Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e977466a-a944-38a1-9985-faedf1cf29f3.roa
File:                     e977466a-a944-38a1-9985-faedf1cf29f3.roa (raw, json)
Hash identifier:          XSlSW3NR51o0QVNucpUGBf2xKPCaxILHW4pNX7L1n3U=
Subject key identifier:   21:29:03:52:04:30:62:E6:FF:2A:89:7C:16:9E:B8:49:9A:56:A5:7F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858492CB14143A8982E5ACC40B200
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e977466a-a944-38a1-9985-faedf1cf29f3.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     399157
IP address blocks:        156.154.150.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:41:43:a8:98:2e:5a:cc:40:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=35bbfde3-69ee-41fe-9794-9af10e497d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ff:54:5e:fc:de:a1:76:6c:42:92:9c:84:29:
                    cb:e9:2f:68:4d:e7:6c:8a:a1:d5:3f:a5:5e:b0:cf:
                    9d:44:6d:79:e3:58:a9:68:7c:47:34:ba:59:88:ea:
                    91:4e:f7:34:a6:1b:59:ae:fb:1d:fc:1b:1e:e9:68:
                    81:7d:4f:c5:80:35:3c:ae:68:0a:67:c6:d2:dc:b5:
                    92:3d:3a:38:cb:b7:d4:7c:d1:a9:94:f1:0b:a8:69:
                    02:39:8b:18:2b:dd:d2:31:0a:82:89:46:c8:43:30:
                    73:fc:7f:9d:64:aa:b7:1b:9f:78:e3:d2:d3:0a:55:
                    12:a1:27:04:d4:75:d8:13:75:56:cb:1e:e0:0b:d4:
                    1b:ce:ad:64:7b:72:e9:de:29:84:6e:fe:c0:df:1a:
                    52:55:78:5f:7e:17:bd:15:06:48:66:c6:0f:be:aa:
                    c2:0e:23:ea:b8:7a:07:96:a1:98:c8:29:43:1e:38:
                    3c:7f:c2:d5:c1:8a:84:93:74:14:03:cf:d4:f1:a0:
                    e4:b8:22:55:16:41:5a:10:ae:df:0b:94:22:94:2e:
                    32:a5:1b:14:2f:b2:3f:39:6c:36:33:18:d8:8d:d4:
                    20:3e:9e:43:cf:4d:01:84:25:23:10:02:18:bf:96:
                    a0:d6:bc:2c:2b:e3:f5:d3:ab:8e:ec:8e:c4:3f:0e:
                    d5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:29:03:52:04:30:62:E6:FF:2A:89:7C:16:9E:B8:49:9A:56:A5:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e977466a-a944-38a1-9985-faedf1cf29f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:15:d2:df:d9:85:1e:83:71:7c:b2:27:11:6e:6e:db:0f:27:
         05:67:6a:5e:5f:92:06:70:2f:1d:6b:44:9f:d8:60:96:4c:c9:
         50:81:29:19:16:33:53:5d:28:37:86:a5:ac:d7:e9:3b:5a:64:
         20:55:7a:21:e4:35:c7:b6:43:9c:69:5b:93:b0:44:2b:d7:f7:
         b5:66:fe:1f:f2:50:05:38:97:f5:5c:88:17:9d:a8:3a:8b:9b:
         ab:1c:be:91:59:db:54:c2:b0:8b:81:ab:79:2a:15:af:98:b1:
         6c:34:2f:0e:4c:d4:43:0a:24:7d:0e:0f:0f:89:27:58:8c:06:
         4d:e2:c8:17:a5:00:de:b9:86:0d:72:66:53:37:8b:9e:ca:a8:
         34:d3:fd:95:6b:b1:51:b5:9b:7f:55:b5:ce:38:9d:0e:ab:51:
         9f:39:5f:29:af:3e:a1:90:dc:53:38:96:2f:fc:ad:d0:70:a8:
         81:ae:fb:72:82:e1:fc:a3:23:ae:f8:df:41:53:cb:dd:b6:81:
         28:bd:a2:5b:90:a3:38:02:23:83:14:2f:04:36:66:1b:65:fa:
         b7:ae:86:fe:53:f0:89:ba:dd:7f:9f:2c:55:b3:d8:49:b4:91:
         12:ef:87:a9:64:5a:30:93:c5:d9:a6:38:6a:00:26:26:f6:35:
         fe:48:f9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----