Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e0acfacb-6726-3a0b-bb68-0d084ec8fe71.roa
File:                     e0acfacb-6726-3a0b-bb68-0d084ec8fe71.roa (raw, json)
Hash identifier:          6Jj7/cTKL5oIc2YtO+LUq3RHN+9XbLOQ+swIf4PMd4Y=
Subject key identifier:   A6:0A:0B:48:E8:D0:14:34:CD:0B:0D:BD:94:29:79:98:E5:0F:E9:4F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849287E6CBB22AC15D70FFBE940
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e0acfacb-6726-3a0b-bb68-0d084ec8fe71.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     64267
IP address blocks:        142.252.145.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:6c:bb:22:ac:15:d7:0f:fb:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=5cf54d9b-0c39-4fb3-9d7e-3e350fc25db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f1:4d:9b:15:56:50:6e:56:1a:20:e6:c7:db:
                    e9:46:67:83:18:f9:4b:ba:95:fd:8a:c9:34:d7:4b:
                    33:48:61:77:d5:6f:03:07:78:58:ba:f0:45:90:8b:
                    27:e0:ab:7d:6f:e3:a5:73:ae:f7:dc:21:63:3e:19:
                    de:97:26:07:4d:d1:16:f6:8d:18:e4:a9:b0:13:86:
                    d4:1c:cf:71:16:75:70:19:7c:29:40:dc:eb:88:4a:
                    69:37:58:52:23:27:88:ff:41:29:7b:a9:62:ed:12:
                    72:af:a2:b0:9b:27:cf:7d:72:d4:2f:09:0c:9c:4d:
                    5c:0d:09:7e:f0:f8:82:3a:a2:9b:d4:79:de:c5:5b:
                    67:dd:ca:4b:1f:f8:7b:c8:a1:13:c8:f6:e6:4b:4d:
                    26:90:9c:28:e8:a4:24:e3:af:62:bf:f2:91:55:55:
                    6a:6c:bc:e5:e2:dc:8d:a5:89:e2:3f:bd:b3:76:3a:
                    fe:db:30:43:dc:f2:72:f4:98:8c:9c:4c:c8:cf:3a:
                    82:be:7b:6e:07:78:f0:46:66:7c:c4:c1:45:76:eb:
                    83:35:da:51:ec:3c:c5:48:6f:94:a2:45:60:d9:09:
                    1c:94:ce:80:f4:12:16:fa:fa:d3:a0:f3:4e:87:5d:
                    57:af:05:fb:8f:97:e0:ce:ff:05:18:95:e6:7b:33:
                    85:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0A:0B:48:E8:D0:14:34:CD:0B:0D:BD:94:29:79:98:E5:0F:E9:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e0acfacb-6726-3a0b-bb68-0d084ec8fe71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:29:ac:0a:2f:ae:2a:8d:58:1b:31:2c:42:ab:e3:b3:cb:d6:
         f6:59:fe:db:fd:80:39:ce:0c:23:01:03:86:08:31:f3:d0:bd:
         67:b6:33:1a:4b:54:43:e7:fc:b4:e6:20:ed:67:45:31:c0:d3:
         10:ba:23:82:40:d4:b4:2c:7f:1a:a7:a7:43:59:18:be:35:fb:
         2e:d8:b2:28:99:5e:cb:86:1a:bf:87:a8:a9:d4:54:cb:81:61:
         52:c7:b8:73:3b:3e:35:35:98:a3:e7:d6:f5:07:fc:69:01:6a:
         6b:cf:08:42:13:7a:07:5d:79:e5:f2:40:4a:00:2b:f7:de:c1:
         c1:0c:b5:04:5d:a7:6f:5c:b5:d1:15:18:54:c9:24:67:0b:82:
         be:11:0c:93:e5:5e:da:d5:5d:83:8f:44:96:04:c0:db:57:a7:
         c0:0c:57:8a:36:74:01:19:56:94:a5:71:7a:e4:ec:08:ab:be:
         7e:57:5b:67:b5:21:00:64:a6:77:19:97:37:2b:86:18:cc:12:
         70:c2:40:25:c4:e7:b1:1e:4a:83:50:a3:e7:d8:19:96:d5:91:
         91:a0:ea:41:26:46:e0:ed:b4:37:fb:3a:3a:87:34:28:4b:5d:
         1d:4d:d4:31:c9:c9:86:60:ac:ce:7f:e0:81:1d:93:52:7f:eb:
         6f:d1:5c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----