Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/c05b354f-1791-35e5-92c6-b06bb74c7f49.roa
File:                     c05b354f-1791-35e5-92c6-b06bb74c7f49.roa (raw, json)
Hash identifier:          37VblQmj856D9VFpzag0xv2jvvGmCCiiBcl3K+H+6cI=
Subject key identifier:   D8:F6:55:78:3B:16:6F:D6:05:BA:84:CC:01:74:3A:CE:57:F6:23:8D
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F43285849350E891FE0186B1425C03200
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/c05b354f-1791-35e5-92c6-b06bb74c7f49.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     18434
IP address blocks:        69.36.16.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:89:1f:e0:18:6b:14:25:c0:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=2986f250-1b2f-44cb-b031-adbb01f9cf8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:61:34:7b:de:ad:d7:34:32:dc:7d:3a:91:68:
                    86:0f:0f:f6:9d:c5:d6:99:85:fe:5b:93:86:10:41:
                    27:8e:00:29:6c:4f:9b:54:e3:99:87:40:85:7c:79:
                    65:63:4b:b9:06:1e:5c:df:48:a9:6a:11:ed:14:4d:
                    9a:2e:76:d4:4f:a0:4f:c7:87:c6:35:91:11:cf:ed:
                    72:4d:5c:72:13:35:90:ab:10:d5:57:82:c7:a7:f2:
                    b1:28:02:c5:01:81:01:c7:cd:a3:50:c8:34:d8:03:
                    f1:cd:02:58:32:a1:1a:30:62:7f:d7:2e:7a:d8:43:
                    db:b8:a5:d6:e4:34:08:45:1d:f0:5f:40:a1:b1:2f:
                    0c:17:da:6a:e3:95:95:54:5a:55:89:0d:7c:1c:9b:
                    bd:37:5c:1d:3d:aa:8f:fa:2d:1a:86:02:34:25:cc:
                    fe:f5:c6:a4:c8:84:62:3d:5a:a0:f9:08:f8:17:40:
                    18:f8:a5:aa:ac:6e:2e:c8:91:2f:e7:b8:d0:f7:9e:
                    96:f8:ab:f7:33:c6:fd:4a:ee:cf:22:f3:1d:45:4c:
                    83:a9:79:37:03:0f:98:19:ee:92:d0:0a:27:24:b0:
                    f4:e6:52:57:18:3b:fc:97:49:1d:ce:c9:d4:e4:40:
                    fd:eb:ae:54:94:7a:3e:fb:ed:f3:bc:43:e6:c3:ff:
                    7e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F6:55:78:3B:16:6F:D6:05:BA:84:CC:01:74:3A:CE:57:F6:23:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/c05b354f-1791-35e5-92c6-b06bb74c7f49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.36.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:a1:a4:1d:d1:69:92:b4:cb:c2:c7:5e:24:f8:2b:82:ec:2b:
         78:6b:39:13:6c:23:a6:00:1d:43:00:ee:a1:9f:7b:24:dd:ff:
         d7:e9:22:36:ff:71:e3:e4:79:62:3c:59:30:7b:9c:0b:89:68:
         16:48:09:9f:cd:e2:60:b0:02:54:d5:54:b0:dc:2e:dd:7a:23:
         23:1c:7a:56:7f:aa:c5:37:f5:3e:30:f9:02:f3:66:c2:52:b0:
         66:85:70:40:92:2a:a8:f0:0a:ba:43:2e:20:db:eb:60:2b:1d:
         1e:cf:31:a6:2e:7e:37:b7:f8:10:69:bc:f3:47:a6:8a:78:79:
         19:45:18:1c:f2:4a:a2:5e:de:1b:00:64:f8:4f:6d:bb:b8:c0:
         0f:ac:dc:00:2d:46:86:53:6e:c6:b3:e0:78:7f:d2:6d:5c:b0:
         fa:e7:63:2d:d9:99:8b:31:ee:f1:ad:e8:09:50:b3:75:9d:82:
         98:02:87:1c:a9:b2:95:7a:2d:23:60:b5:c0:70:d6:43:57:1e:
         4a:d7:27:6d:36:06:e7:a6:09:55:59:81:9c:e1:3e:8c:45:49:
         ac:e6:79:98:7b:b7:4f:d4:a7:9c:7b:81:3e:b1:8f:47:5a:6d:
         8b:60:17:01:7b:69:2d:68:24:79:0f:b2:48:ca:e0:04:e8:50:
         49:f7:25:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----