Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/79fff64a-44b7-3fdd-aa8c-398a539f6da0.roa
File:                     79fff64a-44b7-3fdd-aa8c-398a539f6da0.roa (raw, json)
Hash identifier:          AI1WzsQIR6d61m/qygGtBdxrnt3/r0XenBzLbyoJLI8=
Subject key identifier:   86:C8:BD:77:B2:26:A7:90:E8:8D:81:71:79:41:70:72:32:0D:73:9B
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848CDE1092519BB5CD4A587B180
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/79fff64a-44b7-3fdd-aa8c-398a539f6da0.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     397195
IP address blocks:        216.168.228.53/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e1:09:25:19:bb:5c:d4:a5:87:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=50e47cea-31e0-4956-8686-b8a137f0ffa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6d:f5:82:55:bb:3e:a3:de:b0:8c:d1:2d:c1:
                    9a:ab:29:d7:bc:10:8f:99:6e:6f:c6:d3:ab:df:85:
                    20:51:27:96:c7:26:7e:33:85:ec:7e:87:54:de:d5:
                    98:be:00:4b:29:71:be:16:bb:38:83:da:56:31:a7:
                    d2:7e:33:3e:f6:55:68:82:67:99:d9:0a:02:7e:8b:
                    7a:df:ff:78:e8:30:e4:06:4b:31:ec:72:72:b3:ef:
                    00:d5:1e:78:7c:7f:27:8c:69:53:ca:e9:7b:ae:a7:
                    2f:d8:4e:04:3c:25:8a:9d:cc:64:1b:32:c8:c4:f9:
                    c3:27:ff:f1:2f:ba:c1:78:71:9c:93:88:f2:32:3c:
                    a6:7a:1b:9c:b7:59:64:72:70:96:ba:78:77:f0:e1:
                    0a:74:3f:81:21:cc:20:c7:4e:a2:37:79:56:2d:41:
                    d1:1e:26:dd:94:02:84:16:33:01:6a:b2:12:b5:3b:
                    f9:5a:54:8c:35:85:3e:d5:3a:d1:e2:ec:95:db:f0:
                    83:2e:c1:e8:0b:88:52:9f:51:d7:14:ff:42:8b:20:
                    c1:d2:9f:39:a7:37:36:2a:26:95:fe:b3:85:46:a6:
                    b7:51:fb:d7:b8:0f:11:ec:53:3d:fc:0a:b8:79:a2:
                    4d:08:24:8f:39:b2:a1:ab:70:b7:3f:27:43:6f:43:
                    98:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C8:BD:77:B2:26:A7:90:E8:8D:81:71:79:41:70:72:32:0D:73:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/79fff64a-44b7-3fdd-aa8c-398a539f6da0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.228.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:e8:48:af:95:bc:41:9e:03:38:e5:e3:c5:54:76:2d:23:cf:
         9a:1d:7e:7e:57:6b:46:f3:86:c9:71:ed:12:39:8e:4a:58:73:
         87:6c:55:8d:bc:02:3f:92:36:46:35:55:bf:c7:81:e6:42:a3:
         f4:2b:54:37:93:bf:bc:f6:77:81:70:b1:52:98:71:21:3c:b3:
         39:17:ba:a3:82:0f:f3:ec:8d:0b:bd:f5:08:8d:c7:d5:8e:8a:
         13:40:8f:e7:3f:c1:5e:fd:8b:3a:f7:83:5e:f2:4c:b5:26:41:
         22:6f:57:39:24:df:e7:ef:69:65:9e:bc:10:7a:38:7b:26:a4:
         87:ef:dc:3e:b6:fa:13:e4:18:15:10:26:41:04:f9:ef:6c:d4:
         e5:0e:7d:4d:b4:18:87:59:42:31:ae:66:67:ea:48:b2:d1:65:
         00:fd:95:a6:47:9d:00:f7:9a:30:6f:44:d0:0e:c5:77:60:18:
         21:8f:80:0b:d8:6d:1b:78:79:26:a8:9b:16:6c:83:ad:cc:84:
         e8:e5:87:3c:05:07:eb:f1:d9:dd:da:ba:31:6c:ac:be:ca:ba:
         28:5e:35:66:fb:3b:88:fb:7b:08:c3:d5:42:53:e2:9d:0d:f7:
         c7:94:aa:1d:c9:8b:c7:9f:d6:e5:27:1e:a8:81:3f:c5:55:3a:
         98:7c:f1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----