Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5f143af-ba0a-3780-a98d-6780498dc1dd.roa
File:                     d5f143af-ba0a-3780-a98d-6780498dc1dd.roa (raw, json)
Hash identifier:          Y1kSNp4SdyYBNCFaKH28KGtgDBmbKBHj9Z3Cvf1pYuA=
Subject key identifier:   97:DB:03:FF:A1:9F:8B:B7:2D:D5:CE:D2:FE:C2:42:CC:E6:CA:1A:FF
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858496FAF1D0F83B6D168B9F7EF50
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5f143af-ba0a-3780-a98d-6780498dc1dd.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     397243
IP address blocks:        198.133.199.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:af:1d:0f:83:b6:d1:68:b9:f7:ef:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=cf89340e-8ab6-4ca2-931f-6c3cfcc7bd1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:53:d0:68:7e:90:b5:df:71:d6:10:28:2c:3a:
                    1b:c4:07:00:61:5c:7b:32:48:1d:ab:b4:ce:71:93:
                    fe:76:31:c2:c3:16:cc:5a:13:76:88:bb:ef:36:84:
                    84:d6:3b:0e:00:2f:0a:bd:9b:1c:76:72:d8:ca:6d:
                    b9:ee:a9:2f:0d:40:77:22:73:49:05:b9:9e:45:14:
                    0b:70:58:90:83:ef:e5:60:56:37:09:48:71:e7:02:
                    93:33:96:65:40:9b:2c:d5:2a:9f:1c:02:99:1b:2a:
                    5f:66:7a:02:6a:3a:79:4a:92:9c:3d:d6:98:d1:1c:
                    3f:68:b5:8e:9c:19:89:c5:5d:44:fe:73:b0:08:84:
                    fe:3e:96:59:22:5d:9f:14:6b:59:ed:bc:68:99:ea:
                    2e:b5:b8:71:84:c9:32:c5:75:cd:58:d3:c3:3f:3e:
                    2b:3d:78:4f:f9:84:5d:2a:26:d1:74:4f:3d:74:73:
                    42:d0:84:fe:6c:3d:91:d0:7c:f8:5c:ea:71:ef:9b:
                    94:e1:7b:29:2e:2b:7b:d9:6b:a5:7a:26:57:92:df:
                    d8:e4:40:1a:a0:96:79:a5:e1:12:cb:ef:84:b8:c1:
                    8f:c0:ab:93:86:21:e1:ec:b0:0a:e6:2e:75:16:39:
                    fa:69:8a:1c:fa:40:de:c0:be:4f:28:77:9c:d7:0f:
                    37:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DB:03:FF:A1:9F:8B:B7:2D:D5:CE:D2:FE:C2:42:CC:E6:CA:1A:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5f143af-ba0a-3780-a98d-6780498dc1dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:dc:42:79:57:5e:f5:c2:20:7e:c0:db:58:91:2f:dd:74:b3:
         c2:d8:2f:73:d0:33:e9:3a:45:5b:2d:c2:c9:fc:75:cf:26:f4:
         e0:02:9f:2b:79:70:05:39:ef:e1:d1:72:f9:c4:f9:8e:1c:b3:
         ac:86:2e:8e:d7:14:1b:6a:5b:1f:1c:2a:28:4d:91:0b:6f:a8:
         94:30:cd:a0:02:47:85:1e:a2:47:d0:f1:4e:4f:33:d5:96:c6:
         2c:b3:54:e9:9a:43:3b:fe:0e:2f:10:8e:ed:ff:5e:d1:d7:39:
         58:55:d0:1b:f6:36:75:ea:f2:38:53:2a:8d:a4:db:85:f3:06:
         cd:16:c5:53:90:79:3b:d5:06:7f:fa:e8:e8:76:80:b2:ec:37:
         8e:dd:5a:06:f2:09:14:6c:fe:ec:4a:f2:7b:68:38:ed:97:88:
         fc:6e:4d:76:1b:13:00:7a:d8:d0:82:dd:00:a4:ca:4a:0e:73:
         9f:a1:4b:56:d5:18:af:78:bd:18:ed:50:7d:95:5a:a1:16:d0:
         ec:35:10:0e:95:2f:6d:67:f2:8d:67:0e:7a:ad:77:8c:c3:fe:
         bf:a6:59:9d:c3:31:4b:2e:22:30:fc:4e:e1:4e:0a:79:49:0a:
         4d:81:41:a9:7c:57:10:6b:72:fc:09:d5:3d:a9:47:16:d0:3e:
         77:db:47:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----