Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2b1e817-581b-3613-bff0-519b62d2c6f2.roa
File:                     a2b1e817-581b-3613-bff0-519b62d2c6f2.roa (raw, json)
Hash identifier:          OUn0W4qp+R7lJTid/GZlQX7zsgTdjOz+RHqDVDXHgpY=
Subject key identifier:   AF:38:00:35:91:7D:F3:D7:0F:89:E6:08:F0:FF:52:00:91:5E:BC:D2
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584930DE73BB7D257EE96E20AD80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2b1e817-581b-3613-bff0-519b62d2c6f2.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     9009
IP address blocks:        172.111.235.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:73:bb:7d:25:7e:e9:6e:20:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=e1577b45-be55-4cc5-97b1-f9810f40ec32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:11:99:37:c2:b4:04:3f:ee:b3:80:02:96:d5:
                    94:44:71:7e:fa:99:72:d2:a1:ea:03:12:f0:01:5c:
                    2f:12:1a:ab:ba:ef:4a:1f:25:ac:8a:d7:eb:6f:b6:
                    4a:72:7d:60:f9:f1:16:7f:79:4f:94:10:05:74:bc:
                    aa:22:be:32:09:3e:3b:4a:47:d5:b9:7f:2d:5a:c2:
                    4a:40:ae:a5:3a:dc:8a:6c:f4:91:b2:a9:72:9f:50:
                    d9:76:b9:80:a6:cf:f0:84:2a:34:4b:9b:52:04:51:
                    b9:86:07:78:5f:45:44:81:fe:27:4a:52:2b:d9:0d:
                    fd:fc:21:27:b3:04:b1:30:b2:10:d4:85:7c:a0:9b:
                    f9:c9:4e:e8:fc:62:db:25:2c:96:df:ff:79:21:75:
                    48:33:63:e2:22:2e:21:33:1d:0f:48:a9:d3:a2:e4:
                    14:b1:0d:68:ef:35:18:82:ac:f4:ec:20:94:21:42:
                    e6:02:bc:44:bf:bb:15:e4:fe:5e:eb:86:2d:d1:b9:
                    2c:53:64:2c:7f:a4:2d:2f:d4:ab:b5:05:84:52:f5:
                    ca:81:35:48:18:ac:7e:77:fa:40:ad:e9:22:4a:7c:
                    2a:71:2e:da:c8:00:e8:3a:39:b0:8f:4d:ed:04:86:
                    83:c9:51:5b:00:47:eb:95:8c:0c:13:2e:43:73:e7:
                    65:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:38:00:35:91:7D:F3:D7:0F:89:E6:08:F0:FF:52:00:91:5E:BC:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2b1e817-581b-3613-bff0-519b62d2c6f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:49:63:01:11:b3:09:ef:f6:4c:2d:77:05:43:df:70:5c:b2:
         04:42:bc:b7:a4:e3:cb:8e:d5:f4:c0:2d:75:2f:79:38:d7:9e:
         ac:a9:51:3d:1d:4e:ed:b7:3f:e2:c9:fc:22:3d:d8:c1:62:4d:
         f3:6d:2f:97:fc:d1:eb:95:b3:42:b4:ed:29:b8:2d:63:93:7d:
         84:bd:8f:b4:74:3e:64:9a:22:f7:57:52:c8:7e:fc:60:a4:2c:
         01:fa:9f:c5:94:aa:ab:a1:b2:29:b4:ac:a7:b8:44:c6:b2:54:
         8f:ba:4a:f7:dd:a6:34:3e:70:26:0b:cf:50:a9:37:f6:c1:b5:
         8e:74:48:66:cf:7d:1d:25:bb:31:e4:9b:89:8d:d3:8d:88:d2:
         92:9b:3b:e5:16:3f:ee:da:7b:97:a1:89:f8:22:af:f9:03:f6:
         97:4e:d1:0a:7f:a2:7b:a4:d2:12:96:e2:a4:35:51:46:dd:82:
         d3:66:df:6f:ac:c8:1d:74:3b:4c:72:53:ee:37:98:b4:91:c8:
         43:cc:01:7e:88:26:d5:ff:44:d1:87:3a:ce:2f:a9:63:ce:a5:
         f9:11:b7:f0:44:b9:94:7f:f6:5d:a7:ee:e6:53:ac:38:0d:47:
         be:81:e2:d5:43:79:a2:21:54:47:bb:c6:5f:49:7e:c2:9c:b9:
         aa:07:6a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----