Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7428ecb1-c19a-3501-894d-23979f16d78d.roa
File:                     7428ecb1-c19a-3501-894d-23979f16d78d.roa (raw, json)
Hash identifier:          07d3EhOqizQVU9gSxEixhxbo2YpY5YMjr85tKiMW0Y0=
Subject key identifier:   84:39:DF:7A:13:E0:EF:3B:3C:93:C7:3C:43:C6:61:1C:D7:A4:A6:63
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848EC96ABF2FB812219B422AB30
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7428ecb1-c19a-3501-894d-23979f16d78d.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     54600
IP address blocks:        69.46.76.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:ab:f2:fb:81:22:19:b4:22:ab:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=f61a7528-22d5-4f58-b1e8-c831293cfd77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:32:0d:97:2c:a4:2a:22:77:f8:14:6f:7f:fa:
                    df:0c:0e:e9:96:78:32:1d:2d:6f:e1:2b:ec:80:87:
                    00:42:52:99:c9:4f:0e:8c:33:25:75:f0:57:1c:d4:
                    d1:8f:a7:d3:dc:7c:c2:82:21:a7:b7:94:4c:e9:dd:
                    50:f9:8c:9f:59:e3:52:f3:97:3b:b8:df:d8:b1:f0:
                    ff:74:03:dc:77:b3:2b:2d:0a:e7:b7:0e:66:8e:95:
                    d1:76:a5:2d:89:b2:67:a4:9e:d8:03:b1:86:a3:bd:
                    93:fc:9a:74:46:5c:f6:76:f1:c0:18:7f:3b:b1:d9:
                    0d:3b:22:ef:b4:22:5d:09:64:33:05:10:2f:95:47:
                    81:78:d4:04:03:09:b0:86:7f:f1:63:85:c2:68:c7:
                    df:4c:25:f8:cd:f9:04:ee:46:0f:c7:70:64:01:59:
                    ca:cf:9e:13:cb:f8:f6:11:83:c5:dd:a9:05:07:d0:
                    77:83:9b:28:5a:5c:ec:6e:73:bb:0d:ca:0d:b6:e2:
                    fa:da:43:fc:89:a6:5a:b1:56:8d:7e:15:3d:c3:bb:
                    ff:40:84:4d:b9:26:11:b9:be:57:76:c9:ae:da:7f:
                    ad:a4:6c:d4:fd:25:e0:3e:a3:a9:0f:92:39:bd:3d:
                    95:4b:72:52:9f:99:9f:17:07:ad:21:a4:8d:b9:e0:
                    67:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:39:DF:7A:13:E0:EF:3B:3C:93:C7:3C:43:C6:61:1C:D7:A4:A6:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7428ecb1-c19a-3501-894d-23979f16d78d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.46.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:40:c7:89:1d:4a:f6:d5:5a:6c:51:92:0b:c9:f5:f0:73:83:
         3a:03:c9:9d:d2:f9:0d:82:8f:74:85:bc:b6:6c:b4:7c:73:16:
         e4:58:e5:73:09:c5:8b:fe:ff:15:9f:c4:2f:39:c0:e6:ae:e7:
         a1:3b:c0:4d:ba:ad:41:bd:75:1e:5e:2c:ea:e8:12:9d:39:ad:
         52:63:6f:6f:59:1d:90:03:f6:67:9b:6f:3b:99:3b:5b:8d:12:
         2b:03:d0:e2:99:2a:28:c3:cf:94:06:d4:36:8c:50:4d:64:d2:
         39:34:69:de:06:40:1e:40:c0:77:02:99:92:73:7c:a9:b0:d1:
         e7:88:e5:e2:e8:32:d3:61:14:00:6d:03:aa:a1:f1:ca:6d:ad:
         99:30:03:92:d5:10:11:42:5f:47:61:50:10:f9:07:38:36:97:
         bb:f3:dc:df:fd:01:32:c4:f6:01:ec:2a:c1:1a:59:a8:49:12:
         d0:20:70:e5:f8:ba:3b:61:7a:65:75:bc:9a:18:54:ae:6f:c2:
         ca:4f:81:7f:1d:d7:a2:79:48:1e:f5:8e:a5:78:2f:41:c0:e7:
         e9:c6:95:fd:8f:d8:b0:a0:e3:ef:f3:9b:73:97:27:fc:37:1b:
         d2:8e:9b:25:9a:9f:62:ac:8b:6c:3e:04:65:0f:2c:aa:d0:ae:
         5c:24:4d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----