Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5db51668-9089-39bb-9b70-8b6c8315802c.roa
File:                     5db51668-9089-39bb-9b70-8b6c8315802c.roa (raw, json)
Hash identifier:          eHS65GSq25pCADs/BNefV7Z97PJkUxKleHaolIwbcy4=
Subject key identifier:   13:FE:70:90:AF:BC:F4:D6:E3:C5:D4:06:A6:78:2B:2E:76:69:DD:D0
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848F1FAF4C995C03B96B83AB260
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5db51668-9089-39bb-9b70-8b6c8315802c.roa
Signing time:             Thu 20 Feb 2025 12:22:21 +0000
ROA not before:           Thu 20 Feb 2025 12:22:21 +0000
ROA not after:            Wed 21 May 2025 11:22:21 +0000
asID:                     18779
IP address blocks:        104.252.174.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f1:fa:f4:c9:95:c0:3b:96:b8:3a:b2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 20 12:22:21 2025 GMT
            Not After : May 21 11:22:21 2025 GMT
        Subject: CN=d0f6f21d-83fa-40f1-9c42-6784089c88da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fc:9d:b9:5d:e3:fa:89:70:45:a6:7d:d2:71:
                    f0:8f:a4:8a:6c:4f:be:fe:18:9e:6e:e3:b1:e7:4f:
                    3c:1e:5d:24:d8:c1:e5:7d:49:be:dc:07:1a:68:20:
                    7b:d3:35:60:7b:fd:60:2a:5d:ea:86:34:f6:6b:7c:
                    c1:0a:69:52:14:ab:8d:03:ce:82:23:36:0c:02:a2:
                    ef:2c:fe:9e:4f:0d:25:03:54:77:a7:31:89:3e:7c:
                    9d:f9:b5:48:ff:52:65:6c:af:9a:f2:21:ce:1a:2a:
                    5e:77:a8:a8:10:96:ca:36:99:a2:ba:f5:bb:b4:11:
                    db:ea:71:37:ce:3b:f6:53:ee:ab:b5:62:aa:bd:07:
                    42:d5:47:4d:dd:32:26:a6:32:c6:b2:c7:e2:9b:d8:
                    02:58:cc:c0:be:da:90:cb:46:18:7c:c4:06:6e:91:
                    1b:7e:1a:bd:3b:aa:e0:12:ce:e6:fa:cd:8f:8c:8b:
                    47:25:17:ed:97:38:c4:59:37:37:49:f9:d8:a1:70:
                    fe:eb:03:0f:fa:a1:98:77:8f:d6:da:02:70:7c:1d:
                    0c:34:48:41:fe:db:ce:08:c7:67:b1:42:81:db:1c:
                    c2:71:04:41:d1:ff:36:82:ab:b8:77:6c:41:2d:11:
                    79:72:b7:df:27:33:25:9a:54:1c:8f:99:e4:30:b5:
                    f4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FE:70:90:AF:BC:F4:D6:E3:C5:D4:06:A6:78:2B:2E:76:69:DD:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5db51668-9089-39bb-9b70-8b6c8315802c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:0d:8a:99:a6:a7:77:6e:e8:f6:9e:34:c2:83:02:1a:ac:aa:
         cb:da:b2:aa:12:92:a5:f3:8a:51:bd:3e:69:cc:5b:c0:77:4a:
         31:c9:9a:dd:c3:0a:67:89:0c:0c:d2:85:1f:07:92:3c:2f:72:
         ca:6d:a7:f5:c7:80:a8:08:f0:79:b5:76:8d:40:16:13:99:c1:
         df:18:51:69:b4:5a:26:34:43:ee:72:eb:92:d3:fd:02:e1:c3:
         c9:0c:58:11:cf:0f:20:af:90:a1:47:3e:63:92:2f:14:fc:c5:
         52:1f:18:ee:36:ad:fa:4c:85:57:57:8e:07:63:59:67:d6:28:
         fe:1d:13:8b:39:68:04:76:ca:c0:a3:91:5f:b9:ce:d8:ca:33:
         d7:4f:c2:48:d5:5e:3b:97:42:70:1e:e1:ed:11:4f:d5:08:c3:
         3a:dc:a1:e7:65:32:45:15:00:07:d8:f8:4b:f4:0e:71:66:fc:
         08:ba:bd:0d:da:93:4f:93:19:ef:ea:06:26:34:55:54:c7:da:
         b7:c6:34:61:ea:8e:90:28:7f:47:01:d7:c8:e5:96:10:8f:f4:
         60:56:99:32:64:68:50:c2:ca:c1:e8:9a:43:f2:de:44:32:f0:
         89:70:17:8b:dc:b4:dc:d1:b2:7f:c2:18:f0:56:ca:88:61:15:
         17:77:8c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----