Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4a9ffe0c-14d0-3c55-84ed-0fb0a6b6343d.roa
File:                     4a9ffe0c-14d0-3c55-84ed-0fb0a6b6343d.roa (raw, json)
Hash identifier:          kOvYuOJVm6q3qKHqJMtZ7bEBP1lgeWu8gsETLo+AnAs=
Subject key identifier:   01:8D:B4:6E:C9:BC:AD:B7:06:25:CA:AF:4C:BB:35:21:B3:2D:06:99
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584949FEB48F485FE0F559A6F400
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4a9ffe0c-14d0-3c55-84ed-0fb0a6b6343d.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     9009
IP address blocks:        104.252.28.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:b4:8f:48:5f:e0:f5:59:a6:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=be441909-7b48-45f0-b8d8-d3748ffeee62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:42:19:f1:83:c3:aa:dc:68:32:aa:50:9e:e7:
                    c2:ec:b2:c5:13:ea:c5:15:69:66:c2:9f:64:10:cc:
                    34:a3:ee:cf:12:44:d2:4d:b0:de:a2:99:98:20:97:
                    8c:e0:62:04:35:f4:e9:ac:6c:cb:df:4b:8b:21:cd:
                    48:9d:f7:c8:ca:93:71:7b:74:ad:12:ef:47:cc:98:
                    63:5a:78:cd:2b:4d:bd:78:59:3c:e3:5b:3e:86:d6:
                    a6:22:18:84:2a:20:e5:76:ba:4a:10:22:1a:73:03:
                    33:8a:87:56:e0:60:c3:eb:62:a6:49:e5:c7:05:52:
                    f9:ec:42:b2:08:35:29:40:3d:5e:84:25:6a:e9:ce:
                    a5:cc:46:ba:30:a2:fa:0c:db:83:53:4e:1b:9e:94:
                    77:5f:fb:de:a6:bb:a8:dd:ed:2a:24:d3:d0:1c:b9:
                    00:1f:4f:f6:22:8b:1b:77:c0:c5:f7:91:bc:b9:c6:
                    f9:cf:9c:1e:cb:67:c8:34:fc:a3:01:c0:65:73:47:
                    c5:13:2e:d5:8a:22:7d:0f:90:55:cc:46:f9:56:df:
                    e4:f5:6a:f1:18:86:19:34:5f:6d:a2:fb:f1:2f:4a:
                    31:eb:aa:47:f3:4b:bb:73:85:e6:e3:0b:50:91:22:
                    a7:09:60:09:0a:93:c0:8f:c9:4d:b2:15:52:cc:94:
                    8b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8D:B4:6E:C9:BC:AD:B7:06:25:CA:AF:4C:BB:35:21:B3:2D:06:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4a9ffe0c-14d0-3c55-84ed-0fb0a6b6343d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:9b:db:41:d0:36:1a:93:c8:a8:49:f7:fb:ad:18:c9:bc:92:
         d0:05:55:04:ac:7d:f5:cc:a0:3b:66:31:90:29:86:b1:b3:98:
         68:12:76:10:ef:0e:cc:f0:98:73:5c:fd:a1:48:df:ff:77:fb:
         49:fe:47:1e:6f:5f:15:4f:2e:cd:44:11:2e:d2:28:63:71:61:
         5d:da:d3:b0:6b:4d:fb:83:d3:4f:70:2a:22:da:06:5b:b9:5b:
         f2:82:f9:8a:a0:e8:5a:6b:56:a3:a4:c7:17:6f:d9:b2:f2:f0:
         9c:53:0e:00:d6:a1:c2:1f:d7:a1:5b:b8:a6:cd:30:68:6f:7c:
         f8:0c:a8:03:6e:ba:46:ff:89:86:f5:8b:48:3f:35:73:15:9c:
         02:66:dc:71:e4:2c:b5:dc:22:7a:39:8d:44:f6:62:50:c4:14:
         7d:64:ab:60:bd:32:23:e5:18:e1:cf:cf:7d:66:26:6d:fa:16:
         90:3a:67:3d:e1:8f:87:71:b9:b6:75:cb:93:72:26:f5:ff:6e:
         fb:be:c7:4d:16:b3:f7:d2:b7:8e:e9:24:3b:43:98:2f:f5:74:
         0d:ef:78:23:03:93:a6:d3:bf:1a:7b:c4:bd:5a:16:94:17:7f:
         86:a0:b2:11:6f:e0:10:c1:59:71:da:12:1b:df:f0:dc:6c:4c:
         45:08:b3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----