Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c027d704-f1c5-36cf-be10-8a326ffd5f78.roa
File:                     c027d704-f1c5-36cf-be10-8a326ffd5f78.roa (raw, json)
Hash identifier:          TxsOxTbQcwq3bxRh72Y3gaGt5RsMWtZgOrTGseSxOHM=
Subject key identifier:   D5:34:F1:FC:10:DA:36:F9:A5:2C:E8:12:5C:D7:39:EB:10:62:B4:70
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F432858478B5111B2AD88A456E072C200
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c027d704-f1c5-36cf-be10-8a326ffd5f78.roa
Signing time:             Tue 15 Oct 2024 01:00:35 +0000
ROA not before:           Tue 15 Oct 2024 01:00:35 +0000
ROA not after:            Mon 13 Jan 2025 02:00:35 +0000
asID:                     13576
IP address blocks:        66.115.193.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8b:51:11:b2:ad:88:a4:56:e0:72:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Oct 15 01:00:35 2024 GMT
            Not After : Jan 13 02:00:35 2025 GMT
        Subject: CN=064131d6-80bf-423a-af46-37fff3a1a119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:30:4d:ff:dc:23:18:28:b8:38:f8:43:cd:d0:
                    af:00:0b:7e:9f:7e:51:26:7a:0e:d8:f8:93:ce:86:
                    8e:98:7c:ee:a4:cb:9d:d1:b9:8a:a3:aa:a4:a2:ea:
                    57:c4:6a:4a:89:97:13:87:11:75:b6:8f:65:a5:30:
                    2c:1b:cf:46:73:81:e8:c3:36:38:7d:75:bb:6c:62:
                    11:c4:f5:d7:da:e7:b3:3f:b8:99:b8:0d:f7:ec:c8:
                    5c:b5:ff:5c:7c:24:1d:96:0e:31:19:01:f8:90:c7:
                    12:c7:81:98:75:cb:8b:6b:d8:66:1f:44:f3:dc:b2:
                    2b:e1:5d:30:c5:e4:cb:df:9b:20:54:dd:f0:0c:e9:
                    eb:35:d7:71:3f:18:b3:e0:3a:8c:a4:06:50:72:63:
                    8d:60:14:45:33:4d:40:c3:b1:f5:46:d3:17:ed:ac:
                    a6:1c:ec:6b:46:bd:7d:5e:b3:80:82:25:0e:4c:d3:
                    0f:96:83:91:ab:f9:9d:59:82:d2:5f:c3:75:0d:46:
                    cc:5e:21:94:ac:e5:06:9b:84:be:e0:90:f6:58:c3:
                    45:2d:d8:df:f2:98:c9:76:b8:47:8f:f4:6c:2c:b0:
                    cd:92:31:3b:1d:da:5e:6b:b0:01:e1:77:b3:33:03:
                    3e:d7:6a:cf:de:70:8c:ff:27:4a:40:76:6d:dd:5e:
                    78:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:34:F1:FC:10:DA:36:F9:A5:2C:E8:12:5C:D7:39:EB:10:62:B4:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c027d704-f1c5-36cf-be10-8a326ffd5f78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.115.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:14:fa:5f:d1:c8:e8:80:7f:d9:04:37:8a:35:f4:28:3f:9a:
         18:10:2f:67:01:91:98:0a:e3:bc:91:13:62:bd:3d:43:18:51:
         5b:ef:2b:e2:f2:3f:1f:74:ed:64:f2:d0:17:cc:a8:35:a0:f9:
         ab:5d:2c:ed:57:53:95:47:a2:a2:05:ec:82:ea:54:de:5d:25:
         48:07:63:cf:be:ac:5e:70:03:51:2b:4e:50:d9:4f:39:d0:43:
         1a:db:a0:2b:bc:ec:6c:30:5c:38:25:5d:ef:73:9e:9a:fd:12:
         84:d6:9f:42:06:9f:e8:40:31:e6:f7:fa:20:c8:1d:03:a1:c4:
         93:61:a7:22:5b:ff:3e:07:d5:57:c9:27:d8:ed:4e:c2:9e:e0:
         dc:51:3d:ac:69:15:19:df:93:8e:44:74:2c:78:40:25:20:90:
         d7:72:2b:b4:6c:a6:75:8b:b1:a9:e1:f6:9f:a9:a0:29:02:6d:
         81:d3:aa:c8:b1:27:b4:7c:5e:03:0d:a2:22:b1:52:eb:20:6b:
         87:fd:8a:a6:68:bc:cd:e8:1d:16:a6:96:cf:99:fd:ef:79:f1:
         70:92:49:43:c5:08:1b:bb:9f:9a:09:7f:e0:d2:4b:db:a9:48:
         91:a1:78:b8:14:49:1f:09:b1:0a:61:a9:a3:8a:50:58:15:ed:
         c9:34:c7:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeLURGyrYikVuBywgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI0MTAxNTAxMDAzNVoXDTI1MDExMzAyMDAzNVowLzEtMCsGA1UEAxMk
MDY0MTMxZDYtODBiZi00MjNhLWFmNDYtMzdmZmYzYTFhMTE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDBN/9wjGCi4OPhDzdCvAAt+n35RJnoO2PiT
zoaOmHzupMud0bmKo6qkoupXxGpKiZcThxF1to9lpTAsG89Gc4HowzY4fXW7bGIR
xPXX2uezP7iZuA337Mhctf9cfCQdlg4xGQH4kMcSx4GYdcuLa9hmH0Tz3LIr4V0w
xeTL35sgVN3wDOnrNddxPxiz4DqMpAZQcmONYBRFM01Aw7H1RtMX7aymHOxrRr19
XrOAgiUOTNMPloORq/mdWYLSX8N1DUbMXiGUrOUGm4S+4JD2WMNFLdjf8pjJdrhH
j/RsLLDNkjE7Hdpea7AB4XezMwM+12rP3nCM/ydKQHZt3V54rwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNU08fwQ2jb5pSzoElzXOesQYrRwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYzAyN2Q3MDQtZjFjNS0z
NmNmLWJlMTAtOGEzMjZmZmQ1Zjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnPBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIkU+l/RyOiAf9kEN4o19Cg/mhgQL2cBkZgK47yRE2K9PUMYUVvvK+Ly
Px907WTy0BfMqDWg+atdLO1XU5VHoqIF7ILqVN5dJUgHY8++rF5wA1ErTlDZTznQ
QxrboCu87GwwXDglXe9znpr9EoTWn0IGn+hAMeb3+iDIHQOhxJNhpyJb/z4H1VfJ
J9jtTsKe4NxRPaxpFRnfk45EdCx4QCUgkNdyK7RspnWLsanh9p+poCkCbYHTqsix
J7R8XgMNoiKxUusga4f9iqZovM3oHRamls+Z/e958XCSSUPFCBu7n5oJf+DSS9up
SJGheLgUSR8JsQphqaOKUFgV7ck0xxs=
-----END CERTIFICATE-----