Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/34093fbd-d8f5-354f-a55c-2fc275d6272a.roa
File:                     34093fbd-d8f5-354f-a55c-2fc275d6272a.roa (raw, json)
Hash identifier:          /wrWfiHu8p0KbTp6Wdv6nNWHVMnj/j2mfStfMSvXTMo=
Subject key identifier:   0D:FA:1D:6D:F1:96:45:61:29:04:FC:12:15:FB:74:55:01:AC:12:AC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858496E49822ADAAD2ABCDA92F640
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/34093fbd-d8f5-354f-a55c-2fc275d6272a.roa
Signing time:             Sun 06 Apr 2025 01:00:47 +0000
ROA not before:           Sun 06 Apr 2025 01:00:47 +0000
ROA not after:            Sat 05 Jul 2025 01:00:47 +0000
asID:                     214238
IP address blocks:        23.230.155.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6e:49:82:2a:da:ad:2a:bc:da:92:f6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr  6 01:00:47 2025 GMT
            Not After : Jul  5 01:00:47 2025 GMT
        Subject: CN=0f87c827-4adb-42dc-bfe3-fa4d0d554db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:03:f3:2a:c9:2c:bb:1b:ea:59:3f:5a:1c:62:
                    e0:0f:2e:ca:52:87:16:a4:1a:a5:73:3c:cc:ab:6b:
                    16:6c:2a:5e:23:87:39:d4:0e:c3:f3:da:d9:d6:3e:
                    53:4f:67:09:db:ea:54:71:6e:fe:71:c3:9c:6d:91:
                    9e:0d:b1:4f:47:45:4d:4c:ef:94:bd:17:d7:f4:c2:
                    6e:92:73:4b:6b:2d:fa:b0:f4:0b:df:c3:e2:27:b2:
                    4e:2a:d3:22:1e:16:08:f1:dc:b8:ab:5b:fa:58:a6:
                    9c:ea:4d:59:27:c6:24:1b:ee:97:f7:95:97:0f:40:
                    09:de:60:a4:dc:95:9f:f2:d4:f7:d5:51:e9:89:a6:
                    e9:0b:ef:69:c2:fe:d3:e5:ce:3b:66:3b:77:c9:28:
                    e9:14:03:76:00:aa:fa:7d:b6:03:dc:85:b8:15:75:
                    09:0d:14:97:3e:c9:30:61:3c:1a:cf:13:04:c7:a1:
                    5b:de:ae:87:06:37:21:c9:6e:a3:ca:ac:cc:13:55:
                    6b:d3:f1:79:17:38:76:31:75:44:5d:e6:55:7a:96:
                    c0:1f:2d:72:6b:1e:2a:9d:25:47:6e:be:63:84:b5:
                    f4:bd:a9:b6:3e:04:75:b6:6f:10:f8:c3:99:a2:00:
                    65:66:d8:7b:8d:6c:c4:e3:36:93:91:a0:f3:fc:5d:
                    f4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:FA:1D:6D:F1:96:45:61:29:04:FC:12:15:FB:74:55:01:AC:12:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/34093fbd-d8f5-354f-a55c-2fc275d6272a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:1b:15:15:ac:99:c9:5c:b6:e0:1e:4a:6b:e0:83:6a:f3:ae:
         49:94:1b:9e:53:2d:32:11:9d:55:ce:f3:55:7f:38:d4:20:da:
         e7:03:75:c3:85:50:f2:1e:f6:58:ec:23:30:c7:b9:56:83:df:
         a1:fa:5b:7d:3f:7b:65:6c:56:21:f5:4d:15:ee:fe:8e:91:3f:
         b4:e4:d1:97:41:90:b8:d9:1c:16:7b:62:e1:7a:ec:21:46:26:
         db:65:36:da:91:0d:fa:8f:15:cd:92:a1:66:04:a0:b7:23:34:
         90:f7:b0:46:79:c8:b1:24:1b:02:7c:c4:50:3c:bf:39:1c:5e:
         30:91:ec:33:62:3a:b1:0e:31:d5:de:46:1c:d3:6d:12:1b:a9:
         0c:84:92:bb:cd:b3:8f:b6:7d:0d:4b:a9:e3:5d:de:a1:92:d6:
         96:a4:54:a3:39:e7:51:b7:9c:82:4a:02:68:66:51:3b:84:ef:
         f3:8b:fc:ea:96:c2:a7:d8:43:72:d0:ca:df:16:00:7d:e7:32:
         d0:4b:a6:9e:2a:c6:0e:b9:ce:a8:c0:b0:2c:fc:ae:6d:a3:06:
         e7:2d:f5:21:d1:1f:81:28:38:0c:bc:43:92:dd:75:73:0e:5f:
         45:97:ef:ad:e4:43:22:5a:fd:aa:b7:21:12:dd:1f:b7:66:26:
         5e:5c:05:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----