Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/22131742-375f-3ede-807f-b0f8c1fe30b1.roa
File:                     22131742-375f-3ede-807f-b0f8c1fe30b1.roa (raw, json)
Hash identifier:          Fa94hwGagJbDgZGex6+G5w6VtE3RywGcPgXARZCBO3Y=
Subject key identifier:   D9:3E:55:23:89:98:6E:B1:2F:90:E5:D6:95:75:0A:8D:42:CD:82:7A
Certificate issuer:       /CN=d65fef8f-4cd2-4778-9158-f56f30242812
Certificate serial:       010D0C9F43285848EF6168CB4B2712FAD688D0C0
Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/22131742-375f-3ede-807f-b0f8c1fe30b1.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     2734
IP address blocks:        98.158.152.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:68:cb:4b:27:12:fa:d6:88:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=1068f641-4a66-44f4-a3b5-aaecde67e13c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:be:9c:f4:2e:56:db:b4:7a:d5:6c:aa:a6:7c:
                    20:7b:59:a4:87:45:b8:99:3c:bc:0b:68:81:5d:f9:
                    3e:e6:61:2b:3b:15:88:dd:96:fa:c7:db:de:0f:77:
                    93:e5:71:7e:8b:f1:aa:47:30:a2:f6:d2:5a:5e:05:
                    ce:d3:4b:e1:10:a3:64:e8:0c:45:42:5c:08:4e:5b:
                    75:6c:83:b6:0e:c0:02:93:ff:bc:cd:ad:78:33:cd:
                    28:ba:18:c9:53:aa:f0:f8:b9:4e:87:78:09:e7:fa:
                    22:d6:83:d0:99:ca:38:af:e9:87:a2:f4:b3:75:5c:
                    27:b1:23:83:60:db:7a:1b:5f:98:1c:10:42:82:2e:
                    b5:f7:fc:e1:b8:09:ab:0d:b9:6b:7c:57:2e:07:4d:
                    fb:a5:59:0a:d2:33:ec:26:89:4c:60:0b:09:f9:5c:
                    d0:d3:8f:16:07:0d:c9:b1:61:1f:2e:d0:07:de:af:
                    0e:7a:b6:c4:89:b2:26:b9:cc:2f:26:4f:47:4e:69:
                    e8:27:5c:dc:7d:3b:16:26:1a:b7:f1:77:b5:b6:d3:
                    ba:e2:58:5d:d5:76:50:4e:94:51:60:da:d1:2d:b1:
                    96:62:91:3c:8f:4f:52:7a:fd:99:ef:e0:5c:1c:35:
                    10:3a:43:7f:83:39:ad:92:92:1e:3e:7f:27:54:0b:
                    f7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:3E:55:23:89:98:6E:B1:2F:90:E5:D6:95:75:0A:8D:42:CD:82:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/22131742-375f-3ede-807f-b0f8c1fe30b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl

            X509v3 Authority Key Identifier:
                keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.158.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:72:ca:16:4f:d1:b4:7e:7c:ed:f7:35:3a:ef:f1:43:10:7a:
         15:11:f1:57:e4:dc:7e:a2:5b:a8:29:d9:60:a1:88:04:e4:3c:
         92:08:16:75:2f:3b:d7:72:7c:aa:b4:0f:91:ba:e3:56:1f:a5:
         37:ee:4f:75:c5:bd:22:fa:b4:d1:95:ee:f5:25:f0:e5:13:7c:
         95:76:24:f2:1b:9f:35:6a:84:b6:a9:73:f4:63:c0:24:37:91:
         7c:cb:f9:d7:e2:b8:40:0d:7b:37:ce:69:7d:7d:77:b3:fe:ce:
         b1:b8:fe:e7:f1:43:5f:a8:ab:e3:e8:cc:44:1a:55:39:f2:7f:
         e0:e4:b0:03:22:51:10:79:8f:f8:90:33:80:6e:ef:d3:cd:7b:
         6c:d0:10:8e:ad:73:a3:ee:e5:07:67:0f:f1:1b:53:33:42:ff:
         08:fd:2c:19:39:de:69:2b:98:3a:ca:33:c2:54:ed:dc:2e:2b:
         2a:2e:ac:16:ae:ca:3a:2d:f8:44:4a:ef:2c:8f:db:18:6b:b0:
         57:8a:5d:92:bc:92:ae:66:5d:e4:36:01:db:16:f0:f4:19:d1:
         98:da:91:de:43:5a:83:a1:d0:85:b6:a0:b3:9b:89:ab:e6:8e:
         65:e1:09:61:2f:8f:13:b3:af:42:a4:51:31:36:ba:a9:87:73:
         cf:42:b2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----