Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7fc23652-9760-3d99-8168-99afe47bbe30.roa
File:                     7fc23652-9760-3d99-8168-99afe47bbe30.roa (raw, json)
Hash identifier:          KoZ653wWan7GfDDskAOqak4s/qQpnIC7M+h26HCBhdE=
Subject key identifier:   1C:2C:E0:4C:DD:8B:13:4F:2E:94:0B:B2:A5:F8:E1:1A:7C:7E:2E:08
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285848AC60D2F53188AD10B6D60400
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7fc23652-9760-3d99-8168-99afe47bbe30.roa
Signing time:             Sun 26 Jan 2025 14:00:52 +0000
ROA not before:           Sun 26 Jan 2025 14:00:52 +0000
ROA not after:            Sat 26 Apr 2025 13:00:52 +0000
asID:                     272367
IP address blocks:        45.73.168.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ac:60:d2:f5:31:88:ad:10:b6:d6:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan 26 14:00:52 2025 GMT
            Not After : Apr 26 13:00:52 2025 GMT
        Subject: CN=326b06e5-bf01-46fa-9647-f9f47c191cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1b:8b:ac:e5:17:2a:c1:19:3b:f0:d7:57:50:
                    2e:88:c2:40:bd:86:d0:d0:c1:f4:d0:1e:87:6d:dc:
                    5b:d9:71:54:49:f7:e3:3e:fb:35:b6:50:a2:7f:78:
                    68:6e:d5:54:62:68:9a:48:6f:be:de:12:06:89:7d:
                    e6:fe:66:35:a5:9f:3e:33:7c:b5:5c:6e:9e:c1:a2:
                    7a:d7:cf:a5:8c:23:5d:26:ca:25:da:84:94:c5:b5:
                    ee:85:dc:4e:77:12:7c:c9:b8:41:e3:28:e3:13:ba:
                    ff:92:70:ac:27:25:42:07:d9:0f:3c:8e:46:4d:4d:
                    c1:d0:e5:eb:f5:63:7f:6b:c3:4e:c9:e4:7e:e0:77:
                    6c:6a:61:de:9f:10:1d:a4:79:cf:25:16:79:28:74:
                    00:87:0e:fb:35:db:37:91:0a:41:2d:11:e6:80:63:
                    44:b2:8a:2b:6b:87:c4:8d:3f:84:6d:96:f9:9c:a5:
                    69:52:15:7e:b6:63:05:e6:4d:fd:cf:8f:6e:47:76:
                    68:75:3d:e2:44:61:6e:bd:1a:ef:dd:1a:30:89:84:
                    fb:18:de:90:70:43:b6:19:cb:ea:e9:fa:72:c9:34:
                    3c:31:65:9c:e0:4a:ab:d0:a0:2d:28:5f:0e:ab:62:
                    d7:21:55:00:e0:13:06:5a:3b:a3:ef:29:eb:b5:a7:
                    b9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:2C:E0:4C:DD:8B:13:4F:2E:94:0B:B2:A5:F8:E1:1A:7C:7E:2E:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7fc23652-9760-3d99-8168-99afe47bbe30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.73.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:c5:37:39:16:0f:64:a7:01:da:f4:e5:3e:e3:d8:c4:de:6a:
         df:f4:30:3e:c3:84:e9:46:c9:3e:e8:89:a7:2e:f2:14:58:03:
         52:b4:5a:93:b0:81:ea:cd:4e:d5:4b:a4:7d:db:9d:34:2f:81:
         c4:0b:5f:bd:43:a5:8c:7b:b4:c9:09:a8:9c:52:52:90:f0:d0:
         0e:ae:d6:e7:71:06:e9:ad:19:73:04:05:81:67:1f:7c:fa:50:
         bb:e8:3d:37:dd:87:1e:63:02:8c:3a:79:c1:91:1e:f5:66:74:
         f7:2c:29:52:b5:c5:83:98:e4:4d:88:b3:ed:3f:cc:55:9c:6a:
         b3:21:9f:6c:d0:05:a6:c1:8d:c3:4b:90:79:70:e3:90:7c:13:
         48:9c:0b:1c:f0:0e:15:ed:ff:2d:d0:97:d2:0d:0f:5a:5e:ce:
         7b:09:f2:97:9a:1f:21:7d:60:06:8f:4c:87:6a:07:ca:d5:1d:
         23:a8:0d:62:6b:23:eb:54:a6:73:f0:77:98:09:55:a9:56:1c:
         8e:49:00:d4:b0:ad:d7:6a:cd:3e:95:3c:00:31:e4:7f:08:da:
         7c:bd:db:c7:7b:8a:0c:f5:dd:80:2b:3c:1e:24:74:9d:e4:38:
         73:55:6d:0f:af:e5:5c:2c:d6:de:21:c0:41:9b:82:3d:0c:c1:
         44:b7:e8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----