Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5f1089b5-25e9-3ce9-82f4-e9604812d69e.roa
File:                     5f1089b5-25e9-3ce9-82f4-e9604812d69e.roa (raw, json)
Hash identifier:          y79U6PS2Bm/Kp5f71gzwozXAdxfqRZcl8f5HIhXZRdo=
Subject key identifier:   C0:C9:3B:09:0F:D4:F3:91:47:35:06:1B:0B:26:FC:54:B1:CF:54:5C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848F1FC2645A3AE3C21116A13C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5f1089b5-25e9-3ce9-82f4-e9604812d69e.roa
Signing time:             Thu 20 Feb 2025 12:24:45 +0000
ROA not before:           Thu 20 Feb 2025 12:24:45 +0000
ROA not after:            Wed 21 May 2025 11:24:45 +0000
asID:                     18779
IP address blocks:        104.253.9.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f1:fc:26:45:a3:ae:3c:21:11:6a:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 20 12:24:45 2025 GMT
            Not After : May 21 11:24:45 2025 GMT
        Subject: CN=d5c7bbf9-053b-414c-9504-2ccf6beb7f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fa:fe:fe:e3:97:c1:01:4a:60:28:58:25:27:
                    91:bf:ee:ac:60:9d:45:2e:cc:a4:7d:f0:62:ee:a5:
                    1f:b0:73:24:94:eb:b9:ed:22:24:71:4a:5f:d6:8c:
                    25:33:66:a5:b0:e3:a9:f2:56:38:3e:f2:88:a6:dd:
                    27:58:f1:5e:7e:8f:9f:ae:da:51:3a:64:00:ce:76:
                    95:82:5c:74:13:85:cd:90:84:1d:97:9d:a2:e9:fb:
                    b4:07:f3:2f:db:55:44:38:45:16:8b:a6:9b:ab:68:
                    39:b5:1f:8e:b9:9f:9b:4e:e9:99:c8:dd:08:ee:91:
                    0c:0f:e5:5c:e8:c3:ff:4c:94:d3:f5:ea:1f:14:e9:
                    5d:95:42:7a:9b:16:f6:4d:6e:c0:d0:c7:e7:e3:a3:
                    98:c1:fa:36:1a:af:ec:65:cf:0b:ef:cd:95:60:c4:
                    86:82:4e:9d:49:f5:cf:64:8c:be:3f:d1:f5:a5:8b:
                    1a:ad:e7:8b:36:da:0f:3c:0f:f8:7c:15:a7:27:a5:
                    be:f0:05:cd:a3:20:bd:62:3f:05:15:5c:76:bf:dc:
                    55:bf:30:75:82:21:5b:fb:cf:b0:23:14:8e:2a:e8:
                    99:11:9c:4d:8e:15:d8:b8:8b:44:2c:d0:30:a5:4c:
                    81:48:cb:59:6a:2e:c7:0a:9e:1f:6b:fe:24:54:0e:
                    50:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C9:3B:09:0F:D4:F3:91:47:35:06:1B:0B:26:FC:54:B1:CF:54:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5f1089b5-25e9-3ce9-82f4-e9604812d69e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:9e:44:71:6f:d0:d0:cf:96:ba:45:00:77:18:a9:c9:79:ba:
         1a:b6:d1:c9:eb:62:07:5a:ea:3c:c8:c0:38:7c:eb:08:63:49:
         7a:41:c1:78:62:07:c8:5c:a9:c5:df:41:26:e8:db:b6:4c:b7:
         be:b7:8f:54:32:44:39:49:80:08:a0:12:c8:c5:cf:d5:ac:cf:
         57:a1:f2:5c:42:d7:01:23:b1:73:30:89:23:d5:ce:7f:f3:a6:
         74:79:38:d3:d8:fb:30:7e:bb:71:19:fb:08:3a:88:5b:fb:3a:
         27:19:71:57:20:a3:ce:88:43:2e:c3:98:4b:7a:8e:72:7d:68:
         11:38:ee:b7:44:97:0b:5f:92:8a:4b:a7:ca:60:b1:2e:b5:b6:
         4e:e4:b4:61:88:b0:c6:1d:5a:3c:3d:20:d7:8a:59:23:53:6a:
         7e:69:a1:f4:80:40:eb:9b:69:ed:7a:a0:e7:8f:e8:b8:39:32:
         f3:2b:24:2c:90:f7:fe:c3:91:a9:3d:cd:19:9a:cc:65:24:af:
         b6:66:08:85:9c:63:e3:9c:d4:54:14:54:58:8c:e9:04:df:79:
         6c:5c:e9:56:5d:3a:b5:bc:d9:95:e2:20:d9:d2:8a:6c:2a:cb:
         91:c5:82:6b:61:e7:28:43:2e:5e:ff:91:f7:0c:11:64:85:2e:
         45:00:ef:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----