Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ad58e6d6-0359-3a1e-9a26-dec1e027ed51.roa
File:                     ad58e6d6-0359-3a1e-9a26-dec1e027ed51.roa (raw, json)
Hash identifier:          HRrGdrsEBQFc7GbZFCag/6Nm7ekstOZ25rRBEF0b8uQ=
Subject key identifier:   0A:5C:D1:44:B4:A4:02:F6:9A:C2:93:DB:DC:97:4B:27:4D:64:27:53
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285848E9CBE40E07313AD73F7A8E00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ad58e6d6-0359-3a1e-9a26-dec1e027ed51.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     9009
IP address blocks:        172.94.45.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:e4:0e:07:31:3a:d7:3f:7a:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=f020c4ae-278c-45a5-ad5e-e9a35ac2e251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:66:94:19:8a:49:d5:c5:84:11:93:89:38:9c:
                    1f:f4:05:ce:39:2b:31:21:5d:bd:10:65:5d:e3:20:
                    be:ea:8f:73:3f:8e:4d:f4:fa:34:41:b0:bf:1b:45:
                    f6:79:37:0f:53:c7:bc:73:24:7c:c4:50:14:6b:8f:
                    7d:ca:6e:c2:98:52:94:b5:76:b1:30:75:06:75:37:
                    ae:97:2f:21:0d:f9:aa:e7:70:0f:43:62:0b:cd:2d:
                    8b:69:e3:7b:6d:7f:47:55:d9:cc:1f:1a:37:ce:de:
                    b9:23:53:34:02:8c:bd:b8:05:bd:20:9d:85:4a:d6:
                    40:e7:6a:91:70:3f:8e:67:5c:43:84:d7:d9:a6:c1:
                    f1:30:5d:d9:1f:31:56:9e:be:59:62:c7:82:14:29:
                    29:69:4a:9d:67:65:7e:52:69:df:d2:4a:83:3c:e9:
                    dc:e7:e1:22:dd:04:09:4f:0b:ec:7a:c1:33:6d:c8:
                    f1:88:15:08:af:62:e5:49:d5:c5:8c:49:fe:f6:21:
                    2d:78:b8:61:7e:d9:2d:33:1d:fc:e5:05:62:ac:d6:
                    ed:c8:00:77:d8:b9:ce:fc:64:0a:32:74:9d:60:7c:
                    c8:10:84:7d:9d:6e:f3:8b:79:30:3f:32:94:ee:0b:
                    97:97:e2:a7:c6:9e:22:5c:4f:d9:6a:d4:58:03:b9:
                    4a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:5C:D1:44:B4:A4:02:F6:9A:C2:93:DB:DC:97:4B:27:4D:64:27:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ad58e6d6-0359-3a1e-9a26-dec1e027ed51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:53:f5:0e:16:82:4c:4d:e2:1e:ec:82:47:20:ad:a2:4c:58:
         5e:4f:0a:7b:7c:a8:85:4e:53:fd:0e:41:86:04:1d:75:9f:e3:
         3c:54:ee:ec:43:d2:d5:0b:97:d7:4e:e1:d9:86:9f:46:3b:d8:
         b5:67:65:41:43:09:e5:5e:66:42:db:d5:05:af:15:9a:43:5d:
         1f:2e:6c:d1:69:07:7e:03:63:eb:2f:35:1e:76:da:24:ca:25:
         d0:08:28:c9:7c:1d:f7:9c:9f:42:19:91:06:21:66:43:41:26:
         fd:e9:07:97:fb:62:13:15:63:fe:cf:97:8c:8a:2a:a0:07:b7:
         ce:41:51:42:41:6b:22:e6:e1:36:39:10:80:f7:65:c1:fa:0f:
         99:05:77:41:45:eb:4e:23:ba:60:d6:60:f8:3f:59:1d:23:59:
         da:a2:c8:65:36:85:88:43:1f:e5:6a:21:7e:7e:21:41:f9:75:
         d2:22:9c:1d:77:a5:ba:48:08:19:b7:c0:e3:db:13:c5:74:a7:
         48:1c:6a:51:ec:2d:d7:37:7e:17:ce:6a:d5:ca:5b:cc:7b:96:
         6e:d0:5e:fc:39:0a:ab:26:3b:95:94:53:0f:b5:d7:9b:29:1b:
         06:7a:c2:55:c9:26:32:52:5b:9c:ce:4a:e4:8b:87:80:35:9a:
         4f:26:22:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----