Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/07462825-291e-3e7c-a401-bfe89e94b041.roa
File:                     07462825-291e-3e7c-a401-bfe89e94b041.roa (raw, json)
Hash identifier:          8s9jSB8Ja40Q3x440NMdp8UG/5wqTY205BjLgBHUbKI=
Subject key identifier:   BA:B7:44:5D:4C:3F:05:ED:C0:8C:32:ED:C3:7E:41:ED:E6:E9:9D:81
Certificate issuer:       /CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092
Certificate serial:       010D0C9F432858494B641DE745134324F92BC7F0
Authority key identifier: E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/07462825-291e-3e7c-a401-bfe89e94b041.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     14618
IP address blocks:        152.130.252.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:1d:e7:45:13:43:24:f9:2b:c7:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=03a8c91d-cddb-4a61-94cb-f61406f62fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1d:2a:f7:9b:d7:28:d9:18:89:0f:de:bf:a1:
                    40:c5:61:52:cc:1b:3d:ab:8b:ab:72:9c:ca:7b:f7:
                    b3:64:a9:65:5e:f3:1f:28:ec:81:b3:15:ee:3d:9c:
                    09:7a:40:e4:41:20:da:67:b0:0b:25:62:3b:35:a2:
                    a6:db:14:af:8e:c9:a4:66:99:ab:0d:b7:17:41:5b:
                    46:4d:cc:18:b3:49:a4:f1:ab:81:97:7b:fb:d5:51:
                    bf:51:76:d4:29:37:10:ee:76:f9:68:15:b7:99:32:
                    9f:59:07:fe:c1:bb:8c:0a:0a:83:c5:80:04:3d:2a:
                    bd:4e:ac:e3:cd:15:a5:bc:87:97:37:3b:a9:3e:89:
                    20:74:17:69:94:60:1a:df:ba:22:19:82:3b:77:f9:
                    d1:88:16:90:0d:03:ed:be:d0:05:bc:1b:d4:84:de:
                    24:01:ca:4e:7b:df:1f:0b:52:ef:06:4c:22:5f:f8:
                    65:cd:15:97:2a:1c:46:aa:fa:4a:f2:38:fb:7a:e0:
                    32:cf:b3:cc:5f:d5:ee:d2:fa:18:1e:a4:62:54:64:
                    ee:19:c9:f2:1c:dc:0c:d9:f3:84:96:dc:c0:35:6f:
                    9d:b1:ba:55:bc:13:0c:1b:13:14:f1:19:26:7c:0c:
                    ec:5b:30:d8:f3:fd:af:1c:d4:3a:e2:6c:4b:71:f0:
                    31:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B7:44:5D:4C:3F:05:ED:C0:8C:32:ED:C3:7E:41:ED:E6:E9:9D:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/07462825-291e-3e7c-a401-bfe89e94b041.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl

            X509v3 Authority Key Identifier:
                keyid:E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.130.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:4e:39:ad:4c:47:ee:78:c7:73:92:19:62:78:ee:d5:f2:13:
         7b:b1:c9:69:c7:40:c8:77:21:d5:44:40:e2:63:43:39:c3:f7:
         7b:ec:40:28:b6:ec:5b:80:f1:15:01:81:24:32:54:a5:b8:f7:
         2d:e7:65:d3:3f:61:3a:9f:9c:aa:ed:99:ca:05:4e:c5:ac:9e:
         59:ed:b3:1b:f0:7b:49:d9:31:a7:c6:14:b9:be:d5:ad:6a:e5:
         7f:98:2b:6c:f6:31:8d:4e:96:03:03:36:33:39:5c:09:1a:ae:
         51:db:19:52:f1:9b:2c:f0:d9:84:9a:15:69:06:27:c8:a5:99:
         b8:60:f7:cb:ce:63:36:4b:e5:85:5d:47:8e:b1:f8:e4:0c:a1:
         fd:cf:26:16:45:73:5d:3d:78:84:bd:01:d2:1b:d2:84:e3:ee:
         4a:dc:03:bd:71:a2:3b:5f:04:8e:03:38:d6:50:db:cc:07:80:
         20:2f:44:1a:97:84:2d:6d:63:9e:fc:d2:d3:9f:da:32:64:9b:
         b1:e8:fc:7c:c2:19:ea:49:13:e8:e8:96:98:09:bb:ff:f3:e1:
         f1:05:31:11:e2:b6:b8:48:cf:21:04:bc:eb:2b:8f:a7:b6:71:
         b5:e8:69:47:25:fa:6d:eb:7b:d8:ab:c8:ce:5b:45:32:4c:9d:
         a1:12:80:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----