Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fbe5a5a4-48f1-35df-b862-ac5607bc0120.roa
File:                     fbe5a5a4-48f1-35df-b862-ac5607bc0120.roa (raw, json)
Hash identifier:          Kfh6AK+2WNPuLdx38ICjD1ldZDBYyREvmrZikk9OMJs=
Subject key identifier:   ED:F1:2D:D9:7E:DD:74:E0:2C:86:49:F9:82:D2:FE:6B:8F:43:86:4A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584980E636F3727FFDB620CD8D80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fbe5a5a4-48f1-35df-b862-ac5607bc0120.roa
Signing time:             Sat 12 Apr 2025 17:01:09 +0000
ROA not before:           Sat 12 Apr 2025 17:01:09 +0000
ROA not after:            Fri 11 Jul 2025 17:01:09 +0000
asID:                     18779
IP address blocks:        142.252.141.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:e6:36:f3:72:7f:fd:b6:20:cd:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 12 17:01:09 2025 GMT
            Not After : Jul 11 17:01:09 2025 GMT
        Subject: CN=f9dbbf91-b852-43bf-8cb9-0e9d9f691b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:41:6e:b9:ec:36:f8:29:b8:35:13:d7:62:9e:
                    dc:cb:8f:af:27:a4:79:18:a3:58:62:27:80:72:6a:
                    bf:ac:47:b6:43:92:c6:59:c7:e8:02:c2:26:7a:47:
                    0f:3d:21:34:17:52:8d:6e:fb:57:31:d1:82:bc:5e:
                    6e:70:42:16:a7:3e:a9:14:7d:46:6c:14:28:64:36:
                    b6:80:39:77:c3:0b:2d:73:a0:e0:78:3b:f3:09:f9:
                    ec:e7:19:37:c5:8c:cc:d9:87:50:7d:8c:8e:96:92:
                    42:8f:45:2f:e9:b7:75:8d:1b:53:55:43:5d:ed:74:
                    25:5d:dd:5d:0d:42:2f:00:f7:d2:27:bd:a9:c5:db:
                    d7:e8:71:c5:70:18:5d:dc:27:1d:29:a1:11:82:27:
                    67:8b:88:d3:8e:17:54:24:a1:3b:35:36:f5:f6:ee:
                    75:5c:a2:d2:bd:5a:43:ae:0b:fe:d9:29:17:1c:d2:
                    4f:f1:07:57:e5:d0:0b:64:a7:11:87:78:d2:19:8e:
                    9c:f3:03:0e:b0:78:48:84:5b:61:42:25:f2:eb:7c:
                    de:19:9c:54:f1:cc:55:96:03:96:7f:08:61:a1:c0:
                    f3:91:04:d2:2c:f4:39:1d:fc:97:58:28:c5:a5:7f:
                    f2:c1:b2:95:cd:81:76:d2:e9:1a:2e:47:7e:7e:9c:
                    4e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F1:2D:D9:7E:DD:74:E0:2C:86:49:F9:82:D2:FE:6B:8F:43:86:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fbe5a5a4-48f1-35df-b862-ac5607bc0120.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:e3:07:98:68:0b:e2:4a:7b:86:2d:50:19:27:06:5c:02:59:
         ef:f0:ff:6c:dc:59:dc:2a:e7:58:20:c8:6e:6a:0c:c3:1e:1b:
         03:e5:92:77:06:27:7c:67:f9:20:e1:1e:53:d4:82:a6:ef:43:
         31:bd:55:15:f6:53:a5:8d:e5:a0:32:68:c2:38:f0:b1:ad:b7:
         bc:d9:70:a4:a2:b9:73:75:27:9a:63:a4:69:6c:0d:cb:9f:b6:
         1f:88:0f:b7:be:85:f0:00:00:37:74:ad:d8:b3:06:27:7d:82:
         ec:b7:d5:7b:94:2d:e3:e0:e0:81:0f:8c:59:b9:01:9a:96:4c:
         9c:90:04:dc:f6:b5:e8:4a:bc:b6:9e:2d:f1:35:25:b6:8a:11:
         4b:0a:fe:c0:3c:94:72:cc:9b:83:38:d8:a7:24:81:c8:26:48:
         91:87:f1:c5:de:ee:8e:f5:c7:90:f6:df:5e:03:1b:c9:56:e2:
         55:3e:a9:35:ca:0c:b6:7e:2f:6a:a2:e1:e3:d4:63:a4:a1:31:
         92:6e:b3:87:b9:c5:38:c6:d1:9e:cf:ae:c1:75:07:06:a4:2e:
         19:11:da:99:ac:46:ad:b7:65:6b:5b:fe:90:cb:a6:c3:57:47:
         81:70:40:65:9d:c1:b1:e8:a5:05:06:e8:af:12:9d:ad:f5:13:
         d1:8e:47:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----