Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/ce3f69ae-40c8-33ef-99a2-765e017a8bad.roa
File:                     ce3f69ae-40c8-33ef-99a2-765e017a8bad.roa (raw, json)
Hash identifier:          Q/BOoqkbKWvBhaKMme1ijlUPYPZlQpXjeHkABiT8nTo=
Subject key identifier:   84:D1:97:4A:00:D9:B4:9B:D6:65:75:A2:47:4E:B9:F5:20:DE:74:2B
Certificate issuer:       /CN=fff22b91-ff6b-40b0-b626-033566818ca6
Certificate serial:       010D0C9F432858493C093E0BA7DA4A09C16FD420
Authority key identifier: B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/ce3f69ae-40c8-33ef-99a2-765e017a8bad.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     16823
IP address blocks:        216.59.144.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:3e:0b:a7:da:4a:09:c1:6f:d4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fff22b91-ff6b-40b0-b626-033566818ca6
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=ca7d7e0d-2178-474f-ad6f-a5d90baa8244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ad:55:c4:bf:56:2d:6b:46:c8:30:1a:28:5e:
                    8a:b6:58:76:3f:b2:6a:bb:18:d5:87:71:aa:2f:42:
                    fc:d2:86:b7:bf:b6:3e:c5:98:0a:4c:59:e4:ec:d4:
                    8c:bd:a5:89:02:09:44:bd:83:e4:d4:81:17:ff:e3:
                    0f:fe:f2:f3:f2:9d:3a:22:e8:87:4e:6e:d5:44:35:
                    e1:5a:9a:1c:ac:13:30:86:e8:88:94:ba:fe:e2:e8:
                    17:88:6e:aa:43:b1:3a:e9:b0:64:bd:97:63:39:18:
                    1a:07:5c:5c:4a:b0:3e:9f:73:a1:2f:72:ce:cf:29:
                    49:f4:8d:52:c1:d4:01:36:ae:43:4f:8a:e4:eb:0a:
                    38:3a:49:80:99:b9:70:85:1f:ee:c0:91:30:c0:b9:
                    44:90:06:d1:a5:08:f0:3e:b7:25:20:3b:c2:85:a6:
                    72:38:f8:ea:25:bd:f2:57:f7:47:45:7c:4f:e8:11:
                    01:af:1f:dc:5d:e6:d5:b3:f3:af:63:61:5b:12:1b:
                    88:2d:0b:1b:35:bd:28:3f:9d:64:43:9c:7d:07:75:
                    d6:5b:98:be:78:91:c8:26:c5:ea:43:33:7a:62:76:
                    09:6e:72:1d:12:ce:a6:a3:e8:20:45:37:36:1a:16:
                    e4:a5:04:7b:f1:f8:f0:81:ab:f0:d3:c8:a6:26:6f:
                    9a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D1:97:4A:00:D9:B4:9B:D6:65:75:A2:47:4E:B9:F5:20:DE:74:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/ce3f69ae-40c8-33ef-99a2-765e017a8bad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl

            X509v3 Authority Key Identifier:
                keyid:B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.59.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:d7:c2:29:c4:33:25:8b:85:10:65:5d:fc:d9:fe:e4:12:0d:
         51:25:3e:2a:29:4e:bc:46:38:5f:7a:2b:48:3b:48:8f:eb:a6:
         b8:bd:59:8a:1e:30:de:40:94:bc:dd:52:d7:f3:c8:84:19:2f:
         af:ea:34:17:6f:48:03:d6:3e:a6:1c:04:cb:2f:2d:6c:bc:d5:
         96:4e:b4:bb:5e:ed:c9:32:a1:fc:39:16:5b:bb:1d:9f:f2:f6:
         72:de:88:3f:d3:ba:5c:1b:21:4b:ed:db:0c:b8:ee:c0:69:d3:
         3b:fd:2c:65:4a:f7:ba:b5:58:a9:02:9e:23:79:38:2d:22:c5:
         fa:ae:56:26:f1:5d:90:f8:55:95:46:3f:1d:ee:86:fc:bb:70:
         6c:d7:eb:fc:e3:75:44:25:bc:ed:c5:11:3a:ec:0a:c6:84:cb:
         59:b9:87:7a:49:3e:96:7f:83:cb:8a:50:25:49:78:a6:94:f8:
         6a:b8:8c:53:bd:07:2c:1d:c0:e9:1c:a9:21:36:4d:15:b6:ee:
         62:7b:f5:22:e0:53:9c:13:ea:ff:95:20:a5:74:d2:90:de:b9:
         49:f3:10:9f:71:68:7f:21:1d:1e:0f:2e:48:eb:c3:53:d1:a6:
         33:b0:50:fe:28:7b:1a:ea:75:12:d5:5d:91:46:e5:b0:90:93:
         a4:03:73:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----