Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fe5d3a04-1b5a-3e6a-9a68-0360aaf49906.roa
File:                     fe5d3a04-1b5a-3e6a-9a68-0360aaf49906.roa (raw, json)
Hash identifier:          e194cvdX6yseBE3kQE1o9ELPLSF9SR4t1CZNEwLzVOs=
Subject key identifier:   C8:75:5E:61:D0:38:04:B2:92:FD:98:83:27:E6:1E:FD:58:41:EB:4B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848D64126BEBAAD50B44533EA00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fe5d3a04-1b5a-3e6a-9a68-0360aaf49906.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     204957
IP address blocks:        172.120.60.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:26:be:ba:ad:50:b4:45:33:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=86d43518-d2b2-45db-b1de-94ada807c627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8f:01:ce:8b:1f:16:e5:1f:d6:3f:00:59:ce:
                    b5:dc:a3:8c:71:cc:4d:be:36:9c:55:1a:49:df:ac:
                    a5:c9:14:3c:ff:4e:fa:62:e2:d6:52:13:5f:2b:df:
                    40:3e:02:8f:94:80:ea:29:2d:ae:5e:f3:00:09:b3:
                    7b:c7:f9:7d:34:6b:65:c7:74:dd:d5:ac:b5:22:63:
                    17:16:3e:bc:a3:f2:97:48:94:47:78:ac:6d:19:70:
                    85:01:71:52:72:b7:c6:03:5d:f5:79:75:4c:b7:42:
                    1c:5f:a8:e8:90:63:33:d9:5d:cd:2e:ce:70:bd:2d:
                    ff:b6:09:5d:6c:99:7f:de:8c:42:0f:c0:d1:f7:70:
                    73:48:fb:42:10:6e:78:17:07:8b:a6:cd:6e:16:d6:
                    61:b3:42:74:24:61:99:f5:9f:98:01:72:ea:e5:7f:
                    32:6c:7e:f8:d1:3a:32:de:46:86:e6:32:57:43:bd:
                    3c:b4:92:ac:50:a5:ae:92:b5:5b:11:58:11:c9:a2:
                    43:c5:15:df:de:eb:97:e2:10:0c:fc:f2:2b:3b:ce:
                    0b:19:b3:f4:59:0d:49:ce:28:5e:39:f3:8a:97:26:
                    65:8e:ff:99:c7:ec:c9:98:54:dc:51:f0:3e:60:a6:
                    86:93:1f:71:24:b7:8f:d9:a2:95:73:64:d6:2a:2a:
                    24:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:75:5E:61:D0:38:04:B2:92:FD:98:83:27:E6:1E:FD:58:41:EB:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fe5d3a04-1b5a-3e6a-9a68-0360aaf49906.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:b2:0f:06:e0:a7:5c:80:5d:98:cb:ee:4a:62:77:1b:a3:2b:
         30:72:de:f0:35:93:4a:3c:79:0f:2d:99:dc:6b:b0:59:5e:52:
         1d:d7:da:eb:ce:61:17:f9:23:9b:30:25:86:9a:44:70:fb:4a:
         58:a2:81:64:d9:97:c7:80:7f:c6:4a:2f:5b:d3:ad:ed:55:ec:
         5a:09:50:46:63:68:e1:3e:05:81:f7:9d:41:f1:08:9f:84:a0:
         d3:e4:5e:ae:6c:ad:20:7e:2a:34:2d:30:a8:14:d6:cf:46:ea:
         65:e2:1b:2e:a4:2e:a4:a4:39:94:48:e0:cf:a4:d1:2c:0c:38:
         b5:ef:23:e8:a8:5e:d5:cb:b5:4a:fa:ce:db:bd:28:e7:36:b4:
         76:07:87:31:bc:04:e5:56:da:be:aa:56:08:40:64:45:b3:d7:
         44:a1:f5:aa:87:a9:4f:fd:d7:68:67:83:74:94:48:0d:83:59:
         59:58:ba:51:b2:90:d0:c2:4a:3f:53:64:6f:b2:1b:3c:ac:f7:
         e3:0c:ad:32:c4:6d:75:e4:12:52:ff:87:cb:5b:5c:43:67:de:
         f1:9b:96:6f:d1:7d:35:5e:d1:ff:f2:04:fe:0f:4b:ce:d1:34:
         ce:90:d6:fd:4f:69:7f:ff:5b:a6:cb:7e:fe:c6:8c:a7:f3:57:
         66:01:aa:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----