Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1cdabc01-7589-33c3-bfe7-6ab8ecfd771d.roa
File:                     1cdabc01-7589-33c3-bfe7-6ab8ecfd771d.roa (raw, json)
Hash identifier:          DQs2avZ/mwR0Svlk3JE64eZhfKiOBWr1mQ2oR4XZNJU=
Subject key identifier:   79:6A:2B:26:A0:41:B7:DC:90:4C:59:86:2F:6D:D4:C5:65:E0:57:FB
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858497DA474639B62D36D13962F80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1cdabc01-7589-33c3-bfe7-6ab8ecfd771d.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     3223
IP address blocks:        172.94.64.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:74:63:9b:62:d3:6d:13:96:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=a395f406-f875-4929-b00b-f9f30fdfd1b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7a:e8:2a:fa:5b:dd:26:e7:d7:25:a8:17:64:
                    05:51:8a:51:94:b8:10:77:17:72:77:b2:fd:40:a4:
                    ab:ae:11:04:28:0d:71:dc:1c:29:28:ac:83:21:ba:
                    60:1e:68:d3:df:f3:aa:2c:7a:ab:6c:c0:3f:67:01:
                    ca:f6:10:9b:5c:21:2c:11:87:67:dc:94:ab:a6:53:
                    80:2f:86:15:6b:aa:9e:31:9c:70:59:38:9d:1f:86:
                    67:bf:ea:fd:76:9a:28:99:14:ed:78:19:8c:54:a2:
                    eb:74:c5:8c:5b:8b:2b:51:44:35:13:fc:8c:a1:2a:
                    28:d8:89:de:c0:a5:ce:0b:bf:eb:35:fd:0b:df:e3:
                    74:7e:26:a3:06:15:f8:7d:1f:c2:0b:51:a5:ff:0d:
                    86:9a:7d:7e:0e:3e:af:d6:70:1d:8b:b7:3c:a9:6a:
                    eb:8a:47:36:ef:03:1f:9a:17:0b:2b:84:10:d0:32:
                    8e:3d:54:82:0a:95:43:9d:30:32:83:3a:34:1f:f9:
                    e8:75:0c:a3:cf:d0:69:f3:16:4d:38:c0:dd:e2:55:
                    f6:4e:d0:bf:aa:b7:d3:87:8b:8f:4c:c6:19:87:bf:
                    d9:d4:8c:11:71:a0:fd:23:35:62:4e:6a:1f:46:f6:
                    9e:c9:c5:a9:8a:e4:40:24:76:6b:52:0f:10:40:a9:
                    ed:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6A:2B:26:A0:41:B7:DC:90:4C:59:86:2F:6D:D4:C5:65:E0:57:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1cdabc01-7589-33c3-bfe7-6ab8ecfd771d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:45:15:54:bd:e0:5b:78:53:46:3d:aa:62:5f:d8:13:bf:a9:
         53:38:97:11:89:11:0f:40:48:05:77:28:b0:b3:72:6e:28:2f:
         f5:20:41:63:66:73:e9:f6:cb:95:85:02:45:63:41:79:a3:68:
         30:cb:60:5f:f8:13:64:8a:9e:5a:7b:ed:fd:d5:85:58:0f:f9:
         fb:a7:17:9e:27:8b:58:87:19:a6:6b:24:97:ad:cc:45:f3:dd:
         0c:fd:a3:70:2d:65:bd:99:a1:7e:01:b7:15:19:af:8d:5b:61:
         66:33:5a:38:82:12:23:34:5f:27:24:5c:55:7b:89:56:6d:a5:
         12:6d:b4:6d:6e:49:2c:01:40:6f:e0:28:da:64:38:58:dc:f2:
         d1:1d:02:eb:9b:6d:84:1d:e1:4e:a3:70:76:4b:32:08:a0:d6:
         ea:9a:41:8b:72:ad:39:c9:db:10:2a:fc:42:e9:3c:ef:05:1e:
         6e:c8:63:fe:cc:54:fd:f2:8a:b5:ce:ee:8b:f4:fe:b0:03:31:
         8e:ab:82:70:7f:94:5d:ad:93:f4:8f:e5:d9:18:9b:c4:a3:8e:
         a0:f4:14:3b:7f:5e:00:11:85:c7:f8:9c:44:00:3a:c4:0b:d1:
         41:8f:c2:a5:d6:dd:36:47:f3:be:6b:bf:b4:cf:cb:13:b2:67:
         8c:26:ce:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----