Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/98d07a5c-ce5f-3c3c-a137-0243640b98cb.roa
File:                     98d07a5c-ce5f-3c3c-a137-0243640b98cb.roa (raw, json)
Hash identifier:          Il02Unn8SzKYGwMDLS5N4h71qaDP3kk3mRfst81ZCJY=
Subject key identifier:   CD:7D:43:CE:0D:96:05:46:BA:6B:18:C0:3F:2A:23:0B:1C:28:24:0A
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848CDE1030E8DC353EBCD545700
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/98d07a5c-ce5f-3c3c-a137-0243640b98cb.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     19836
IP address blocks:        216.168.228.53/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e1:03:0e:8d:c3:53:eb:cd:54:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=e2684753-c04e-415c-bad6-8c26c08668f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9c:17:8e:6a:1a:e6:6b:a7:a0:3a:82:01:1d:
                    ce:2a:11:bf:6d:7a:46:78:82:94:76:fb:c7:a3:59:
                    66:07:a5:76:16:c7:ef:a4:5f:4a:bf:39:47:b5:f3:
                    75:f1:4b:ab:ab:21:5a:de:46:ab:3e:28:6c:68:fa:
                    a8:39:f6:0a:0d:da:43:73:14:67:98:3d:b0:87:0c:
                    d7:03:f3:d1:97:17:88:67:5a:bc:65:78:de:77:02:
                    36:16:c7:a8:ff:5f:96:a1:ee:1e:81:9c:a0:c9:e9:
                    43:4f:b3:54:4d:66:c9:d5:bf:2f:5c:dc:38:08:9d:
                    c8:94:26:bc:f4:2a:d6:16:79:6a:43:d7:9b:cc:0c:
                    d3:5a:70:17:b3:01:e3:5f:49:a6:03:d6:69:d6:5e:
                    e1:1f:82:95:d0:58:15:66:93:08:55:03:26:26:f1:
                    aa:5d:35:59:f3:63:78:38:be:3e:7d:67:10:d0:74:
                    b6:f2:ba:3b:29:91:03:3f:df:f6:90:3b:34:08:13:
                    f3:df:3d:83:c2:6b:10:8d:9d:a1:be:f8:5e:57:e4:
                    03:47:f0:97:1e:78:c9:42:dd:7c:a8:94:ff:0f:86:
                    3d:6f:86:53:17:a7:95:97:7b:8a:78:44:d6:06:11:
                    c6:ca:85:cb:b4:25:c5:2b:e4:0c:01:23:04:91:fb:
                    51:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7D:43:CE:0D:96:05:46:BA:6B:18:C0:3F:2A:23:0B:1C:28:24:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/98d07a5c-ce5f-3c3c-a137-0243640b98cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.228.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:9f:0c:4b:82:d8:6d:53:69:79:b4:1d:96:5b:bd:c0:0e:1d:
         8a:7b:89:45:ea:f9:ca:69:71:c0:02:bf:67:9d:06:cc:b7:df:
         7c:a8:3b:7d:4a:90:eb:78:84:ad:09:a5:9c:49:3b:f8:68:37:
         dc:24:07:45:53:59:32:ef:07:46:cf:e7:9c:75:b4:d4:98:3f:
         e4:a0:c8:51:8d:90:83:cb:c9:2c:4d:d9:b7:62:cc:7b:98:df:
         dd:c0:75:96:62:d8:d4:d1:8c:29:c5:fc:53:dd:2f:48:61:d0:
         1e:68:93:1e:a5:ab:3a:4b:53:cf:63:06:a7:04:b5:4b:f8:d3:
         43:bc:d4:70:ea:48:d7:78:db:23:16:46:02:c7:bc:a6:91:e0:
         85:01:47:35:92:18:de:16:1c:fd:fe:c2:48:b3:39:a9:19:40:
         f5:ed:82:8c:8e:1a:3d:f2:bc:52:62:cf:41:57:ec:f8:ce:05:
         5b:d6:26:40:32:51:75:86:37:ec:0c:d0:92:e7:f1:1a:28:d4:
         36:ce:1e:81:33:ae:40:c6:06:8a:90:39:dc:45:89:1c:33:c1:
         74:f9:6d:8e:ef:a6:d9:79:52:6e:66:ef:3c:17:56:ad:88:42:
         a5:bd:da:9d:cd:fa:dd:71:f2:a2:0c:7f:f7:dd:89:21:f7:73:
         07:2f:cb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----