Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/52460d0a-e8d7-3b11-852d-24a12eb83235.roa
File:                     52460d0a-e8d7-3b11-852d-24a12eb83235.roa (raw, json)
Hash identifier:          wHkvbz4Py7/OtfrUDEE0iFpbSWcogYPhS2bTppX2vyI=
Subject key identifier:   87:68:3C:50:B6:7F:41:49:01:13:AA:DF:F7:FD:B8:F5:3D:B3:5C:DD
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F4328584957F405853E067B86F3687080
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/52460d0a-e8d7-3b11-852d-24a12eb83235.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     7992
IP address blocks:        24.143.160.0/19 maxlen: 19

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:05:85:3e:06:7b:86:f3:68:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=64d4cd53-bd6e-42e8-a4a5-9f8dd8ca3ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:25:16:6f:2c:2a:23:92:5f:d2:44:3b:c4:30:
                    50:55:40:6a:d5:9f:61:89:97:1a:22:f3:cb:ec:a7:
                    e1:cb:63:55:42:85:55:9d:5a:79:a9:7f:6e:32:26:
                    e8:89:51:22:23:1f:eb:4d:dd:a9:3e:d8:6a:e0:56:
                    84:2d:8d:99:33:b1:03:ec:77:c5:1a:f3:db:6c:f4:
                    73:0e:b9:b5:d6:b6:3e:f3:37:27:59:d1:b0:93:51:
                    c3:a2:ad:45:35:49:8d:64:f5:16:3d:3b:a8:62:99:
                    ca:64:38:a3:c8:63:07:d0:33:d6:e5:f3:9d:cd:22:
                    27:4f:7d:4f:a5:91:42:c3:c9:46:d3:0c:5e:01:0d:
                    d5:7b:90:ae:23:6f:a2:0e:23:7f:ae:a6:4a:b8:be:
                    a1:86:ca:f0:68:00:03:9e:b0:8d:67:0a:51:16:34:
                    fc:99:8a:d5:64:71:90:7f:37:55:41:23:83:f1:20:
                    1a:a4:54:c4:58:90:cb:ae:7e:38:1a:6a:98:f1:8f:
                    77:8a:8d:0c:d1:6d:d9:27:f1:4a:84:49:3e:43:8e:
                    c0:e6:7b:61:14:b2:4f:c4:b4:dd:82:c0:4d:4b:80:
                    93:a0:c6:a5:e8:63:7a:fd:68:8d:84:d7:2e:76:85:
                    e9:56:40:2e:b9:49:cf:24:33:33:f3:a4:64:e2:30:
                    c0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:68:3C:50:B6:7F:41:49:01:13:AA:DF:F7:FD:B8:F5:3D:B3:5C:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/52460d0a-e8d7-3b11-852d-24a12eb83235.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.143.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:9c:e5:34:ef:88:59:4d:dc:6e:81:52:28:4f:b4:87:c3:19:
         90:ba:7d:c1:c5:f4:b9:d8:86:c6:86:12:74:be:b6:ab:27:4d:
         4e:62:85:ed:5f:70:e0:18:90:ed:78:de:6c:e8:6f:e7:f6:4e:
         54:ef:3b:d9:8b:2c:ff:bb:ea:99:9f:e7:11:06:71:f4:a0:f1:
         e4:ac:eb:90:b6:5d:86:a2:e9:a3:8c:a1:2b:74:45:be:3f:7e:
         26:17:df:92:56:ac:b5:d6:bb:d6:24:ea:e9:90:2e:aa:29:20:
         93:1b:fa:9a:44:b1:e9:a9:ea:86:1e:4b:f4:d9:18:ca:89:6c:
         31:5b:f4:12:5a:5f:f8:87:f0:23:97:93:61:6b:69:bf:a8:ae:
         8b:36:a9:8b:78:56:c0:ba:be:16:be:e8:0f:0f:33:7c:7d:de:
         33:36:98:53:f2:99:e9:26:6a:65:7e:7c:85:26:58:93:44:84:
         9a:fa:99:5b:bb:70:ba:0a:51:69:32:f3:74:d3:0c:36:69:03:
         84:af:a9:07:d0:b7:94:f4:63:ed:05:61:7c:65:b6:56:1f:9e:
         76:70:75:0f:71:f9:fb:ac:c4:6c:de:e3:0f:23:26:05:13:14:
         4e:bd:bc:97:6b:64:d9:a4:d9:6c:d7:4a:94:d7:27:37:91:2d:
         74:40:22:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----