5:f5:e8:84:5b:8f:74:1b:d3:b5:a5:28:ed:
                    4c:c8:1e:a3:7a:e7:65:97:32:79:40:b5:3b:2b:dc:
                    52:fa:fe:ff:1d:53:13:58:b0:89:87:dd:f6:ca:38:
                    8e:b1:b8:7c:33:04:68:82:73:a6:c4:56:91:1e:8a:
                    c8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:4F:53:37:89:32:CD:24:07:10:47:1D:F3:25:87:B8:BA:50:48:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/edc6c20f-1455-3e54-83dd-1c7f052d0279.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.68.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:38:c4:c4:78:d9:25:f5:33:92:6f:b0:d7:ba:e9:e0:08:5a:
         7d:e5:6a:0b:be:62:50:b9:71:59:b6:8e:f2:3d:3a:72:3d:ce:
         24:e4:f9:bf:ac:0e:0e:b0:dc:4d:e0:62:17:71:3b:40:e7:47:
         d1:d3:44:35:02:05:57:c8:58:52:e9:fc:c4:24:45:27:02:de:
         e2:11:fc:12:cb:80:0b:4d:93:be:2f:b8:4a:81:3c:a1:24:33:
         47:06:88:a4:c8:a5:2b:a5:cf:15:dc:05:98:8f:87:a6:c9:2b:
         09:96:4a:0a:37:35:b6:64:84:2a:73:7e:66:e2:93:74:04:18:
         2a:08:73:67:16:cf:46:97:5a:f7:9c:56:10:f8:cd:90:69:30:
         b1:6f:04:09:45:a2:89:16:9c:29:40:b8:e4:78:64:e1:6c:c2:
         e0:7b:e1:ef:0d:33:1e:34:51:33:d2:f1:08:b8:6f:d4:27:fe:
         2f:67:19:c5:ab:65:fe:36:76:78:25:66:a5:6b:57:77:ac:e8:
         f3:23:8a:f9:68:05:e8:09:c0:7f:fb:2c:51:54:8b:e8:c2:3a:
         38:0e:58:40:fc:35:7a:7a:4c:70:5d:f7:bb:5d:49:54:61:5c:
         63:45:1d:e2:31:19:a1:ed:60:d8:ce:c1:66:a9:92:71:75:07:
         07:e3:be:2b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElTxDF2RzPrVdrujkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
Y2ExNWZlODgtYWIxNy00MTllLWI3ZTEtMmQ0OGMzYjM4YzdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Qq0hS9eWwpeg1vouFhUosmX4Np2gA5pJPJX
u2/pBCtfI2awIca+NE/qO9ld4+DidFm0L9WtEzwqS6YObGochdPynqkQc5efKqxf
J6V/yX73ZuDCFqYCVLFZvi1iPfswBcRC03KycKPaSrYCDGZCV7Nm7aT3VokohqgB
SYNIUShWFhvGQHvVHkzMt3lERaOvjFqUi8OSP6jSMbBIeb3d+Ouz8nYv+oikw4VK
Uj15HEgGtbqwlIbqtUm2+okgVFVZVRK2YOX16IRbj3Qb07WlKO1MyB6jeudllzJ5
QLU7K9xS+v7/HVMTWLCJh932yjiOsbh8MwRognOmxFaRHorINwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMZPUzeJMs0kBxBHHfMlh7i6UEh7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZWRjNmMyMGYtMTQ1NS0z
ZTU0LTgzZGQtMWM3ZjA1MmQwMjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHrG9EgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCcOMTEeNkl9TOSb7DXuungCFp95WoLvmJQuXFZto7yPTpyPc4k5Pm/
rA4OsNxN4GIXcTtA50fR00Q1AgVXyFhS6fzEJEUnAt7iEfwSy4ALTZO+L7hKgTyh
JDNHBoikyKUrpc8V3AWYj4emySsJlkoKNzW2ZIQqc35m4pN0BBgqCHNnFs9Gl1r3
nFYQ+M2QaTCxbwQJRaKJFpwpQLjkeGThbMLge+HvDTMeNFEz0vEIuG/UJ/4vZxnF
q2X+NnZ4JWala1d3rOjzI4r5aAXoCcB/+yxRVIvowjo4DlhA/DV6ekxwXfe7XUlU
YVxjRR3iMRmh7WDYzsFmqZJxdQcH474r
-----END CERTIFICATE-----