Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7f1ad145-2f41-341d-8595-a8d6dba4792b.roa
File:                     7f1ad145-2f41-341d-8595-a8d6dba4792b.roa (raw, json)
Hash identifier:          mfRuEcuzpl105wfGvKA9gUpZVh9JgZhRCTgQsEQWDBI=
Subject key identifier:   11:7C:6E:2E:58:0E:43:E4:CF:08:1E:97:4C:03:05:E8:CE:83:40:8A
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F43285848FD56C0BC95BF657E983EB180
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7f1ad145-2f41-341d-8595-a8d6dba4792b.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     53508
IP address blocks:        24.244.102.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:c0:bc:95:bf:65:7e:98:3e:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=8c63b671-f092-41cd-9402-c1f428db9bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9a:cb:95:fc:c6:48:28:61:dd:3a:da:2c:23:
                    73:43:08:2b:3e:25:7d:c7:6e:6f:ab:f7:dd:60:45:
                    4f:3e:52:02:73:97:1e:51:81:32:49:b8:9e:bf:d1:
                    84:e5:e2:4c:54:43:6a:bd:84:d0:32:d6:3c:8c:e2:
                    7f:3c:7a:9f:2e:29:8e:71:07:6e:66:25:d4:83:41:
                    bc:c7:01:4c:cc:b3:48:d2:59:c4:d4:cd:88:ee:64:
                    1f:6d:a5:84:ae:29:21:d6:5b:ea:9b:c1:86:69:c4:
                    e9:e9:fd:d4:0d:b5:78:8d:a6:73:4d:03:8b:87:bf:
                    3b:02:8f:1d:6a:a6:19:b6:b1:c6:3e:e3:62:03:09:
                    b1:47:78:a9:3a:20:1c:bd:a2:99:00:ab:7b:98:f2:
                    aa:52:28:10:40:52:08:d1:0c:51:16:34:b1:d0:bf:
                    ab:89:67:c9:d5:d2:ff:0d:81:ad:bb:07:68:d5:eb:
                    af:85:a5:08:9b:93:93:0d:fb:9e:4e:af:01:b5:a4:
                    d1:81:d9:32:68:2f:99:43:cb:dc:20:d1:18:8a:26:
                    f2:0a:df:52:dd:83:3f:97:c3:48:2b:af:5f:50:db:
                    0c:3c:ad:62:fa:0c:6c:98:ce:b4:1e:a9:fb:ab:5b:
                    1b:9c:9a:54:99:da:5d:ef:63:cd:ea:aa:eb:9b:70:
                    0d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:7C:6E:2E:58:0E:43:E4:CF:08:1E:97:4C:03:05:E8:CE:83:40:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7f1ad145-2f41-341d-8595-a8d6dba4792b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.244.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:02:33:62:fb:67:77:52:1a:de:cb:8a:08:af:48:f3:fc:e0:
         10:c9:24:ab:e4:88:93:54:7b:9e:b3:7a:07:21:20:4d:84:f3:
         19:5d:ec:63:0a:20:78:14:93:5b:15:6c:aa:d6:a8:68:8e:a1:
         93:d4:8c:ad:20:63:49:ff:b2:41:29:ea:56:84:1c:92:56:b9:
         d4:63:8a:e7:07:b2:b3:dd:b4:9c:bc:10:dc:19:3e:af:01:dd:
         58:ac:fa:63:37:b3:ef:98:3a:f4:a0:b8:7a:af:08:9c:f2:54:
         c8:7b:36:92:eb:2d:99:37:d9:02:28:16:e2:67:e5:ac:ff:f9:
         6e:dc:8c:8e:19:53:55:a6:3e:d5:1a:67:1d:23:dc:18:dc:d4:
         d4:4b:5b:e7:21:94:1b:57:73:4e:4e:96:27:f6:1a:2c:b1:40:
         91:9d:fe:a5:c5:d6:39:dd:73:99:98:2a:b3:13:19:25:34:51:
         1b:15:99:20:e1:da:bf:14:20:4f:a5:a3:e4:b5:1f:26:9a:bc:
         cb:6e:1a:fe:18:e1:df:f8:63:e9:00:7b:ef:2f:f6:86:8b:b3:
         53:f6:9b:fc:0a:22:6b:da:e9:f5:2c:fe:98:d1:2e:d8:dd:93:
         b9:27:03:18:01:24:ef:0f:ae:1e:b2:ce:e0:9c:af:d6:71:c2:
         53:26:b1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----