Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/0b137322-9ca3-31c8-9319-f32301edc7c7.roa
File:                     0b137322-9ca3-31c8-9319-f32301edc7c7.roa (raw, json)
Hash identifier:          oDVVKka9A7DPAqCc0RDDwKdQ2AzpkY7yF+3I05UFM0I=
Subject key identifier:   D5:77:18:E2:44:7C:F2:7F:A6:FE:43:0A:92:82:33:25:34:7E:57:76
Certificate issuer:       /CN=b24224ba-8340-4a2e-986a-5e1f9b2c2182
Certificate serial:       010D0C9F43285848A99632B2B48670C6EFA3CB20
Authority key identifier: F3:D3:ED:75:10:95:A0:58:67:73:5A:61:EF:97:F9:D6:F3:16:94:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/0b137322-9ca3-31c8-9319-f32301edc7c7.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     397913
IP address blocks:        204.235.160.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:32:b2:b4:86:70:c6:ef:a3:cb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b24224ba-8340-4a2e-986a-5e1f9b2c2182
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=6333c75f-87d2-45c2-a167-a29e455d3e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:67:77:6e:1c:31:ec:f5:fe:9d:27:ec:bc:6a:
                    6b:b1:68:44:51:8b:14:5c:37:41:61:fd:1b:6f:50:
                    cc:1e:bd:6c:0f:51:62:de:7f:d2:d3:da:e4:22:20:
                    93:5e:9f:2e:1a:18:3a:8b:a4:ae:b7:b1:2e:79:70:
                    34:7d:e3:5f:3f:61:ee:db:6d:3c:1a:99:56:3a:ed:
                    dd:df:15:6d:91:8d:8f:cf:5b:b5:31:02:73:d0:24:
                    57:e6:e4:f4:e5:97:f3:f1:10:b5:25:7f:5a:be:82:
                    c5:28:20:1b:74:3a:78:1b:3c:01:4c:99:5e:e7:7b:
                    9a:d8:24:0e:c0:ec:65:77:b6:b8:c3:15:0a:5b:15:
                    ee:f2:39:e4:56:53:ba:8b:71:f0:1e:22:db:7f:21:
                    39:5f:ad:1e:a4:8b:60:09:f4:6c:ff:a6:ef:79:c6:
                    e4:c1:4f:98:18:41:4d:0e:06:97:25:fd:4c:f0:72:
                    61:cf:59:74:c3:c7:39:1b:b2:e9:23:5f:24:3a:79:
                    12:ca:92:f2:70:40:58:6e:eb:9c:40:55:d1:7d:e5:
                    53:3b:84:02:b9:a2:a3:f5:88:cb:48:61:8e:36:3f:
                    17:77:f5:ec:88:e1:0b:72:00:51:1f:7b:06:05:d4:
                    98:3d:ad:f8:9d:f1:f5:e6:b4:0f:de:10:bb:66:36:
                    14:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:77:18:E2:44:7C:F2:7F:A6:FE:43:0A:92:82:33:25:34:7E:57:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/0b137322-9ca3-31c8-9319-f32301edc7c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/b24224ba-8340-4a2e-986a-5e1f9b2c2182.crl

            X509v3 Authority Key Identifier:
                keyid:F3:D3:ED:75:10:95:A0:58:67:73:5A:61:EF:97:F9:D6:F3:16:94:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.235.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:c7:c5:66:b3:a8:98:c9:e5:c5:e3:a1:94:df:11:a6:5e:8f:
         9d:7d:1c:5b:00:84:26:e7:19:04:00:bb:dc:96:7f:b0:c3:b1:
         e1:5b:79:26:b5:b2:22:2a:55:6b:86:b0:74:4f:ff:ef:92:51:
         3b:c0:78:56:95:c9:22:8d:81:e0:60:73:55:7d:af:12:f4:25:
         25:c2:95:75:da:7a:1c:8c:7c:3e:a8:b3:fa:61:09:4b:24:f8:
         91:7f:a4:6d:b8:1c:0e:6e:2b:cf:f5:b7:6f:d3:ed:00:22:42:
         04:75:5f:ce:76:a1:2e:d4:b6:c3:21:92:19:7a:f0:9f:e6:87:
         7a:fc:08:69:3f:53:72:53:aa:ee:56:0a:62:f5:25:ca:f6:65:
         5f:11:42:fd:4f:24:9d:8c:79:a7:c0:1d:a1:70:78:7d:a5:17:
         f6:a5:02:27:09:3e:ca:a2:e8:0a:b0:7f:5c:a6:c4:b5:fe:17:
         0e:c9:fe:ec:f9:53:31:27:5f:a0:59:0b:b6:7f:1f:24:55:0e:
         77:fc:d0:fc:e0:77:d3:d3:e4:5c:fc:b5:6b:61:07:db:cb:9e:
         6e:70:04:50:91:75:ef:b1:cd:bf:4c:70:26:23:c2:85:27:d7:
         9e:76:83:f6:2d:12:4a:f8:b7:fb:37:1c:80:3b:5e:3f:fe:02:
         95:6a:81:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----