Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/05224f4f-29f9-328d-ad4a-db204fafa300.roa
File:                     05224f4f-29f9-328d-ad4a-db204fafa300.roa (raw, json)
Hash identifier:          JjE/fzO3oWNvvTqVCqWOtB4HxtXb9dLaDtSTncHU8Gw=
Subject key identifier:   51:1D:8C:55:1E:8E:6F:D4:A2:F4:50:4C:F0:F5:B4:B1:77:EA:2D:1F
Certificate issuer:       /CN=209f0328-0af3-4de3-a043-8072346acdf7
Certificate serial:       010D0C9F43285848EF613725C2B21409454E7400
Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/05224f4f-29f9-328d-ad4a-db204fafa300.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     7782
IP address blocks:        209.112.128.0/18 maxlen: 18
                          209.112.192.0/19 maxlen: 19

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:37:25:c2:b2:14:09:45:4e:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=f89e3200-a852-4ecf-b86f-45dee8eea4d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4c:d6:48:a6:50:44:3f:82:10:eb:5e:b5:68:
                    69:f0:b6:f1:0f:ec:06:d0:a8:aa:4c:24:66:cd:3f:
                    3b:78:4e:2c:d3:87:60:f5:7e:8b:e4:90:e8:43:bf:
                    bf:08:f9:1b:e5:a5:e9:31:f9:ec:3a:b5:a7:e7:05:
                    ea:92:2c:7f:db:ee:78:56:29:8d:58:b3:bd:a9:80:
                    9a:66:fc:99:12:19:cf:82:cc:52:60:34:94:64:7d:
                    f7:2e:87:80:79:29:05:3a:96:01:63:50:61:f8:a5:
                    31:f0:6f:96:61:cb:4c:2d:2d:cd:f5:50:3d:30:bd:
                    f7:fa:ff:83:50:c7:51:10:53:87:ad:5b:9b:32:4f:
                    7f:a5:c4:96:ef:2b:00:19:d2:1d:b6:92:dc:51:89:
                    78:ec:f7:6b:07:6e:f9:8b:76:b6:24:b1:0f:dd:68:
                    37:0c:51:23:3f:26:cb:b5:53:ec:03:05:be:da:03:
                    49:09:53:e8:d8:c6:78:6e:c0:a6:b2:9c:c8:b5:db:
                    69:e3:05:fb:c6:46:0c:31:9e:e9:22:67:c7:43:61:
                    9b:ec:3e:b9:7d:62:a4:2b:1e:61:ec:74:6f:24:5b:
                    44:1c:45:31:aa:e1:15:b3:e8:b8:19:fb:e2:ba:b9:
                    21:43:4f:9f:5c:cf:89:e7:c6:2d:40:ba:d7:4a:96:
                    01:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1D:8C:55:1E:8E:6F:D4:A2:F4:50:4C:F0:F5:B4:B1:77:EA:2D:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/05224f4f-29f9-328d-ad4a-db204fafa300.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl

            X509v3 Authority Key Identifier:
                keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.128.0-209.112.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:3d:0f:ca:b4:13:15:58:31:d8:97:56:df:2a:44:ab:c5:bd:
         53:83:1b:6e:88:cf:30:1a:b7:e9:18:67:d9:75:01:1e:b9:f5:
         6f:71:ac:54:72:56:c7:9b:d2:ae:cf:b2:a5:84:54:f6:3d:71:
         f6:88:5f:48:51:be:20:b8:65:c9:26:87:cd:d7:5f:01:01:9a:
         07:7e:39:bd:42:da:73:01:68:bb:7e:eb:d9:d2:f9:5e:a2:82:
         b7:47:dc:ae:ba:ac:bd:02:e7:37:60:e5:7c:7b:d1:93:c1:c5:
         48:a4:2f:d6:9c:f0:2b:13:a9:fe:b3:95:e3:ed:be:91:d0:fb:
         7b:01:d2:b7:21:ae:3a:0e:b7:64:8d:a5:ed:95:74:29:0a:39:
         09:70:47:38:4d:a5:87:03:90:c7:c0:cd:d4:b8:90:bc:8b:e8:
         35:cb:cd:21:b9:5b:4e:26:8f:d3:33:28:0f:71:e4:95:73:42:
         01:90:3f:52:8b:67:e2:d4:17:c3:e1:82:d2:bf:d5:d3:bc:50:
         20:e6:36:41:27:42:77:d4:0b:ed:7e:72:f2:45:5c:04:00:f1:
         97:26:3c:65:9f:c4:06:42:76:b8:89:2d:b8:bf:cb:51:90:1b:
         0b:b3:f1:88:74:c6:b5:55:5c:87:b3:00:e3:bd:0d:a9:cd:2d:
         ae:75:79:dc
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEjvYTclwrIUCUVOdAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj
ZGY3MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
Zjg5ZTMyMDAtYTg1Mi00ZWNmLWI4NmYtNDVkZWU4ZWVhNGQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukzWSKZQRD+CEOtetWhp8LbxD+wG0KiqTCRm
zT87eE4s04dg9X6L5JDoQ7+/CPkb5aXpMfnsOrWn5wXqkix/2+54VimNWLO9qYCa
ZvyZEhnPgsxSYDSUZH33LoeAeSkFOpYBY1Bh+KUx8G+WYctMLS3N9VA9ML33+v+D
UMdREFOHrVubMk9/pcSW7ysAGdIdtpLcUYl47PdrB275i3a2JLEP3Wg3DFEjPybL
tVPsAwW+2gNJCVPo2MZ4bsCmspzItdtp4wX7xkYMMZ7pImfHQ2Gb7D65fWKkKx5h
7HRvJFtEHEUxquEVs+i4GfviurkhQ0+fXM+J58YtQLrXSpYB6wIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFFEdjFUejm/UovRQTPD1tLF36i0fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm
MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvMDUyMjRmNGYtMjlmOS0z
MjhkLWFkNGEtZGIyMDRmYWZhMzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw
NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh
Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy
MzQ2YWNkZjcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAfRcIAD
BAXRcMAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAZz0PyrQTFVgx2JdW3ypEq8W9U4MbbojPMBq36Rhn2XUB
Hrn1b3GsVHJWx5vSrs+ypYRU9j1x9ohfSFG+ILhlySaHzddfAQGaB345vULacwFo
u37r2dL5XqKCt0fcrrqsvQLnN2DlfHvRk8HFSKQv1pzwKxOp/rOV4+2+kdD7ewHS
tyGuOg63ZI2l7ZV0KQo5CXBHOE2lhwOQx8DN1LiQvIvoNcvNIblbTiaP0zMoD3Hk
lXNCAZA/Uotn4tQXw+GC0r/V07xQIOY2QSdCd9QL7X5y8kVcBADxlyY8ZZ/EBkJ2
uIktuL/LUZAbC7PxiHTGtVVch7MA470Nqc0trnV53A==
-----END CERTIFICATE-----