Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/4789457a-e489-338a-acab-d987ad29a7a6.roa
File:                     4789457a-e489-338a-acab-d987ad29a7a6.roa (raw, json)
Hash identifier:          W8fjrekaIs66Ji/9TaCHu5d/MxLLYnptZktbOYuBvng=
Subject key identifier:   0D:98:01:43:8B:9F:B4:F4:78:A3:C1:D8:42:74:18:8D:BB:9F:70:CA
Certificate issuer:       /CN=d6d41513-869c-41f2-9319-11d1e8b95e2b
Certificate serial:       010D0C9F43285848DA70FCD6973500238EDDBC20
Authority key identifier: B4:29:02:33:DF:93:BC:99:FE:07:E1:A7:D2:13:FA:C2:B9:A8:40:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/4789457a-e489-338a-acab-d987ad29a7a6.roa
Signing time:             Wed 12 Feb 2025 02:00:39 +0000
ROA not before:           Wed 12 Feb 2025 02:00:39 +0000
ROA not after:            Tue 13 May 2025 01:00:39 +0000
asID:                     32146
IP address blocks:        208.94.236.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:da:70:fc:d6:97:35:00:23:8e:dd:bc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d41513-869c-41f2-9319-11d1e8b95e2b
        Validity
            Not Before: Feb 12 02:00:39 2025 GMT
            Not After : May 13 01:00:39 2025 GMT
        Subject: CN=f4c09e4b-9a7f-4538-bae4-bfe970f211d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e9:7f:58:0c:49:99:f8:96:63:8d:2f:a1:25:
                    8f:b0:6a:f4:8c:2f:5f:cf:c5:ae:45:7e:e8:d7:5e:
                    7a:c7:ce:a8:7b:62:6f:08:c6:47:20:7f:77:71:19:
                    8b:11:a9:93:99:27:9b:ef:0a:17:b4:d1:1d:dc:62:
                    4b:a6:cb:d6:c2:2f:e1:af:d0:8d:4b:f4:c2:c7:98:
                    e6:2d:5f:32:31:eb:24:4e:4d:94:5e:9b:5a:b8:a6:
                    eb:a6:1a:7c:ab:f5:5a:d1:0d:6d:34:e4:39:ec:79:
                    9c:58:45:ca:8a:32:8b:cd:c2:c3:0b:d8:dc:0e:ad:
                    cc:f7:4e:95:33:ff:68:b6:c3:2a:72:41:08:83:a6:
                    4e:51:ec:ea:a2:4c:d2:ea:c3:b6:98:9d:b8:34:1f:
                    15:9a:d3:de:85:44:fc:69:1c:e3:32:ea:cb:e8:47:
                    6c:00:c6:ec:de:c0:7f:93:67:bc:33:53:10:db:ff:
                    26:57:36:8d:77:92:6d:94:b0:1b:40:eb:b3:04:c6:
                    81:6c:73:bc:33:7c:61:08:ad:ef:fa:a9:8a:46:70:
                    d0:60:d5:c0:bf:3c:b9:5c:59:df:67:7d:a1:f2:e9:
                    4c:60:e5:df:24:5d:d4:2f:26:5f:0f:2f:8d:4b:07:
                    f7:ba:f8:d4:56:ad:f3:0c:19:0d:2e:8d:0d:19:59:
                    9a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:98:01:43:8B:9F:B4:F4:78:A3:C1:D8:42:74:18:8D:BB:9F:70:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/4789457a-e489-338a-acab-d987ad29a7a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/d6d41513-869c-41f2-9319-11d1e8b95e2b.crl

            X509v3 Authority Key Identifier:
                keyid:B4:29:02:33:DF:93:BC:99:FE:07:E1:A7:D2:13:FA:C2:B9:A8:40:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.94.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:a5:3e:4e:ef:3b:07:2f:9e:cb:68:64:d0:f3:2c:c4:54:79:
         4b:3d:24:9f:31:18:b7:da:f0:d5:ca:45:3e:8d:94:dc:fd:a7:
         6b:80:94:b3:db:43:b7:d9:3b:ae:82:a7:36:43:37:dc:7c:7b:
         e4:be:62:96:8d:a4:41:81:cd:15:8c:27:0a:e5:bb:ba:9e:29:
         84:2e:fb:bd:32:6e:2e:15:9d:96:b0:ef:6b:2c:ad:a4:84:fc:
         8a:86:c8:65:3d:5c:6f:7d:17:9a:cc:e0:85:1d:2c:0a:35:46:
         8a:bf:03:cf:a1:03:fb:d4:af:10:46:1e:1b:69:bc:c7:68:79:
         5e:8f:7e:d3:a5:2d:d6:f3:05:e1:12:c1:17:20:d9:54:9b:82:
         b4:81:84:e6:03:2a:3d:a7:40:40:ec:af:b3:ee:f0:9b:08:13:
         5b:27:6e:0a:31:8e:d4:57:40:d7:72:b1:37:17:5c:67:fa:ff:
         eb:85:d5:c4:83:78:db:b0:ae:3f:80:1a:bf:fe:9d:b9:68:e0:
         7a:a1:94:0d:b0:6b:7f:78:f2:57:93:c6:bf:dd:2b:8c:f2:02:
         fa:ac:dc:20:8f:d0:25:5b:3e:7d:df:1d:a4:df:f6:42:d6:3c:
         73:46:85:2a:07:d2:62:a6:2b:70:b3:4b:45:98:97:ef:f1:eb:
         6e:8b:c5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----