Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a3adccd2-104e-3636-9ce1-eb53b43862cf.roa
File:                     a3adccd2-104e-3636-9ce1-eb53b43862cf.roa (raw, json)
Hash identifier:          qSZ3uIe86yjgcfK91ql3rilde0O6Q/RK8dn5KANP5N0=
Subject key identifier:   C1:8A:AA:A2:D4:E4:08:AD:CA:C4:2F:D1:7A:30:43:DC:DB:1E:9B:62
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849287E741CE24CDFA456AEEED0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a3adccd2-104e-3636-9ce1-eb53b43862cf.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     7922
IP address blocks:        142.252.219.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:74:1c:e2:4c:df:a4:56:ae:ee:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=d1fdef54-29dc-4487-9cd5-9e2684c9d105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:42:39:98:93:36:a1:bf:e2:6a:6b:f0:a4:ee:
                    85:0f:4f:30:95:6c:ff:0d:6c:45:91:61:90:aa:df:
                    8f:d6:e3:fe:a8:cb:91:8f:89:98:41:7f:0f:28:b2:
                    63:16:db:73:fc:54:3f:9c:39:17:6c:ea:c4:f0:ec:
                    5a:80:32:fb:7b:72:52:5d:bd:fd:8f:d0:18:0b:93:
                    ad:83:57:7e:60:db:a9:df:52:4e:cd:70:a8:a4:25:
                    80:de:7f:7c:1e:5b:fd:41:dd:9b:a3:ff:91:20:96:
                    ca:0f:ad:a6:57:b4:a6:ab:ab:aa:b5:f3:cb:4a:2e:
                    39:ed:28:d6:8f:4e:52:8d:0b:b3:c6:9f:e1:93:84:
                    95:02:24:0d:cd:28:97:e2:52:5e:94:d7:13:0a:07:
                    e8:a2:e4:ce:ea:fa:0d:20:8d:d0:85:67:2c:69:fa:
                    47:df:a4:a3:c0:95:c1:e6:10:e8:49:8d:1b:d6:00:
                    f2:fd:d8:52:a5:e4:52:97:cd:a1:b5:23:e6:51:53:
                    1f:1e:d2:89:87:aa:63:1f:c2:c6:f6:f5:33:36:dc:
                    49:9d:da:2b:13:0c:f6:d6:59:00:5d:8d:5b:e3:fd:
                    ad:78:70:df:c7:e6:27:78:6b:0b:6c:b8:ee:b6:b8:
                    23:f2:55:66:83:25:b6:e9:1c:b5:8c:c8:2f:c5:81:
                    47:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8A:AA:A2:D4:E4:08:AD:CA:C4:2F:D1:7A:30:43:DC:DB:1E:9B:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a3adccd2-104e-3636-9ce1-eb53b43862cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:e6:27:0a:f3:f8:8d:54:ab:fe:94:48:f0:cc:1f:2f:c6:a4:
         44:c9:d2:86:69:49:0d:bb:cd:cc:1d:96:77:06:2b:ce:af:df:
         10:3f:69:94:63:13:79:fe:ed:65:3b:e6:10:82:3d:68:35:c3:
         f2:cc:e7:42:e0:fd:43:63:66:33:20:9f:92:06:d6:62:7b:d5:
         3a:34:f1:06:66:ca:03:64:b5:17:ed:93:15:e9:9f:59:84:8d:
         b4:cb:d1:cd:9c:c1:18:7e:44:84:fd:e6:18:d9:8c:0b:ff:af:
         d2:8a:fe:3e:d6:c9:9b:6d:10:7b:9b:d4:65:dc:7d:59:ce:23:
         53:20:d0:54:4b:47:e5:3b:50:7d:55:6f:00:2d:4f:bc:21:6f:
         35:43:e1:77:54:b7:28:8d:43:5a:92:f8:3d:3b:f0:c7:16:cb:
         0d:6e:c9:6f:38:f2:94:9b:75:ae:61:53:73:41:3b:79:41:56:
         1d:37:79:6a:af:fe:77:68:36:75:3d:a7:c7:16:43:f5:c7:b9:
         e9:e4:5e:61:89:af:1b:cf:e1:a6:41:98:16:ff:6c:b4:53:71:
         7c:7e:ea:f2:a8:3b:d5:25:d2:cb:d1:ab:c8:64:f2:fb:e3:da:
         47:58:3d:d8:c4:f6:44:d5:c5:ca:35:7f:4c:b2:43:78:35:3a:
         a3:3f:a5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----