Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/274d6700-6263-3109-8518-c533b1c59166.roa
File:                     274d6700-6263-3109-8518-c533b1c59166.roa (raw, json)
Hash identifier:          mlHP7GdmMHVbhs4jBop/kZ9yKGrVVr3A9qEgZ1KXAX0=
Subject key identifier:   DE:56:B9:70:B5:64:EA:59:2E:67:C8:86:F9:31:E4:08:9B:DF:3C:55
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584949FEB1F1C8B7A9AD71DD0380
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/274d6700-6263-3109-8518-c533b1c59166.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     25160
IP address blocks:        104.252.62.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:b1:f1:c8:b7:a9:ad:71:dd:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=b71ada0c-99b1-4a3d-b3f2-2fb959a86b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ef:77:64:97:63:88:bb:ae:40:11:8b:7d:c4:
                    76:28:b4:2b:d7:b8:02:9f:90:01:f4:9c:4d:d4:1a:
                    44:61:b8:14:f7:da:c7:62:32:e1:a5:b2:a1:46:8d:
                    20:dc:08:76:fc:f7:11:39:91:c4:bd:1f:a1:84:2a:
                    6c:81:13:2a:cb:15:88:78:12:fc:12:ac:4b:af:1d:
                    cf:46:e6:4f:23:49:77:10:96:a7:41:53:e6:8d:63:
                    17:48:1d:ec:47:1c:bf:fd:f4:58:ff:39:44:14:6d:
                    a2:29:db:5e:bb:75:c2:bc:32:cb:e1:7f:7e:01:44:
                    12:12:2f:20:9f:75:b6:0c:6a:95:a8:68:8b:d2:fe:
                    1b:d0:7c:26:33:21:16:b1:cd:3d:5f:6a:7e:2c:28:
                    8e:bf:9e:ef:04:f6:53:fa:32:cb:ae:58:c4:78:af:
                    8b:0a:08:b5:b4:3f:f5:69:32:96:1d:ef:2b:db:c6:
                    96:32:3a:e9:fb:05:04:1a:be:3d:7e:6a:3e:07:93:
                    6f:9c:d5:d9:d9:d8:08:8e:94:b3:48:24:d3:74:ca:
                    b4:72:a1:83:f4:ae:8f:93:88:4e:28:4f:5f:6a:72:
                    14:03:44:9e:69:c2:49:71:76:2a:1a:c0:2d:13:be:
                    4c:d4:ac:20:c2:d6:2a:74:94:b9:7d:79:e0:27:1d:
                    2d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:56:B9:70:B5:64:EA:59:2E:67:C8:86:F9:31:E4:08:9B:DF:3C:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/274d6700-6263-3109-8518-c533b1c59166.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:71:f9:3f:63:78:a2:19:ab:f9:ae:59:1f:7c:ae:0f:f6:f3:
         64:e0:5d:86:b7:02:2c:80:e1:cd:fa:08:f4:27:b1:45:c2:c1:
         48:8d:6d:30:fb:83:7f:b2:2b:78:11:87:5e:3b:12:0f:d3:72:
         20:ed:1a:db:63:48:84:22:2b:3e:8c:61:8a:6c:c5:83:66:2a:
         5a:66:e0:6e:46:5f:bc:de:b7:e2:f7:a6:31:0d:45:a4:91:d7:
         94:8b:0e:26:09:31:bd:b0:ad:c9:d2:67:fc:2a:1d:58:66:a7:
         3a:55:e1:a6:6f:b1:6b:03:8b:87:9e:74:16:4b:c0:7c:01:e8:
         e6:cb:15:1c:65:80:95:21:70:a5:58:8f:78:33:df:d7:92:34:
         f4:4b:8c:e3:8e:77:81:09:cb:72:89:ad:9f:95:1b:46:31:80:
         6a:b2:17:2c:b5:de:80:ff:56:e4:3b:53:25:0d:1e:d7:b9:81:
         24:41:17:5f:d0:3a:4c:14:50:e0:a8:81:31:7d:c9:78:fe:fb:
         63:49:ff:67:20:0e:08:5f:8c:e0:42:b1:8d:a8:be:4e:4b:47:
         d7:77:18:e4:9d:43:05:a5:83:29:4d:df:5b:9b:e5:88:c9:7a:
         85:49:f0:88:db:57:56:dd:54:48:1b:d4:09:e9:2b:b3:f5:ac:
         3b:a9:67:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----