Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/9477d30f-60e1-349b-9381-c5e6e73f84d7.roa
File:                     9477d30f-60e1-349b-9381-c5e6e73f84d7.roa (raw, json)
Hash identifier:          T8YiyoiTLqPY535WOZNx0G0qE+ao7DmsaBtth9aiQoY=
Subject key identifier:   5D:67:B1:A2:A2:FA:49:1E:38:6B:3B:D3:D7:AA:20:3A:A8:FD:AC:F6
Certificate issuer:       /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e
Certificate serial:       010D0C9F43285848D6410B564812F01106F61AB0
Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/9477d30f-60e1-349b-9381-c5e6e73f84d7.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     400226
IP address blocks:        204.197.171.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:0b:56:48:12:f0:11:06:f6:1a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=a875b515-b275-489a-b8df-0af76e93b26a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:49:b0:fc:6a:33:9e:82:1e:73:6c:f5:50:42:
                    c3:c7:02:bb:de:b8:a2:56:d1:d0:b1:83:15:d3:7d:
                    1f:89:e8:70:0c:d4:44:ed:e6:93:04:e0:db:1a:0d:
                    f2:76:56:de:7d:98:b6:82:b1:3b:33:fb:95:56:34:
                    88:d0:4f:5c:e8:2c:ac:44:73:e6:cd:56:34:2a:78:
                    fd:85:9c:65:f7:ee:ed:15:06:d2:a6:a8:8e:57:08:
                    ff:8c:3d:43:52:8d:e5:d3:a9:47:1e:7c:88:b8:31:
                    ef:ea:62:e1:4f:d1:cc:35:b8:10:54:de:35:85:40:
                    c2:55:dd:fa:52:60:4c:42:cd:cc:56:60:e9:8c:91:
                    77:25:7a:b3:d5:00:42:d1:c9:ac:93:41:e7:df:62:
                    27:72:aa:7a:a7:b3:5e:4a:68:df:10:66:53:c7:51:
                    ca:2a:b5:27:73:6b:11:57:41:78:db:4b:47:51:06:
                    d0:ef:15:1c:c8:01:aa:46:60:1e:77:4b:e7:01:ed:
                    ba:bd:bd:13:3c:84:3f:d5:8a:f2:e8:68:b6:a0:4d:
                    17:00:5b:1d:dd:1b:58:26:2a:bb:a7:7f:f0:53:cd:
                    5f:04:08:85:79:98:4c:f3:b8:9f:b0:14:b5:bd:c2:
                    77:49:56:1d:28:3a:27:d7:a6:1d:13:fb:cc:45:bc:
                    7e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:67:B1:A2:A2:FA:49:1E:38:6B:3B:D3:D7:AA:20:3A:A8:FD:AC:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/9477d30f-60e1-349b-9381-c5e6e73f84d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl

            X509v3 Authority Key Identifier:
                keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.197.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:5a:9a:49:74:6a:8d:eb:0d:b5:06:57:79:10:b1:ee:46:c3:
         c4:0a:56:d6:73:eb:b0:e6:0a:d2:1e:11:70:27:b9:2f:1d:c4:
         22:ab:6f:73:02:6d:5d:02:a1:63:b9:6e:d8:b3:ad:11:c4:3e:
         61:fd:91:93:9e:29:6a:cd:6c:e9:e1:47:e1:a7:a0:dd:91:1a:
         f1:b6:b8:cf:a5:d0:d8:56:7b:34:3b:8f:a6:19:ce:0c:44:b4:
         0d:88:79:3d:b0:ae:e9:d9:71:4f:c0:81:39:81:79:70:6c:d3:
         ee:60:18:66:1c:c1:2d:a0:f5:03:7c:0c:e4:55:f1:39:ed:1f:
         51:8c:19:b6:06:d9:a2:ae:da:44:e9:f9:10:80:05:6a:1c:d1:
         81:b0:e6:ac:99:85:5b:82:c2:37:9e:e5:5e:3e:07:68:26:59:
         76:31:4a:b0:fd:c8:eb:4c:dd:dd:3d:7e:53:37:79:aa:31:7b:
         d3:7f:e5:2b:70:f7:bf:da:60:c9:f5:e8:1e:09:43:ed:12:18:
         b7:a0:45:45:70:bc:cd:01:68:ce:0d:f8:74:52:f1:5c:bf:a5:
         4c:ed:86:e4:85:1d:5c:79:a5:c2:c1:a9:96:46:72:34:61:90:
         4f:2a:6a:49:d1:e4:36:de:bd:4f:11:11:3b:a4:ec:32:9b:97:
         d4:08:14:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----