Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/551f6311-e5c8-34eb-9a38-9bc64436d595.roa
File:                     551f6311-e5c8-34eb-9a38-9bc64436d595.roa (raw, json)
Hash identifier:          f8Lkbj5loC4Efacyx2mOGQQ6trSqQvDObr3wL7mh8DM=
Subject key identifier:   28:24:20:78:52:7A:1C:A4:96:1F:BF:B3:25:84:3F:D0:0A:0C:E7:80
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F432858494E2EB058948E0D8F2CE9BD00
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/551f6311-e5c8-34eb-9a38-9bc64436d595.roa
Signing time:             Tue 25 Mar 2025 13:00:51 +0000
ROA not before:           Tue 25 Mar 2025 13:00:51 +0000
ROA not after:            Mon 23 Jun 2025 13:00:51 +0000
asID:                     16509
IP address blocks:        167.234.50.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4e:2e:b0:58:94:8e:0d:8f:2c:e9:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Mar 25 13:00:51 2025 GMT
            Not After : Jun 23 13:00:51 2025 GMT
        Subject: CN=769f31ec-fcc9-452f-b2e2-ccc8ba52e0d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a1:99:01:ef:28:b2:0e:26:44:c0:62:14:ef:
                    2e:47:97:97:a1:ae:96:15:ae:c0:82:3a:e0:93:47:
                    60:5a:d7:59:5d:a4:53:e6:69:5f:7b:73:82:8e:50:
                    e2:f7:c8:3b:4c:a0:83:9c:84:9b:ca:ae:9a:db:61:
                    2d:89:01:a1:59:1b:39:4f:2f:a2:43:11:2e:7e:4e:
                    e9:40:20:8b:e2:23:49:60:e8:de:3f:e7:c9:15:24:
                    21:ea:19:d4:78:4c:2b:d2:f7:af:9c:6b:38:a3:f0:
                    43:f2:7e:6f:c6:7c:5e:9e:10:c8:9b:75:f8:d3:c3:
                    b0:6d:bd:ab:c6:bc:a9:9e:df:db:d9:50:f6:17:c6:
                    fd:05:5e:d3:40:03:63:05:f6:e9:3e:73:2d:7a:cf:
                    ba:71:6e:20:cd:6b:df:a6:35:22:95:cd:25:96:cb:
                    63:bb:d0:b2:5a:23:31:66:0d:d3:f1:05:62:9b:78:
                    4f:eb:ac:ad:7f:85:79:bf:35:60:7e:21:48:c5:eb:
                    f4:58:db:3c:68:aa:a3:d9:ae:68:cd:76:4f:3c:87:
                    76:5b:fa:6a:c0:c7:a6:57:99:1e:de:fb:c8:c3:9c:
                    c4:26:cd:c5:1a:e7:91:d3:c1:e4:98:79:b2:1c:2f:
                    13:08:1a:5e:ae:e5:54:dd:a7:2a:52:2e:08:b4:53:
                    b9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:24:20:78:52:7A:1C:A4:96:1F:BF:B3:25:84:3F:D0:0A:0C:E7:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/551f6311-e5c8-34eb-9a38-9bc64436d595.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.234.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:60:26:38:70:92:ac:eb:a7:2d:ff:0c:db:ab:03:6f:e3:5f:
         65:ea:4d:df:df:9b:85:57:bb:fb:d7:80:d9:22:fe:1a:c5:60:
         05:89:b3:7e:69:8c:e0:2b:50:d0:f8:52:2c:8e:cd:f0:7f:df:
         1c:dc:19:1f:85:47:8a:93:f0:7b:90:f8:8a:bd:68:24:bd:10:
         5d:4e:aa:e6:d5:72:74:a9:b5:60:a0:68:39:92:7d:0b:0d:e2:
         89:40:3a:3f:a1:81:c1:a4:d9:90:10:c7:8d:52:2f:b7:d6:99:
         53:00:c5:56:4f:c7:05:81:5a:5d:de:17:6a:70:d1:bd:41:40:
         f7:8c:e8:44:f1:da:5e:64:c8:d2:a1:27:90:ac:da:bd:da:d6:
         aa:28:a1:da:79:91:b4:fc:42:8b:44:df:2a:21:be:c0:2e:28:
         5c:a2:40:31:eb:da:e4:8a:64:ed:eb:66:33:a1:62:37:b3:c6:
         a4:1a:fb:65:b0:bc:01:b0:2b:76:e0:93:08:e0:6d:78:1e:38:
         c2:ea:75:d4:ad:b1:b8:68:b5:39:c0:2f:d6:b0:fc:c9:5d:10:
         18:ba:b2:d3:d1:ac:e0:6a:a9:79:34:82:f2:dc:3f:68:bb:50:
         c9:5a:7a:cf:a5:51:e9:7b:54:e0:dd:b7:95:ac:c5:ca:50:6c:
         4f:d1:7a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----