Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a/e1c348d1-400a-3695-8d76-c4ba654fc779.roa
File:                     e1c348d1-400a-3695-8d76-c4ba654fc779.roa (raw, json)
Hash identifier:          3IUR6ChpOr9QL+/6YnYYO3qR+vHTjmKKhJzD6twjXJ8=
Subject key identifier:   6B:BD:12:9C:8A:1D:CF:F1:5D:6D:72:73:5C:59:B2:A8:09:4C:5E:5E
Certificate issuer:       /CN=0f63fd96-8907-4574-8e07-79a8c7fd8c7a
Certificate serial:       010D0C9F43285848E59BAF8613D168F4CF473F00
Authority key identifier: 57:76:0E:D2:2B:49:AF:1B:55:A0:09:F8:3F:C0:71:88:2F:43:E9:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a/e1c348d1-400a-3695-8d76-c4ba654fc779.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     46238
IP address blocks:        96.46.112.0/20 maxlen: 24
                          162.248.0.0/22 maxlen: 24
                          2606:9480::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:af:86:13:d1:68:f4:cf:47:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f63fd96-8907-4574-8e07-79a8c7fd8c7a
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=701db385-d10b-4be1-bf19-98fe6e5da352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4c:b1:11:e7:00:b4:2d:d6:f5:63:05:5d:a7:
                    3f:0f:8d:e0:1e:f1:6c:d1:bd:3e:cc:eb:91:4d:4a:
                    7c:5e:3f:ac:7a:9f:91:ee:f8:9a:e1:b8:7a:19:f2:
                    dc:69:bd:a9:fb:7b:e2:a9:24:e0:f1:8c:f8:e4:d1:
                    ae:cb:7f:93:92:5f:2c:ca:40:90:20:a6:af:f4:53:
                    7c:d1:ca:e7:36:fd:a4:95:f7:d0:cf:4c:ef:a5:1b:
                    08:63:e7:6e:a0:c2:44:4a:c1:8d:25:3c:37:25:00:
                    6f:40:96:5d:9f:e2:39:25:8a:65:1e:01:2c:36:32:
                    9b:9d:b3:71:c6:7c:73:c1:8e:56:10:24:3a:6b:6c:
                    e3:50:51:e7:4d:cf:fd:00:83:dc:50:5b:4a:46:e2:
                    cc:fb:7b:27:9a:c2:f7:d0:0d:80:ac:d4:8d:c1:0c:
                    9a:08:aa:e1:5f:a8:cb:59:49:57:f9:56:f6:28:00:
                    8e:f9:46:81:0e:8e:8b:b5:3e:8c:de:37:4c:61:db:
                    34:b5:ef:b1:d2:d6:b1:0a:27:a3:61:c7:f4:15:27:
                    33:2e:cc:7f:c7:65:a7:0e:6a:ac:02:3a:9e:66:45:
                    cc:72:90:d8:81:55:ff:95:48:89:e0:9c:5a:56:e6:
                    81:0b:df:fd:0c:1c:54:2e:c6:d3:73:1b:e6:af:8f:
                    b7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BD:12:9C:8A:1D:CF:F1:5D:6D:72:73:5C:59:B2:A8:09:4C:5E:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a/e1c348d1-400a-3695-8d76-c4ba654fc779.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a/0f63fd96-8907-4574-8e07-79a8c7fd8c7a.crl

            X509v3 Authority Key Identifier:
                keyid:57:76:0E:D2:2B:49:AF:1B:55:A0:09:F8:3F:C0:71:88:2F:43:E9:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.46.112.0/20
                  162.248.0.0/22
                IPv6:
                  2606:9480::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:db:a4:13:61:46:50:43:21:03:bc:a6:01:6f:fa:7d:e7:6b:
         a8:15:f6:28:a2:3a:38:35:d0:43:91:02:35:bf:b6:09:4a:a0:
         67:53:77:d3:a6:a4:e4:47:a9:b9:14:46:88:41:fa:dc:06:31:
         93:0d:61:2e:dd:d2:38:96:b4:4f:d3:64:00:3d:b2:07:1a:ce:
         2b:ae:a2:bb:4f:34:e9:3a:60:a1:9c:cd:a0:35:d5:15:c9:68:
         85:25:1d:82:dd:eb:cb:1c:ae:b9:f6:05:8d:35:7c:8c:c6:69:
         5f:ae:3f:d9:ed:63:13:83:40:7e:3e:bc:62:81:aa:49:e7:99:
         0f:67:21:1c:4a:15:33:42:13:e2:68:35:05:b9:e6:da:95:ad:
         51:43:cd:d4:dd:a5:31:03:74:bf:2f:5b:ec:0b:93:a9:c3:a4:
         ee:8e:67:e7:9f:9d:c0:93:6a:06:4b:a3:1e:72:fe:79:e3:35:
         09:c4:c9:89:29:31:7e:a0:7f:b5:e4:06:e4:a3:ec:0b:94:58:
         65:a1:db:d3:f2:a7:76:32:af:87:9a:1c:7d:f1:ec:f6:56:aa:
         cd:63:08:c3:a6:a2:c9:54:8b:8d:8e:d9:b6:7c:5e:f2:82:4a:
         79:40:1b:88:97:66:02:0a:1c:c1:cc:a4:73:dc:9d:db:d4:6b:
         8e:e8:ed:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----