Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/e524d68f-46cb-3732-bb71-38df0af625db.roa
File:                     e524d68f-46cb-3732-bb71-38df0af625db.roa (raw, json)
Hash identifier:          f4KIGxiqFiCh4nlK2JPe8n/7vZ7yhLH5U5lNjuLtRd0=
Subject key identifier:   86:EA:98:0C:3C:E5:D7:16:84:4D:3B:12:A0:17:A6:3D:C6:DB:F8:2E
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584981D44A335FA6F1A2DB1F1860
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/e524d68f-46cb-3732-bb71-38df0af625db.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     22476
IP address blocks:        207.253.6.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:4a:33:5f:a6:f1:a2:db:1f:18:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=a3c100ed-4c8b-4473-91a7-a38f7a03bedb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b9:5e:25:d9:d9:e0:f9:f5:0c:d9:0c:a9:9e:
                    e4:21:a1:02:cd:37:fe:d9:5a:75:f6:dd:6b:48:e5:
                    97:5f:f9:3d:18:17:0b:b6:a1:5c:68:af:9e:5b:0a:
                    f5:5b:8d:90:28:b0:6d:73:a9:75:19:0a:fb:3c:c2:
                    f2:1f:87:80:b4:a8:97:a3:a5:4d:b4:34:04:fb:b1:
                    fb:42:aa:f0:b5:18:a9:c6:5d:90:4c:77:74:25:28:
                    97:11:e9:5c:da:38:df:e3:7a:24:64:fb:0f:e3:1e:
                    0a:ff:79:c0:18:57:9d:61:df:f6:de:ad:d6:26:f8:
                    24:95:0e:bc:28:73:65:b9:63:72:f2:b4:51:b6:b6:
                    7b:99:e8:09:f2:76:2b:e6:55:53:f1:57:8c:bc:a1:
                    11:a1:1e:15:1a:7e:d6:f0:1d:83:44:f2:d1:c3:38:
                    0d:d6:2b:8c:32:96:31:29:e6:72:19:80:26:2f:9e:
                    36:83:1d:a8:0b:79:9d:af:04:49:21:73:9f:53:9a:
                    55:72:3b:8d:9e:14:5e:de:ef:18:00:02:d0:c0:20:
                    fb:22:55:60:9c:06:e1:2b:90:84:ba:76:54:4e:c4:
                    cd:0c:d3:24:f7:6f:32:df:e9:ef:95:0d:2e:19:dd:
                    13:d9:d1:28:8a:9c:d5:fa:62:4d:5a:b0:cd:ce:35:
                    ca:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:EA:98:0C:3C:E5:D7:16:84:4D:3B:12:A0:17:A6:3D:C6:DB:F8:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/e524d68f-46cb-3732-bb71-38df0af625db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.253.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:19:5c:f6:35:43:ea:0f:f2:68:42:4a:5a:ed:51:a2:3a:d9:
         5f:8f:a2:35:de:c7:e1:45:88:7b:83:ff:36:7f:64:f1:42:ef:
         ad:8f:c9:3d:97:4b:ab:4d:b6:33:23:70:e5:38:44:81:ae:60:
         13:00:52:5d:cf:04:04:9d:88:03:e1:b8:d4:0c:2e:a2:1b:d1:
         47:1d:ef:96:a7:c7:92:39:54:f2:25:f0:73:d8:fe:d8:4b:71:
         75:e5:bf:18:8e:18:d3:fb:2a:a1:8a:61:3c:5a:82:d9:69:d4:
         74:26:50:e5:d1:ed:ce:e2:e6:c2:b7:dd:b4:a6:f5:eb:50:52:
         7b:ca:60:83:9b:a8:2b:cd:23:f7:a9:f7:a0:a8:27:83:10:4f:
         03:87:52:da:a4:d4:3c:df:42:d6:84:8d:41:23:23:aa:3a:5c:
         95:14:ce:51:2d:12:5c:8f:69:d7:45:27:bb:53:02:25:c3:f4:
         20:ac:30:4f:80:fd:24:0c:32:df:c5:6b:86:e2:9c:d0:87:d3:
         d3:38:dc:e2:e0:56:87:7c:7e:45:12:da:57:64:ee:2c:14:64:
         06:1c:23:86:97:49:fe:b1:5b:a2:7e:95:e6:78:2a:f5:81:a3:
         58:a2:c6:91:c7:1e:0e:d3:e6:62:2c:fe:e2:88:75:5f:1e:56:
         1c:68:8b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----