Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/18cce3f0-6a9b-362d-8fd9-8c716ddc1a6d.roa
File:                     18cce3f0-6a9b-362d-8fd9-8c716ddc1a6d.roa (raw, json)
Hash identifier:          m2uYJUHM53QzQa9UCyXP3i4xX62iHWYYa1EEh+sLhtI=
Subject key identifier:   B5:FF:D5:54:AA:9C:27:56:72:12:A9:1B:B4:45:CA:AC:17:8B:AF:E6
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858490881748787B062A964BD5380
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/18cce3f0-6a9b-362d-8fd9-8c716ddc1a6d.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     9009
IP address blocks:        172.94.25.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:74:87:87:b0:62:a9:64:bd:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=db6c20c2-3866-4976-80a8-a4a5222f7667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7f:b6:89:36:ff:8a:4d:28:90:9d:32:3a:e9:
                    1f:f6:0c:71:90:69:c8:a2:6b:99:5a:d2:29:ce:5c:
                    11:ad:3a:a9:0e:a3:57:a6:c5:91:1f:8b:4c:20:7c:
                    f4:27:60:96:d1:92:a4:f9:5e:54:27:a4:8d:f5:0f:
                    e8:6f:c9:ad:73:f6:a8:e6:f2:84:65:62:56:8a:f2:
                    de:25:9d:89:5e:f0:e9:a8:29:0e:e2:d8:00:fc:0c:
                    28:cf:b3:7a:8f:03:30:5b:f0:32:2b:9f:17:13:46:
                    15:3f:5e:2f:57:12:4f:96:27:fe:24:7e:fb:7a:ec:
                    05:73:bd:a9:06:d8:9d:51:9d:a8:96:84:7e:35:ab:
                    c3:5d:ae:d0:a9:9a:7a:d1:00:1a:13:ab:a8:ad:40:
                    f6:46:0c:f8:fc:48:61:0d:88:02:ff:bb:27:49:f9:
                    86:04:7e:6a:5c:7d:f2:6c:97:9f:9a:57:82:a8:13:
                    b7:8a:c2:35:8d:94:cc:40:51:11:d1:26:2b:9b:44:
                    11:79:9e:2d:5a:31:c8:46:a7:ae:d7:06:65:25:51:
                    7e:c2:d9:d8:b2:e0:51:34:cf:9b:39:c4:e7:c0:d6:
                    f2:8b:43:37:f3:44:8b:2d:a0:bb:4e:57:cd:58:02:
                    40:9c:db:d1:45:bb:4f:7f:d0:ff:6f:a6:ed:aa:bd:
                    49:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FF:D5:54:AA:9C:27:56:72:12:A9:1B:B4:45:CA:AC:17:8B:AF:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/18cce3f0-6a9b-362d-8fd9-8c716ddc1a6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:2f:48:43:5c:4c:a8:1f:a7:ed:35:4e:fd:b2:e1:d6:d7:f0:
         bb:d7:42:9e:40:b0:50:a0:ca:f3:d5:75:e7:00:c9:4b:1a:fc:
         65:95:28:64:26:01:b8:29:f3:45:6c:c4:e6:87:60:ee:c0:ff:
         5e:64:31:31:b2:dd:6b:6e:fb:b1:a8:a0:69:57:6d:22:d7:05:
         a4:d9:9c:36:2b:2c:db:95:84:c6:b0:3d:49:c3:f4:c4:19:f7:
         87:53:c7:b0:81:24:70:5f:18:d9:e4:f8:ee:e8:18:0b:96:62:
         4b:96:2b:26:f0:7a:1b:31:0c:32:f6:d2:49:43:66:21:e6:ef:
         c0:ee:ab:7b:35:ef:3c:0a:79:0d:65:b4:ae:67:2a:aa:54:ed:
         83:94:5c:80:8c:79:45:f1:38:5f:0b:fc:46:f0:43:c7:a8:56:
         ac:39:95:2f:ce:af:57:71:f0:b6:20:65:c4:05:fc:3e:f7:48:
         6b:33:d1:79:9c:f1:11:4e:f9:f3:8d:4b:dd:73:93:22:ab:61:
         8f:3f:1d:43:2c:c7:dd:6b:0a:0f:bd:bd:5f:76:e5:12:d3:ce:
         dc:59:a9:3c:c6:a6:e6:be:29:76:04:00:af:a2:87:93:6b:56:
         6e:f9:73:a6:48:a2:0c:76:0d:9b:34:15:ac:68:0b:c1:86:5f:
         5d:d2:4b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----