Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0ea354f9-3515-3bb3-9d80-a40c47cbaa35.roa
File:                     0ea354f9-3515-3bb3-9d80-a40c47cbaa35.roa (raw, json)
Hash identifier:          OqBiWkECVkxEChXLObEqL70Nwl1cFenOme2LeDbF6vc=
Subject key identifier:   44:66:83:EF:B3:48:C0:3A:0C:92:15:E0:CF:D8:D5:01:CF:53:11:CD
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858495ABEE6079AAC074909ECAF00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0ea354f9-3515-3bb3-9d80-a40c47cbaa35.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     9009
IP address blocks:        173.211.112.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:e6:07:9a:ac:07:49:09:ec:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=0af7b939-be63-42f8-9915-8b56afd112f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b4:e1:af:30:4c:a3:30:1d:ab:9f:43:b1:92:
                    a7:56:a9:4d:7c:cb:7c:91:e1:ac:4e:ea:78:ac:d0:
                    1c:81:a9:fa:a5:0c:8f:91:a9:c0:b4:f0:ae:c8:99:
                    3c:81:f1:1d:48:a2:89:34:0f:1c:b8:43:82:5a:d3:
                    f9:a2:3b:bf:95:7a:df:e4:c8:69:fa:16:9e:77:1c:
                    66:c9:94:c2:f4:99:e2:95:c5:5f:5d:9a:f4:4a:0d:
                    cb:6e:16:2a:c0:91:db:75:a9:71:04:a5:6a:c1:28:
                    72:13:82:cc:e4:25:6a:51:39:46:3f:69:31:64:47:
                    55:3a:49:43:4b:57:50:fa:c7:72:bd:e7:eb:e9:b6:
                    62:58:a2:c0:8a:d8:e4:a6:ed:67:8f:40:d3:50:4e:
                    f7:98:21:7d:49:87:c3:04:0e:46:49:35:9d:ca:52:
                    a4:8c:ef:2b:bc:3c:c0:c8:f8:83:96:15:c0:63:8e:
                    2c:ec:bc:17:1c:4a:d8:ff:a7:e6:fa:66:04:8d:ca:
                    c3:7d:b1:4a:75:c2:10:2a:0a:67:4f:ab:79:53:d1:
                    92:66:ba:d7:f4:15:fa:2f:dd:b0:57:9a:70:f9:d1:
                    3a:b0:99:fb:c3:38:57:69:bc:76:fa:5e:75:6b:97:
                    2f:e2:d5:92:1b:7d:ab:0d:e9:b0:78:46:9a:ee:25:
                    75:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:66:83:EF:B3:48:C0:3A:0C:92:15:E0:CF:D8:D5:01:CF:53:11:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0ea354f9-3515-3bb3-9d80-a40c47cbaa35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:a5:86:af:33:18:37:fa:a8:9f:e3:8e:70:34:8d:bf:f8:08:
         af:c8:bb:7a:15:75:54:31:41:4f:17:24:cd:26:f1:fb:9e:a0:
         e8:d7:48:af:52:5b:a1:d8:4a:eb:c3:95:b4:43:9f:d5:8c:7c:
         75:9b:e7:9d:25:c0:5b:dd:53:d6:87:47:8a:da:81:b8:69:cf:
         e6:ba:ff:e9:36:b4:de:88:99:e9:c2:e7:5c:34:1e:19:79:84:
         f7:a9:46:d7:fe:1c:98:6a:72:5b:b4:e0:91:6d:62:c7:8a:e9:
         fc:1b:8a:92:df:cf:92:1b:ac:f2:d5:aa:be:d9:7f:d0:22:07:
         5b:4f:b8:b8:d8:91:a8:44:05:1d:70:40:b0:a2:a9:da:2e:9c:
         55:0b:c9:54:01:52:61:95:91:d8:cc:19:4d:7f:2c:29:3b:fb:
         7f:e6:70:8b:3c:6d:95:b3:e8:05:a4:eb:57:4e:cc:d4:73:5a:
         89:52:11:b4:a7:d7:ba:d0:7c:d7:c7:cd:52:12:cd:89:25:9d:
         cf:58:93:f9:3d:38:32:ce:0a:31:f9:72:3d:66:82:0c:04:9b:
         58:05:11:35:a8:f1:b2:1d:a8:e8:26:c7:cd:76:e9:ed:9d:83:
         5e:0d:17:71:3e:d6:f7:63:48:c8:45:37:c7:62:7a:91:47:12:
         58:3a:52:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----