Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5356367-625f-35f1-a378-86cbb89c2343.roa
File:                     b5356367-625f-35f1-a378-86cbb89c2343.roa (raw, json)
Hash identifier:          Jjcwb9q4FSlcOZBqJQzlhak9ZY6Q13iBCJMJAfYmO4o=
Subject key identifier:   E2:47:3D:5B:08:78:37:1A:25:92:D5:2A:40:CB:B3:E8:DB:EA:E5:72
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848CDE11B2FC481A6A665A7EBA0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5356367-625f-35f1-a378-86cbb89c2343.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     7029
IP address blocks:        173.188.168.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e1:1b:2f:c4:81:a6:a6:65:a7:eb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=18b8cf85-3e82-4b25-b15a-a6cea195ea57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:57:8c:e1:1f:ea:5a:6c:aa:89:50:64:a2:01:
                    14:fb:ce:76:5b:8f:94:3b:75:68:54:45:b7:cc:95:
                    0c:5e:48:af:a4:77:94:9e:f0:24:78:e4:20:76:e1:
                    25:bd:31:29:31:dc:42:a3:83:32:96:39:b8:e7:db:
                    a6:1f:1b:50:5d:c8:28:99:cb:1d:ed:b4:88:68:ab:
                    61:50:c3:a8:d6:52:0c:f3:25:b6:77:69:b7:00:e6:
                    83:3f:8a:46:ef:6d:93:49:9e:7c:bc:e8:fe:64:b4:
                    e9:d3:b6:b1:f9:78:f6:de:0b:e0:5b:48:10:aa:b1:
                    f9:59:f4:78:49:63:9d:01:e9:83:8f:47:84:42:ef:
                    02:f4:87:1c:a1:c4:51:cb:db:d8:82:a0:25:a1:17:
                    f1:cd:56:91:2f:08:7a:72:2a:bd:61:e7:4e:67:1e:
                    9d:b4:94:66:18:ff:e8:38:97:22:73:a7:ad:7c:47:
                    f8:35:c0:7e:fb:61:f5:9e:ff:e2:4e:31:b8:2a:54:
                    ed:d4:73:be:8b:75:be:00:55:ec:5d:12:f3:31:77:
                    79:39:fb:78:f6:b7:4c:2e:75:21:79:ee:1f:41:1b:
                    cf:76:c6:39:c2:cb:71:97:12:3d:b7:82:cd:1f:61:
                    ef:49:4a:d6:82:de:59:49:d5:b3:58:92:56:25:79:
                    33:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:47:3D:5B:08:78:37:1A:25:92:D5:2A:40:CB:B3:E8:DB:EA:E5:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5356367-625f-35f1-a378-86cbb89c2343.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.188.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:f5:88:ab:9d:02:6d:b3:f8:3c:45:4c:c8:bd:41:9d:b7:4d:
         d5:d6:b5:b5:bc:21:b7:0d:c8:ba:92:8d:f7:45:49:25:ea:c4:
         a0:91:e6:35:9d:43:0e:9a:05:e9:45:db:bf:8e:fa:84:50:a3:
         9b:f9:73:d7:82:f5:31:28:77:fb:db:19:7e:81:c2:32:43:fe:
         52:a4:76:58:56:6b:2f:ca:30:a4:bd:77:21:09:67:97:3c:c5:
         dc:09:1f:b8:10:5f:ef:9c:86:82:5e:61:51:50:97:44:f9:09:
         4f:ab:83:8f:a4:fb:35:47:f5:58:be:01:1c:36:1f:0a:18:1b:
         65:0b:1e:8c:c8:d5:b5:ea:03:6a:f8:5e:3d:83:ff:04:1c:06:
         36:c3:77:1d:6a:1a:7e:a3:0b:80:69:78:fc:40:e0:29:77:97:
         f2:30:f1:d9:a8:ce:c4:62:31:76:f7:a1:4c:60:7d:6f:ec:e5:
         5f:f7:cd:f2:d7:c1:7c:aa:1c:eb:10:46:0b:fe:50:51:ee:04:
         2c:13:ca:11:cf:5b:fa:3c:d0:f5:b7:d6:52:90:2d:5c:49:53:
         51:17:48:93:aa:fc:6b:44:8d:c8:de:34:c8:68:3a:03:dd:04:
         d8:39:57:ff:30:39:3b:91:ec:e0:4f:74:97:98:b3:46:c3:6b:
         9b:0f:47:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----