Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dd681e46-7020-3adc-963b-095d0f6cf470.roa
File:                     dd681e46-7020-3adc-963b-095d0f6cf470.roa (raw, json)
Hash identifier:          I4IeXxggXTB4kzxtE/GxHfJjZo8DcHPMXd2e/RQcqbE=
Subject key identifier:   D7:30:61:AB:6F:B8:CA:27:8B:1F:0F:B4:AD:B6:0A:F9:9B:F7:A2:B9
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848EF7A8BFF6D98C792265BF4C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dd681e46-7020-3adc-963b-095d0f6cf470.roa
Signing time:             Wed 19 Feb 2025 14:52:00 +0000
ROA not before:           Wed 19 Feb 2025 14:52:00 +0000
ROA not after:            Tue 20 May 2025 13:52:00 +0000
asID:                     18779
IP address blocks:        45.38.199.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:7a:8b:ff:6d:98:c7:92:26:5b:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 19 14:52:00 2025 GMT
            Not After : May 20 13:52:00 2025 GMT
        Subject: CN=c2eb0346-e67e-4b2a-95f9-5b26eeda1ba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0b:d3:ce:09:3d:5e:8c:c9:34:e5:79:ff:ef:
                    58:bc:ac:ed:66:43:f8:22:f1:e0:f2:3a:fb:06:34:
                    22:6f:02:a8:ef:c5:dc:32:9b:dc:64:1f:69:02:5a:
                    de:d3:67:cc:84:4f:89:98:5c:db:9f:4f:c0:e2:3f:
                    22:0f:41:c9:c6:83:a8:97:6b:3f:8d:af:3b:fd:fc:
                    85:43:a1:e2:a7:fe:c2:57:61:61:4b:80:bb:f9:3b:
                    57:90:69:53:35:f2:58:30:36:73:a8:c5:e2:09:9f:
                    f5:5a:13:c7:73:9e:77:cf:f8:8d:e4:39:84:af:2e:
                    34:dc:d3:5a:77:c9:3b:ba:27:8c:47:a0:83:bd:18:
                    50:32:a2:0e:17:70:7a:80:ab:34:74:7d:e0:9d:8f:
                    de:00:bf:b9:59:c9:cb:85:4b:bd:df:4b:ae:eb:9e:
                    d5:8e:ff:4e:41:d5:f7:d6:60:92:f8:8c:a3:74:28:
                    17:f2:89:a6:ad:8a:43:7c:53:41:0f:f3:97:a4:e2:
                    81:4b:e3:4d:23:d7:73:0c:b8:ad:e5:31:13:f8:3e:
                    a6:36:8a:0c:47:fc:94:58:9d:e1:99:36:0f:ec:10:
                    79:9d:e3:60:f4:61:52:ec:33:c7:6f:67:23:3c:e9:
                    67:8f:08:21:fc:1b:11:4f:fb:96:a6:ba:e2:bd:3a:
                    fa:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:30:61:AB:6F:B8:CA:27:8B:1F:0F:B4:AD:B6:0A:F9:9B:F7:A2:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dd681e46-7020-3adc-963b-095d0f6cf470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:2d:5f:e9:b1:93:49:c3:37:03:4e:bd:3e:0a:b6:81:90:de:
         5b:de:77:a7:a7:1b:c0:47:66:ba:18:c2:25:19:9c:ba:d5:15:
         54:84:83:76:b2:01:da:eb:6d:d8:f5:04:2f:be:97:e8:9c:f9:
         38:55:7c:c6:6b:70:eb:38:4b:82:fc:87:42:4c:32:30:d3:42:
         19:9e:09:85:bc:5a:d9:44:13:9c:1f:84:f6:5b:e7:42:1a:9d:
         13:75:5c:78:79:cd:e7:cb:84:98:83:ba:1c:32:7a:f3:4f:04:
         05:4b:79:e9:29:a5:8e:16:20:03:c3:63:49:de:92:07:3f:a6:
         70:98:86:37:45:31:eb:0a:6a:58:73:11:fa:cd:63:c4:91:23:
         17:df:b0:a5:f1:27:af:7e:63:56:a7:a2:00:26:27:cf:48:50:
         87:4a:8d:a4:5f:f8:6f:d4:56:0e:be:68:16:9c:c7:9f:dc:f7:
         0f:ff:4c:a5:09:9f:bf:d2:62:ff:34:af:75:ed:88:7c:4a:87:
         f3:95:b6:10:e5:29:a0:36:72:8c:b0:c9:fa:c6:9d:5f:2c:5b:
         ce:f4:97:77:87:2a:2d:bf:d2:c6:42:b0:9d:e8:3c:21:26:49:
         18:5a:65:26:ff:a6:aa:27:c3:da:38:ce:d2:ca:98:ec:86:8e:
         01:b1:63:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----