Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/752baa26-2a71-34df-82d7-547a2a8ddd96.roa
File:                     752baa26-2a71-34df-82d7-547a2a8ddd96.roa (raw, json)
Hash identifier:          wVI732CyA6iyLqJbIp2GNPlPOO2wU/1HwLXqZIrifNo=
Subject key identifier:   B9:30:7D:34:BF:3A:63:BB:0E:90:6C:E0:33:89:0C:81:EC:22:64:8D
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848D21120F0BA9A80A9CAD9B720
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/752baa26-2a71-34df-82d7-547a2a8ddd96.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     7029
IP address blocks:        98.20.64.0/20 maxlen: 20

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:20:f0:ba:9a:80:a9:ca:d9:b7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=f75e1893-fa6f-45e9-b5ac-05edc33cbed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ab:4e:e4:ba:a3:38:71:df:6f:60:c5:3d:e0:
                    15:64:cf:bc:8e:33:13:c7:33:5c:32:61:b9:56:5f:
                    9c:70:ca:2c:9c:f3:87:51:a2:bf:ac:3e:2a:4d:58:
                    7d:fa:f9:77:2a:8e:ef:e2:db:23:2f:df:a2:68:73:
                    6c:30:60:26:bc:8a:da:8e:09:72:3d:06:9a:1f:ac:
                    62:9b:b1:b8:cb:d2:61:a0:d0:fb:0e:f8:b9:79:ba:
                    b6:22:ac:da:2e:eb:2f:50:a4:ba:aa:54:f8:ae:ce:
                    61:b9:54:f4:f8:a8:b5:31:09:d4:64:b6:42:03:61:
                    ff:a0:1c:28:f8:21:f8:26:3d:25:0c:62:25:0c:de:
                    c3:5f:b4:89:66:ee:30:12:8d:9a:f5:9a:5b:5f:fb:
                    58:ca:3b:8b:c5:fb:76:91:b6:fe:7c:af:ec:48:6c:
                    de:3d:9c:fb:81:89:a1:3b:a0:2b:99:9f:d7:31:5b:
                    58:d8:df:91:07:4d:54:ce:aa:68:50:6d:fb:26:1d:
                    ac:80:fa:17:dc:f7:ae:1b:4e:13:3b:ad:e3:33:67:
                    f2:35:9b:6c:e8:a8:ac:62:26:ff:51:d1:ae:40:6f:
                    1a:d5:36:55:05:14:17:3f:9d:9e:f2:9e:6e:fe:7b:
                    0a:ee:5b:37:5c:48:7f:f6:c2:ac:f8:59:e2:0c:b4:
                    a8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:30:7D:34:BF:3A:63:BB:0E:90:6C:E0:33:89:0C:81:EC:22:64:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/752baa26-2a71-34df-82d7-547a2a8ddd96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.20.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:31:4d:82:75:ad:dc:0d:71:48:07:cb:02:d4:a2:ec:cb:1f:
         b8:e5:0d:77:f3:10:30:bb:82:17:5e:e0:68:05:26:e6:46:ac:
         51:36:70:d6:87:51:09:15:1a:62:5d:ca:e5:f4:f0:82:8a:75:
         c9:9f:4e:40:55:3c:40:e5:ed:80:5c:63:be:51:ff:21:c0:92:
         c9:f6:1b:a4:0a:2a:ca:a4:0c:64:d3:6a:76:ac:36:2a:c7:81:
         02:76:3d:d9:67:4c:05:3e:bc:80:31:27:a5:32:0e:32:0c:d2:
         6e:16:cc:e6:76:81:ae:63:21:ab:bf:95:dc:a0:9a:e5:51:43:
         e0:02:c5:14:d2:63:46:05:b0:95:dd:02:29:4b:76:8d:77:86:
         25:63:d8:0d:6f:d5:d7:7d:5b:9a:a8:6f:a9:2e:ce:4b:10:af:
         10:86:60:f5:e8:be:d5:4e:43:bf:75:62:b6:3a:f3:34:73:a6:
         e1:bd:11:d9:1f:57:e0:7a:31:91:f3:02:9b:37:87:12:81:97:
         d2:f7:12:30:28:78:95:eb:cc:80:25:e4:76:06:6d:51:5f:99:
         df:e2:69:f7:d5:64:53:bd:77:12:39:3a:05:47:65:be:ed:33:
         a0:0c:eb:16:c9:67:31:16:8d:ce:fa:0b:21:06:d8:04:10:81:
         5b:99:6a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----