Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7455574c-c043-3995-a74f-c5774f5dc642.roa
File:                     7455574c-c043-3995-a74f-c5774f5dc642.roa (raw, json)
Hash identifier:          ww75UKGcGpLuF7JjtwTYGrvMYPyAxZVYtCOwJ09qFPs=
Subject key identifier:   C8:A2:D7:31:3D:B9:AF:81:26:3E:3E:EE:B7:D6:2B:49:9D:E1:3B:FA
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858494B64048E51688FC8BB76DD14
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7455574c-c043-3995-a74f-c5774f5dc642.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     19446
IP address blocks:        67.227.24.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:04:8e:51:68:8f:c8:bb:76:dd:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=6cafb74b-ef73-4384-bb20-d4eefcb09aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:21:68:50:20:74:62:3b:9c:a5:a9:8c:ec:cc:
                    f7:f9:3c:f4:eb:39:55:62:cf:94:d8:bd:9a:bf:d9:
                    2d:d6:4f:16:ee:18:c9:2b:80:69:2c:29:23:ea:ed:
                    36:5d:f0:2d:09:c4:a9:15:c3:c4:1b:bc:07:bb:7a:
                    df:6c:cd:a3:22:f0:fa:59:20:bd:de:ea:ee:90:e7:
                    c8:55:35:e7:d5:ed:58:b7:5a:54:60:2a:76:86:ec:
                    f2:58:40:6c:35:b7:ae:58:7b:f1:ad:8e:32:a3:67:
                    11:09:20:ff:5b:4b:7a:ab:e5:0d:2d:e9:3b:c8:e1:
                    61:6b:61:7e:fd:38:1f:85:d9:33:d2:77:f4:c0:e6:
                    9b:97:77:7e:66:85:b3:32:f3:8a:c3:0c:46:40:86:
                    bf:d9:fe:db:3a:94:6c:c2:68:45:d2:cd:2a:44:53:
                    e6:f3:de:ca:6a:20:a7:21:7e:80:01:4d:0d:d7:9d:
                    6c:74:75:57:ba:19:8b:8d:14:9b:17:01:6e:e8:15:
                    2e:01:82:fa:fe:b0:cb:5f:d0:7a:fa:31:63:09:c8:
                    73:b8:7e:ef:b3:3e:18:9c:95:17:fa:40:c6:ac:1c:
                    31:30:56:8b:11:46:fe:bf:7b:13:78:79:f4:a8:2c:
                    27:f0:dc:82:6f:c1:56:d0:b4:65:f9:7a:a1:27:4b:
                    b4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A2:D7:31:3D:B9:AF:81:26:3E:3E:EE:B7:D6:2B:49:9D:E1:3B:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7455574c-c043-3995-a74f-c5774f5dc642.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.227.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:77:56:3b:1e:e5:c1:b8:f2:a5:68:cd:2a:53:8e:15:6d:74:
         41:c1:55:11:46:d1:0e:b9:2a:ee:ef:d4:7f:3a:a6:61:56:3a:
         68:7c:c3:e5:06:4d:ca:c4:34:c8:88:e6:ff:cd:8b:ee:c5:12:
         f7:e1:11:1c:73:72:61:6c:1c:81:f3:bc:03:3e:e3:12:8e:cc:
         06:7c:ec:8f:c0:74:51:23:3d:bd:bc:29:90:41:02:f8:53:9a:
         e0:57:25:73:e0:0c:63:02:53:25:21:55:ef:78:c9:30:9d:79:
         4b:96:63:87:b4:e2:4a:ed:93:29:4d:6a:c9:9e:89:40:a7:dd:
         b5:9d:51:fa:7e:a4:3c:0c:c6:94:d4:d8:03:bc:94:17:5e:ad:
         62:d9:9d:90:a1:d1:58:5a:a6:d6:17:c3:6f:e1:b4:e0:0d:97:
         1a:9e:97:98:e0:c2:8e:c2:8b:f2:6d:74:34:70:ba:db:4c:c1:
         88:30:70:94:19:92:87:64:78:e4:ba:bf:f4:fe:ef:5e:bd:aa:
         2d:53:22:43:37:04:c2:5b:b0:39:cb:cb:3b:66:38:e6:e5:89:
         86:98:f3:b5:2c:50:92:c2:ba:fc:89:ae:80:75:90:8b:ae:97:
         05:61:32:98:cf:9c:62:75:bb:ff:ec:e9:31:48:15:89:3c:b8:
         87:01:8d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----