Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e0dd82f6-22e0-352f-9282-0bf4b29d5d81.roa
File:                     e0dd82f6-22e0-352f-9282-0bf4b29d5d81.roa (raw, json)
Hash identifier:          G/LK2QH/+TEoustRlQXMDG7zriNaZhSFHKxVHjuecug=
Subject key identifier:   FE:20:3A:99:29:99:04:2A:CF:0A:0F:02:63:93:1B:5C:98:1D:AE:08
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848CDE107A0EC27C6DAFA329500
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e0dd82f6-22e0-352f-9282-0bf4b29d5d81.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     36621
IP address blocks:        216.168.228.53/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e1:07:a0:ec:27:c6:da:fa:32:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=0c0f7cba-2445-4d47-b592-a0b4debdeaf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f1:57:3f:97:53:99:3f:47:0e:05:67:37:52:
                    4b:bc:5d:9e:a1:d6:f4:10:d6:5a:8f:04:bd:8a:2b:
                    65:4f:0b:4d:be:49:ac:1c:8a:e8:a1:b6:01:23:d4:
                    cb:03:93:ed:77:23:21:42:f6:d7:7f:3e:15:9f:9e:
                    f0:1a:44:f5:c8:ba:fe:3b:84:8c:73:53:4b:f6:d1:
                    aa:ff:1c:06:8a:5f:2e:4a:fe:6c:bf:86:ee:6b:21:
                    09:ab:45:2d:40:05:69:84:32:3b:2e:23:00:e8:7f:
                    fe:cd:ff:3c:b5:cd:3c:8e:13:ed:68:2c:fc:a3:1f:
                    a8:fb:fe:cb:09:c3:95:44:a9:f3:0a:05:34:d9:94:
                    dd:76:e4:95:81:b0:a9:60:90:ea:81:13:6d:e8:0a:
                    13:b0:eb:27:bb:6a:ee:d5:55:19:a2:78:fc:6f:87:
                    a9:7c:a4:84:f3:e5:73:45:a7:06:e1:71:94:9b:67:
                    1e:bb:5b:74:d7:be:c5:70:3a:58:71:f0:d1:17:49:
                    c0:0e:78:06:a7:a9:fa:3a:bd:bf:c6:45:15:70:5e:
                    f2:8b:cd:0f:f1:aa:5e:e3:24:f5:f9:fd:e5:27:8b:
                    c0:4d:d9:a8:f4:b7:1c:82:40:c7:87:54:f1:f3:ad:
                    49:73:2a:50:25:4a:5a:91:ba:11:08:b2:98:63:a2:
                    24:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:20:3A:99:29:99:04:2A:CF:0A:0F:02:63:93:1B:5C:98:1D:AE:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e0dd82f6-22e0-352f-9282-0bf4b29d5d81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.228.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:b7:f9:e6:28:d3:ce:20:9b:35:bc:e4:81:08:9f:fc:71:a1:
         6f:0c:5d:50:c9:2a:60:8e:b2:78:12:24:2a:b7:8a:c9:f2:d4:
         db:dc:11:ab:8a:e8:d7:ec:c9:fd:22:f7:bb:46:d7:b7:8e:ed:
         c5:fb:d2:50:de:5f:00:f0:dd:c8:3f:f3:75:e9:29:6f:1e:99:
         3a:22:6a:95:17:c2:00:53:11:28:aa:05:3e:79:4c:72:e9:60:
         b0:5d:15:81:d1:8e:70:0e:01:a7:5e:b3:8a:25:c9:49:8b:e6:
         74:6c:15:a4:ef:61:1c:d2:cc:c8:3d:22:63:7b:74:e1:2f:70:
         0b:21:0e:b1:ad:f2:05:c6:69:d7:65:b8:cf:54:5c:aa:73:60:
         27:0c:5b:e1:44:04:c9:bf:30:59:de:b3:d3:9f:13:ae:8a:70:
         65:f0:30:af:5f:06:ec:ef:09:de:f9:bb:c6:f5:47:b3:d9:1a:
         b1:ef:bd:fb:e3:c4:86:b1:97:5a:db:43:83:af:ea:04:e5:f8:
         25:96:93:fd:e2:89:9d:c3:3d:05:ba:3a:4a:0c:08:35:0c:24:
         08:59:8b:dc:90:5c:a5:97:94:af:6f:aa:f1:ab:8b:e5:81:ca:
         fa:88:a0:ad:48:6e:c9:66:1d:de:b4:70:37:fc:1a:36:54:e2:
         55:6b:23:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----