Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1e12f628-d906-3a81-9a07-7e4ddd2e70bb.roa
File:                     1e12f628-d906-3a81-9a07-7e4ddd2e70bb.roa (raw, json)
Hash identifier:          FQ/mzAYdUM1eH+vr011SzhAYJHclqRsSgXF2inyN1HM=
Subject key identifier:   70:08:E7:93:CF:DA:28:22:CE:0D:0F:94:A8:39:E8:12:78:68:E3:EC
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858497D6F9B9BBDE9DAACCE617A78
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1e12f628-d906-3a81-9a07-7e4ddd2e70bb.roa
Signing time:             Fri 11 Apr 2025 11:14:45 +0000
ROA not before:           Fri 11 Apr 2025 11:14:45 +0000
ROA not after:            Thu 10 Jul 2025 11:14:45 +0000
asID:                     329007
IP address blocks:        45.74.56.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:6f:9b:9b:bd:e9:da:ac:ce:61:7a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Apr 11 11:14:45 2025 GMT
            Not After : Jul 10 11:14:45 2025 GMT
        Subject: CN=c58a738f-e3f5-4abf-8059-cc016e73973e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:66:0c:f8:48:db:16:c4:a6:08:4b:a0:11:34:
                    42:87:80:c9:a3:83:9b:a1:0e:d2:50:6d:40:68:95:
                    2d:e5:71:45:31:be:06:2a:44:00:49:84:ed:51:ae:
                    61:93:ee:a4:89:3a:ae:ac:16:41:4e:6a:8f:08:5b:
                    ee:5b:a8:78:86:3b:49:77:7e:17:f4:f7:97:a6:26:
                    cd:ae:b0:31:27:ae:7c:2f:61:a7:50:df:9f:c7:0c:
                    71:3e:f1:ef:00:d8:70:77:d4:42:aa:e2:ce:5a:1c:
                    ec:da:c7:7e:b9:bb:72:91:07:ef:bc:10:12:89:a9:
                    a3:93:60:62:cd:00:a5:7f:ec:92:61:d3:3c:37:09:
                    cf:38:fb:36:96:67:ef:e9:72:6d:99:5d:5e:f6:c4:
                    62:46:4e:41:a5:bf:f6:3a:22:0f:1d:55:05:1b:61:
                    bf:23:cb:c3:b5:0e:b7:fc:05:fd:3e:bc:5d:98:2b:
                    af:8e:63:e8:03:d4:67:f8:61:63:52:ef:88:0c:e8:
                    b6:58:df:d0:ca:0c:6e:7c:7e:8b:3f:bb:53:73:22:
                    56:fa:55:88:7d:85:08:b1:2e:33:a6:6d:3c:94:6e:
                    b8:51:07:9d:e0:03:ca:c9:f9:15:ef:53:e1:26:e9:
                    0f:63:db:f0:a6:7d:44:04:9a:17:81:19:ad:b9:5c:
                    8b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:08:E7:93:CF:DA:28:22:CE:0D:0F:94:A8:39:E8:12:78:68:E3:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1e12f628-d906-3a81-9a07-7e4ddd2e70bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:6d:72:02:d5:21:87:1b:76:fa:13:d4:b9:80:6e:88:ad:70:
         25:bd:7b:df:c5:d0:69:17:c6:55:c2:76:b6:04:34:05:0e:a3:
         3c:a3:aa:42:23:e2:53:b6:85:bd:27:08:ff:a1:4c:0f:81:c2:
         67:3e:1d:1b:a3:10:d2:1e:eb:9c:2e:ec:6f:55:73:a8:02:9a:
         b4:00:28:29:e4:6e:ee:b6:24:b5:53:c7:c8:dc:15:08:15:97:
         c3:9e:d7:bf:97:5b:fd:2c:89:b2:db:be:46:f3:d8:f0:64:8b:
         d2:90:ba:a4:95:e5:e4:61:f2:73:35:5e:55:c8:e0:32:65:7e:
         71:34:d3:c6:45:c7:19:00:cc:97:a5:52:bb:b4:e5:8b:c2:5f:
         60:be:0a:f8:ae:77:ad:dd:fb:8d:11:67:08:f8:64:10:64:04:
         a2:df:7f:48:db:2c:2f:2e:b7:19:1a:d2:11:50:23:13:51:a2:
         6b:59:40:cf:fe:ed:c7:bb:81:c1:1b:91:72:7d:ce:54:b2:1f:
         de:ca:bd:b7:f1:6c:0e:b5:98:67:0e:f3:1d:4b:18:3f:f9:24:
         2e:9f:d8:3f:6e:ea:45:41:e9:6f:d0:57:b4:1e:e0:b5:21:a7:
         7a:58:cd:96:78:bf:55:68:ab:08:d3:6f:97:49:46:67:75:11:
         ae:ea:c1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----