Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/bd55586c-5cd2-36c4-b0b6-b866cbfd6bb0.roa
File:                     bd55586c-5cd2-36c4-b0b6-b866cbfd6bb0.roa (raw, json)
Hash identifier:          6aoJOBfpJmJq69xW0jeaOJ8fnj82VpLRyoiDyz6m71g=
Subject key identifier:   3E:F3:96:68:DE:F4:3F:44:3B:DB:66:DD:0B:2A:F4:1E:97:C6:98:00
Certificate issuer:       /CN=61078829-6930-46b0-9ac8-91898d36b056
Certificate serial:       010D0C9F432858498339F448879AF32F12DD0100
Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/bd55586c-5cd2-36c4-b0b6-b866cbfd6bb0.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     33548
IP address blocks:        209.54.32.0/20 maxlen: 20

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:f4:48:87:9a:f3:2f:12:dd:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=0615b5d0-2e95-48d8-9b2c-1ade06d33c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:21:f5:bc:bf:49:d2:9f:94:52:7f:2e:5a:5d:
                    92:96:4c:cd:c4:a4:9d:1b:93:ac:08:bb:9b:ba:92:
                    c6:55:92:77:3e:39:db:17:ae:9f:af:20:97:65:3b:
                    35:c3:f8:07:f1:64:a7:30:60:fd:0a:92:76:91:20:
                    8a:a6:c1:cd:ec:80:c3:ac:d4:43:e8:1b:a8:86:f7:
                    7e:20:69:a5:f2:34:ca:cb:10:ce:18:67:fb:3d:21:
                    6b:29:0f:b7:83:90:12:85:44:f1:b5:d1:62:8a:66:
                    b7:b7:df:17:ab:5e:3f:ee:7b:d5:d8:1e:2e:da:aa:
                    95:3e:52:e0:b6:b0:33:7c:98:b9:cd:7c:96:b4:25:
                    82:ec:df:0a:ad:ce:f8:5a:5a:85:7a:7c:3c:91:26:
                    dd:da:92:20:ec:58:98:14:6d:b8:13:45:84:e0:8c:
                    a8:e1:48:18:b3:bd:4a:9e:f8:19:2f:0e:89:ad:ef:
                    06:bf:02:41:df:ff:d1:75:ac:b7:07:f9:40:d2:54:
                    c7:b0:86:26:f9:b7:d8:00:58:9f:0c:aa:1e:0c:f6:
                    22:5a:f6:c5:63:f8:cf:c9:8f:df:27:73:e5:f7:19:
                    84:9f:bd:de:c0:c6:19:47:41:40:15:cb:88:f3:dc:
                    60:98:d1:c1:98:c2:8a:0c:f7:b3:68:76:af:93:0e:
                    00:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F3:96:68:DE:F4:3F:44:3B:DB:66:DD:0B:2A:F4:1E:97:C6:98:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/bd55586c-5cd2-36c4-b0b6-b866cbfd6bb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl

            X509v3 Authority Key Identifier:
                keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.54.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:3c:27:2f:73:9b:6c:22:de:ee:4d:85:b7:ec:73:b9:ed:9b:
         ad:06:10:1c:59:11:37:0c:ae:2a:de:f5:d8:04:82:0d:60:1f:
         60:1a:34:74:50:88:db:c1:a3:54:f4:38:09:5b:bd:ea:86:1a:
         6c:8c:dd:ae:8f:24:a5:a3:13:c9:78:e3:9c:42:43:e0:11:e2:
         02:cf:f4:ce:2e:d1:7b:2d:d3:d3:d6:0a:f0:e0:16:6c:88:1c:
         67:a0:ed:17:cf:dd:62:03:10:4e:27:ae:65:5a:2f:a3:5e:66:
         59:cf:74:e4:f4:6b:69:a5:09:bb:06:f8:80:d2:8a:b6:96:5c:
         ca:b5:8c:c1:3d:6d:d1:c6:e2:95:da:4b:87:8d:6e:dd:7e:c4:
         42:1b:0d:6c:79:0c:36:9e:73:d9:18:1e:0f:40:99:a2:c1:05:
         37:f9:f2:b6:5c:9c:76:a2:a0:04:6d:0e:6a:98:0f:07:8c:3d:
         e5:8a:70:b3:57:fe:44:f6:25:28:a6:84:52:e8:16:1c:52:69:
         c0:d5:18:e9:a7:2f:b3:97:4e:19:16:09:0f:3f:e0:03:ac:8d:
         53:f5:2d:c6:0f:c0:82:44:dc:19:f7:50:92:7d:dd:78:b0:ed:
         64:b1:75:35:4e:ee:ee:cc:f8:cf:7b:c7:41:4e:62:23:72:a9:
         94:f5:ad:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----