Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa
File:                     aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa (raw, json)
Hash identifier:          Nm5BepQDMvMOQiGZf5jtwRZBF2otxH7/3uWCEV3G6lc=
Subject key identifier:   90:3D:9B:B7:7F:06:63:14:14:C3:96:4A:82:1A:E3:20:83:12:BC:D6
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285848FD56B73CB7E952576EF37280
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     3223
IP address blocks:        172.111.247.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:b7:3c:b7:e9:52:57:6e:f3:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=b8c28b56-f4d2-4cfb-a5eb-dadd07d8a316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ff:0f:ae:4e:a3:df:9f:27:e2:8b:aa:87:5e:
                    f0:97:35:ca:24:26:c4:f6:4c:9e:49:f4:7a:83:66:
                    44:4d:5d:b4:ca:d1:36:7c:dd:34:40:cc:f8:c2:31:
                    86:3c:e3:cd:c7:02:67:07:9e:1b:85:ce:8c:18:32:
                    66:d6:79:17:cf:b8:33:06:7c:bf:ba:d8:b8:a3:d7:
                    25:e1:4d:d9:9e:7b:44:ae:2d:c1:36:4f:dc:35:a8:
                    97:3d:2d:d8:de:db:6f:cd:8b:4c:f9:ac:dc:27:99:
                    81:1f:5f:80:51:f4:35:1d:29:af:33:18:43:d0:9a:
                    1e:ba:c6:a5:93:36:7e:51:b0:d4:99:70:de:85:2e:
                    71:da:a1:50:a3:44:4f:e4:78:8d:94:96:6c:43:13:
                    18:5e:c7:54:a6:d3:45:2f:0b:8e:b5:91:33:d7:58:
                    5b:58:cd:88:43:7a:57:57:37:49:16:a9:b7:8b:86:
                    28:a1:c3:6a:48:dc:01:e9:20:48:f4:64:91:ca:f6:
                    13:a0:b1:89:db:fd:ed:30:22:c1:14:67:20:7d:88:
                    c1:72:04:28:b8:31:78:2e:d5:c5:58:3a:ab:0b:2f:
                    33:9d:81:5e:bb:16:d1:36:16:39:37:69:ad:a4:63:
                    a4:f4:19:87:d0:a3:36:63:03:a5:b3:15:6f:75:69:
                    3d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3D:9B:B7:7F:06:63:14:14:C3:96:4A:82:1A:E3:20:83:12:BC:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:cd:8d:39:cd:61:c1:1a:43:eb:c8:89:93:bf:08:db:e4:5a:
         2d:ce:f0:76:5c:78:7e:dd:18:ce:45:7c:83:25:03:58:8c:4f:
         5b:3f:7a:4d:59:34:3d:f8:6b:1c:29:b5:8a:88:9b:36:d4:18:
         d5:26:e9:de:d3:8c:6a:0c:19:13:65:04:97:c9:9a:79:50:68:
         32:8d:e1:eb:4d:27:1e:48:af:16:0a:b0:98:6d:22:58:b7:97:
         76:66:36:0d:a8:ab:f8:5b:1d:c3:2b:30:c4:79:95:7d:d9:09:
         49:82:fa:0d:3a:5e:9a:ad:fe:e9:19:e0:fc:53:d2:f1:54:76:
         64:1f:b9:d9:25:56:93:4e:0a:65:05:e5:3e:64:da:12:bf:37:
         bd:6f:a5:a3:29:97:1f:ce:09:c8:0d:81:04:ec:52:26:a5:0b:
         a7:83:de:b7:c3:d6:ca:3d:aa:69:e1:a2:d3:db:25:52:59:39:
         d8:3d:e4:7a:1e:a5:f2:76:68:b3:87:d3:0f:69:07:af:6b:87:
         af:ff:62:fd:94:73:7c:9e:1d:9c:66:b6:e1:12:3b:89:0a:62:
         6e:37:d6:d3:c9:44:75:b2:d7:84:94:e7:21:1c:96:ad:c2:c1:
         69:90:bc:f2:5d:67:ac:80:9d:1b:74:d1:71:a3:21:c5:3e:6f:
         83:73:ca:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----