Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/c4f1131d-3203-3b87-9282-48a9051598c8.roa
File:                     c4f1131d-3203-3b87-9282-48a9051598c8.roa (raw, json)
Hash identifier:          DmQVBqdkC+6FpokysfH0swPPXycFz7yaHOf1OyHuY7Q=
Subject key identifier:   99:64:40:D0:EC:EE:B1:3B:13:7A:AE:0C:7F:72:54:7D:23:5B:28:A7
Certificate issuer:       /CN=b59002d2-8fd4-446f-987c-e63485cf1a5a
Certificate serial:       010D0C9F43285848B54B8829DF15DA401B5B2E80
Authority key identifier: FF:E2:C6:56:96:3E:3C:7B:DA:13:F2:F1:01:66:AC:54:1B:F2:0A:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/c4f1131d-3203-3b87-9282-48a9051598c8.roa
Signing time:             Wed 29 Jan 2025 18:40:23 +0000
ROA not before:           Wed 29 Jan 2025 18:40:23 +0000
ROA not after:            Tue 29 Apr 2025 17:40:23 +0000
asID:                     401474
IP address blocks:        23.133.100.0/24 maxlen: 24
                          2602:f724::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b5:4b:88:29:df:15:da:40:1b:5b:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b59002d2-8fd4-446f-987c-e63485cf1a5a
        Validity
            Not Before: Jan 29 18:40:23 2025 GMT
            Not After : Apr 29 17:40:23 2025 GMT
        Subject: CN=33a26f0d-2bae-4eca-8d03-ed648cc1dff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b0:4a:71:87:8d:45:5a:a1:3c:e3:77:e7:7f:
                    db:96:4d:9d:44:fd:81:75:12:5e:aa:54:06:7b:b4:
                    0f:4f:f5:c2:6f:4f:74:0b:db:67:aa:a0:da:00:c4:
                    26:9d:3f:29:97:fc:de:ba:f1:c1:58:3c:09:7e:9d:
                    d1:0f:94:f7:a7:22:7b:87:ad:a6:a9:41:48:fa:a4:
                    f2:c5:a5:19:b2:9c:f3:75:63:dd:17:54:8f:6a:74:
                    f3:90:39:66:d3:9c:5f:b1:f2:b6:ab:f0:7a:e8:7a:
                    52:91:a2:e3:78:c6:dc:c5:b4:e2:57:ce:b6:82:7e:
                    e4:1d:c1:de:3e:17:21:44:de:a7:0e:49:cb:c8:dc:
                    fc:71:77:a2:95:9a:bc:0b:06:bf:2b:98:b3:75:2d:
                    1c:99:68:0b:5c:70:a4:f4:58:c9:ed:1b:d6:e6:b3:
                    8d:a0:16:30:4c:9f:0b:cf:42:32:3c:15:e7:db:00:
                    fc:86:44:bd:be:cf:2f:67:de:25:91:2c:7e:13:d0:
                    da:68:c2:0d:1c:9e:7d:c1:72:bf:11:23:dc:09:ae:
                    a4:d2:02:22:eb:97:25:52:a1:a3:be:13:65:34:c6:
                    44:18:50:88:3f:1d:2b:91:b7:e4:0a:b0:26:32:70:
                    90:af:8d:3a:07:2b:bd:5b:4b:64:17:e4:fc:d0:01:
                    cd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:64:40:D0:EC:EE:B1:3B:13:7A:AE:0C:7F:72:54:7D:23:5B:28:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/c4f1131d-3203-3b87-9282-48a9051598c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/b59002d2-8fd4-446f-987c-e63485cf1a5a.crl

            X509v3 Authority Key Identifier:
                keyid:FF:E2:C6:56:96:3E:3C:7B:DA:13:F2:F1:01:66:AC:54:1B:F2:0A:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.100.0/24
                IPv6:
                  2602:f724::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:f9:bf:82:9c:46:6d:ec:f9:9a:68:10:ea:79:a6:0d:2e:1a:
         e9:d3:8b:a2:ad:60:b6:5f:8b:37:5d:56:ca:60:ca:14:69:e1:
         35:85:9e:dd:a7:4d:05:e5:2a:8b:1d:a2:f1:e6:a3:bf:08:d7:
         81:9b:76:76:09:b3:eb:53:7d:f9:46:61:49:f1:db:13:3d:20:
         ef:d7:b2:79:22:ca:7a:ee:9c:ac:cd:fe:ce:28:ab:0a:ab:30:
         d5:3a:b0:47:1e:0f:80:be:d5:8b:df:a8:1d:cd:d4:eb:3f:00:
         f6:4f:8b:e3:3a:72:31:d4:13:b3:8c:0f:44:8e:29:b2:a1:38:
         19:a6:2d:6a:1d:e0:0e:dc:3d:06:fe:da:c6:ea:6a:fe:85:44:
         ca:e6:d7:63:e3:4a:d1:2d:0f:d7:aa:4c:7b:0c:83:97:b3:52:
         45:42:f1:8e:7a:c3:5f:16:90:c7:d3:cc:ec:fc:59:e6:fb:77:
         b6:82:ed:8c:8d:f4:75:3e:8c:aa:c6:3e:b4:9c:59:d5:51:7c:
         d3:90:cb:4b:41:28:57:67:d8:e1:e3:6f:4a:e3:37:74:a4:a0:
         a2:9c:03:ee:cb:6d:97:a8:eb:c8:dc:fc:77:54:91:d9:51:fa:
         6f:ad:1f:bd:56:8e:2f:e1:d6:c4:c9:22:75:b9:93:4a:d4:13:
         35:ed:ed:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----