Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/304cd21a-1b5e-3dbf-b5a5-e1f18578bc5d.roa
File:                     304cd21a-1b5e-3dbf-b5a5-e1f18578bc5d.roa (raw, json)
Hash identifier:          3SpkJaYLetLXCOiTs/R0HwigZimYjtPVRoCwKdKrSas=
Subject key identifier:   BC:39:36:86:FE:34:8F:F5:90:F7:6E:BB:62:42:84:71:38:99:67:9B
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848F4F78C9BB989F2267B6A3000
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/304cd21a-1b5e-3dbf-b5a5-e1f18578bc5d.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7029
IP address blocks:        69.66.158.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:8c:9b:b9:89:f2:26:7b:6a:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=6d5f37b4-4fb2-4b53-bfd8-9165b6b6e0db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:46:d4:78:c3:e3:d2:bd:8a:36:02:f1:90:39:
                    17:79:20:15:f3:07:0d:0a:57:5b:80:a7:e1:ba:b6:
                    a6:b7:f4:7e:51:98:f5:f7:c4:f6:f0:77:19:19:d0:
                    98:38:0d:03:a1:05:ec:89:97:28:39:29:93:b4:bc:
                    59:54:91:98:f9:32:30:90:1c:88:d5:9c:0b:ad:fc:
                    5c:9e:39:5c:a9:31:df:10:2a:8b:81:0f:1c:68:75:
                    da:d7:62:9a:5a:84:28:83:84:a8:75:8c:fe:f7:2a:
                    6d:d3:e7:0b:e7:01:c8:e6:8c:0e:7d:59:9f:8d:a2:
                    d1:98:fb:51:c2:58:bb:3d:01:81:9f:a8:0f:bf:ec:
                    af:4e:d6:39:9f:8f:a8:c8:39:01:16:73:e2:d7:b5:
                    31:f1:1a:66:10:e5:09:4b:fc:f9:94:d8:76:8a:2d:
                    93:8f:f7:10:a5:6f:0f:24:d1:88:1e:3c:78:e1:53:
                    b3:68:83:b6:ea:07:58:57:68:c2:d4:6d:69:91:38:
                    96:fd:2a:b0:bb:fa:ba:9f:bf:31:1e:93:5f:97:67:
                    48:96:3e:6b:24:52:71:1c:b2:0c:de:34:f9:00:19:
                    76:91:ca:28:ce:42:0e:4d:4c:73:d7:08:39:aa:cd:
                    49:88:af:05:24:f4:bc:d7:0a:91:9a:f7:66:17:bb:
                    dc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:39:36:86:FE:34:8F:F5:90:F7:6E:BB:62:42:84:71:38:99:67:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/304cd21a-1b5e-3dbf-b5a5-e1f18578bc5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.66.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:5f:82:ba:08:6c:e7:42:93:d5:10:f7:0e:03:19:e5:20:da:
         a2:c9:54:d0:d7:62:71:da:34:5e:1c:89:35:e3:56:f2:76:bb:
         1f:5f:26:1f:0d:ae:ac:02:3d:39:b3:b2:a9:86:c9:95:ca:e3:
         da:fc:ea:5c:45:1d:7f:d2:6c:a3:c7:e5:f4:ac:73:11:6a:72:
         b4:af:2c:47:a6:f7:f5:bd:7b:27:51:d6:cd:98:d5:69:1c:d6:
         96:50:d1:c7:db:af:df:3b:f6:48:2a:8c:21:27:f1:2a:61:83:
         00:b2:d4:4d:66:1d:ec:30:a0:19:62:07:6c:fd:e6:06:01:61:
         11:15:fb:13:f1:42:9c:78:aa:d7:fb:35:7c:f0:a6:ad:7f:aa:
         90:78:a5:d2:2e:db:10:5b:3d:68:7e:f6:06:14:96:cf:ed:bb:
         8e:f7:b1:18:1b:60:57:9c:20:34:6b:7f:8d:51:94:d8:ad:97:
         81:bf:6e:b8:71:a2:8c:17:fc:09:d3:65:5c:3d:e1:7d:5f:00:
         c8:f6:6b:4f:13:89:35:d2:cf:ae:8d:e2:8d:98:4a:f2:87:53:
         f3:f2:3c:67:62:99:05:56:ed:88:a8:08:33:b0:a1:ce:6d:52:
         1f:5d:65:b7:dc:e9:b0:91:bc:ba:43:8d:d7:a0:30:32:f1:7e:
         a2:27:02:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----