Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33d66f77-23e9-3fba-a372-f0a2d74a3921.roa
File:                     33d66f77-23e9-3fba-a372-f0a2d74a3921.roa (raw, json)
Hash identifier:          4fDLfiR27/8atDoaGGK/NMNi2emEkHIkfFOxjeZoStU=
Subject key identifier:   4E:7B:33:94:79:8A:FB:4D:8F:DD:92:15:DE:F6:36:6E:8D:8E:79:29
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584976A98E9F24BDA0C59791DC80
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33d66f77-23e9-3fba-a372-f0a2d74a3921.roa
Signing time:             Wed 09 Apr 2025 01:00:47 +0000
ROA not before:           Wed 09 Apr 2025 01:00:47 +0000
ROA not after:            Tue 08 Jul 2025 01:00:47 +0000
asID:                     13768
IP address blocks:        64.227.212.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:76:a9:8e:9f:24:bd:a0:c5:97:91:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Apr  9 01:00:47 2025 GMT
            Not After : Jul  8 01:00:47 2025 GMT
        Subject: CN=e627bd4b-ebdc-43a2-84ed-5be7fdbd254b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:52:f3:9d:a5:c5:de:fb:06:9f:d5:56:7c:c0:
                    08:6d:f4:6a:a7:e5:ef:1e:75:40:8e:2c:e8:67:81:
                    12:ea:c4:ca:d5:c0:c2:09:89:43:67:18:66:58:a9:
                    61:40:2b:c1:f5:41:93:53:4e:59:6a:91:26:57:c7:
                    b8:a3:de:59:1f:de:75:71:d4:11:a6:dd:4c:69:47:
                    d7:eb:31:47:fb:5a:aa:e5:c0:5d:37:83:3e:8a:0e:
                    6c:65:a9:69:08:a3:53:10:b0:83:51:94:5a:f2:74:
                    72:b6:d3:cf:04:c5:5d:b3:48:89:88:34:de:33:83:
                    d0:b8:7b:12:47:9f:1c:2b:8e:87:7d:63:2f:43:66:
                    cd:2a:00:09:95:04:8d:40:c2:e8:9b:7b:69:40:f6:
                    96:7e:9a:cf:5c:3a:d6:b3:6a:74:cd:a0:61:f7:ef:
                    b5:58:5c:e7:dd:61:cd:cc:ce:f3:9a:67:69:29:ad:
                    74:f4:93:7b:06:ef:78:b1:55:e6:8c:cd:7f:56:57:
                    01:cd:cb:d6:ea:28:aa:54:bd:25:9b:1f:a7:6b:72:
                    0d:d4:9a:1e:ed:ae:3a:a5:67:3d:70:9d:fb:78:c7:
                    92:4d:1f:0d:53:13:b6:a1:4d:b2:68:3b:50:9b:cf:
                    d5:da:50:19:ab:cc:1c:0b:fd:19:a2:68:13:c4:44:
                    70:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:7B:33:94:79:8A:FB:4D:8F:DD:92:15:DE:F6:36:6E:8D:8E:79:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33d66f77-23e9-3fba-a372-f0a2d74a3921.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.227.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:bc:fe:4b:1f:d7:a8:e3:50:5c:ce:68:57:55:71:7c:4d:79:
         fd:e8:97:f6:94:5f:27:9d:44:32:49:81:3d:fe:f7:e6:fb:46:
         44:68:c2:6e:fa:e0:c2:c5:e7:3f:3a:a4:73:63:32:03:ca:62:
         8a:d4:e7:60:29:45:e5:b7:30:69:a0:a9:5c:e4:b5:b1:f4:ae:
         82:a0:1a:fa:1e:6d:5e:62:5b:f6:79:e0:52:31:85:ae:78:f9:
         61:42:12:33:4d:a7:46:a4:2c:d8:81:6c:eb:33:eb:4f:86:a1:
         b4:80:93:eb:76:0d:cc:93:d1:40:bb:64:d9:72:42:9b:c1:03:
         76:ca:a2:53:1a:3f:5e:72:4e:d8:1e:1a:6f:91:69:16:7b:c1:
         28:1e:5c:dd:6c:c7:69:f0:0d:29:d2:11:b2:de:3e:c2:c4:b4:
         e9:cc:06:d7:93:1c:a7:60:05:27:88:45:62:b8:3e:c8:1e:2e:
         00:60:1e:be:0c:e6:15:77:7e:b5:41:6c:d2:4f:02:46:33:27:
         45:43:a1:27:ba:c4:e5:65:b0:3e:94:98:b8:9f:ca:c6:ac:5f:
         67:04:4f:1e:8d:80:9d:4c:2d:42:5b:ff:12:04:e9:a9:5e:78:
         9a:49:a6:89:10:7f:79:3a:3c:3e:0c:86:f2:03:2e:69:2c:0a:
         4d:f1:bb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----