Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/412a0313-4cdd-3471-814c-6ed5f8341669.roa
File:                     412a0313-4cdd-3471-814c-6ed5f8341669.roa (raw, json)
Hash identifier:          RxTBa5r4FdmcwHlLIvD80AF9JmccwLzhQfSyJBkgZ50=
Subject key identifier:   F3:3C:64:4C:0D:46:33:95:BD:9B:B6:50:B5:EF:80:93:D7:32:C1:8A
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F432858494B640BF4FD1CDC69C383DA80
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/412a0313-4cdd-3471-814c-6ed5f8341669.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     8100
IP address blocks:        199.180.254.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:0b:f4:fd:1c:dc:69:c3:83:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=73a8f8b4-5622-47e0-9c58-5df68b99e091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:07:a0:ec:52:02:6b:8d:d1:85:f9:58:4e:72:
                    81:5b:92:0f:48:93:cf:47:96:a2:2b:fe:b3:41:6d:
                    9f:74:7e:d6:65:6c:c2:9e:17:9f:41:7f:31:b3:7c:
                    c8:30:ea:3c:59:85:46:42:d4:e4:c8:97:00:2c:5b:
                    8d:b0:4e:3f:a2:70:bd:f9:80:57:18:63:79:66:f1:
                    92:18:4a:90:7e:cc:4f:51:d4:2a:73:b1:99:70:56:
                    63:1f:0d:46:f7:74:03:d1:6f:8b:b8:dd:7f:b7:05:
                    d1:a0:dd:82:fc:4b:76:3f:3a:0e:64:8e:a1:71:0f:
                    17:6b:26:48:df:01:48:86:f8:11:3f:5c:81:c2:24:
                    3e:38:7c:8b:49:ff:23:0e:95:ab:bc:95:a8:9b:75:
                    46:a4:94:6e:d4:52:d5:6f:9d:7f:09:7c:84:ba:ba:
                    e4:97:d2:b8:a7:63:ab:04:bc:69:93:99:2c:ce:71:
                    32:93:ff:ff:ca:cb:d7:07:e7:59:27:e4:c7:22:41:
                    61:76:37:7b:e4:16:69:61:e0:ab:f6:26:75:97:21:
                    32:c1:3a:ef:26:32:f8:1e:c7:f4:02:00:d2:bd:c4:
                    ea:1c:92:10:41:58:7d:81:a7:55:a5:2e:52:53:e1:
                    60:c3:ca:73:14:f6:d5:86:61:d8:7e:33:5f:6d:7c:
                    14:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:3C:64:4C:0D:46:33:95:BD:9B:B6:50:B5:EF:80:93:D7:32:C1:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/412a0313-4cdd-3471-814c-6ed5f8341669.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.180.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:ab:28:d7:c0:47:a7:4e:cf:ab:94:c8:32:4c:33:6f:3b:53:
         ce:f7:8e:8e:3a:1d:1c:a9:88:c3:be:d6:46:50:b8:de:35:fe:
         5d:4a:0b:02:18:dc:55:f8:9d:2e:f2:93:70:a7:7c:d3:a6:05:
         ee:cc:13:a3:7c:84:90:6e:ae:c0:36:c0:0b:14:7a:e7:df:92:
         3a:b2:79:8a:45:2d:4e:d3:a0:23:c2:c3:c3:73:5c:af:14:81:
         ad:6d:4b:45:a1:a9:ad:45:9d:5f:ab:70:44:9b:66:3c:0c:f6:
         1d:74:90:14:df:38:97:1f:dd:5d:5c:a4:8d:e5:c1:fa:cb:49:
         e7:c3:c0:45:54:b2:82:9b:74:22:a2:b5:d0:a6:94:9d:da:fa:
         01:04:7e:d4:c2:9c:27:1e:d1:02:13:d9:e0:ea:3a:b3:d9:e8:
         f6:1c:5b:31:d7:7f:96:6d:aa:8d:fb:77:52:d7:1f:2d:2a:ee:
         01:e8:fe:5b:6e:e8:34:2e:42:8f:1c:c0:40:fa:f8:d4:c2:5c:
         60:dd:96:44:d1:71:f6:da:4a:7a:29:c2:b6:c7:e6:3d:ec:dd:
         ba:f7:1e:ff:d8:cc:8e:22:9f:97:ec:5a:e4:0a:cb:de:e4:86:
         b4:85:33:d4:0f:01:83:97:a1:e5:32:ae:0e:08:51:9b:53:74:
         20:fa:64:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----