Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/969be07e-c4a3-38f7-a769-0b5cda692fac.roa
File:                     969be07e-c4a3-38f7-a769-0b5cda692fac.roa (raw, json)
Hash identifier:          PCrpgQYMmXnllWGycEPNqF5FGLz3teswNlGIbhSUaYA=
Subject key identifier:   53:16:81:72:60:E2:07:95:9F:8C:FE:C6:1C:6D:EF:F6:08:BF:1B:43
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848EC96A930A6CBE154A3A92300
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/969be07e-c4a3-38f7-a769-0b5cda692fac.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     50131
IP address blocks:        142.252.213.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:a9:30:a6:cb:e1:54:a3:a9:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=b3dba3d3-6e5a-4b7b-9d74-2f40f8fe2b24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fe:25:6d:d6:a3:70:e8:5f:0e:e1:c6:b5:c6:
                    0a:05:48:4d:6f:3e:50:da:cf:8d:fe:3b:09:c0:12:
                    bc:ad:f7:e9:01:8e:d1:52:51:fd:e4:2d:52:b4:4f:
                    57:21:94:c9:30:1a:76:de:f6:18:62:42:13:86:06:
                    43:5d:c6:5a:07:06:34:24:8d:0f:81:bb:f5:f7:22:
                    00:70:4c:64:cd:7f:21:b0:3e:e2:f4:17:24:c5:bd:
                    3b:07:89:67:32:89:c2:3d:2d:3a:6b:58:e6:01:c2:
                    ad:ed:a7:ef:15:6a:74:86:32:14:a9:42:c5:01:63:
                    37:df:63:c3:86:86:1d:8b:34:a4:1b:1e:f4:94:6b:
                    5e:33:a4:98:4d:c0:5c:c5:e6:31:f9:7c:1e:88:cf:
                    1d:c6:d2:99:89:3d:8a:09:8d:be:f9:83:b7:ed:e9:
                    9d:92:7c:bf:72:a2:93:45:fe:8f:4a:9a:e9:9d:e3:
                    a2:6e:e5:d6:ce:fd:0f:3a:1a:d9:39:82:b7:6f:12:
                    ad:9f:db:8f:2c:a0:06:2a:1a:98:cd:d0:4b:01:3d:
                    40:b4:d1:7f:da:7f:9e:82:2f:17:35:9b:b1:b7:57:
                    ae:f6:c9:b8:4e:50:c6:fc:22:73:1c:6c:92:45:d0:
                    a6:cf:3e:ba:8f:ab:20:b4:bf:24:ce:15:9e:37:9b:
                    b8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:16:81:72:60:E2:07:95:9F:8C:FE:C6:1C:6D:EF:F6:08:BF:1B:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/969be07e-c4a3-38f7-a769-0b5cda692fac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:27:84:13:3a:54:29:66:57:e8:cb:8a:eb:56:43:3b:73:13:
         f5:43:ce:fd:af:c0:30:5d:0d:5c:28:30:4e:61:c1:34:87:6b:
         fc:07:38:93:b7:45:5a:9f:e0:3a:4e:55:11:43:8c:a7:fa:20:
         54:78:7f:3d:dc:16:ec:29:12:0b:6f:36:3b:fc:33:2d:30:40:
         7c:db:82:68:eb:ab:f5:c4:7c:57:41:ba:49:66:29:46:16:54:
         fe:af:f0:de:fe:9a:39:5d:22:99:cc:4f:48:0c:f9:91:a2:00:
         eb:3d:42:6c:6d:55:2d:ac:c1:0c:3f:34:c0:76:6d:a7:8b:7f:
         50:77:74:50:b3:04:17:fa:97:2d:90:49:74:41:09:41:93:6b:
         f5:65:0a:a6:62:b3:82:5d:c4:6b:cb:6b:e5:9b:7d:6c:da:e6:
         72:27:87:d6:0b:fb:ab:f3:98:fc:4c:d0:4a:47:0c:0c:ad:87:
         ab:5f:bb:89:c5:32:02:32:59:75:05:46:70:6d:39:fe:fa:90:
         81:ec:4f:62:b6:9d:b4:af:ef:17:b5:c1:ff:5f:71:75:76:78:
         d7:58:9f:8b:c2:d0:36:0c:09:6e:f2:f3:c1:96:f5:41:83:23:
         74:cd:52:72:f4:0b:6c:27:d1:f0:94:47:f3:21:92:5b:00:80:
         d7:04:c8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----