Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/fa151b3b-b492-3f1b-bdb8-63dfa0ee15eb.roa
File:                     fa151b3b-b492-3f1b-bdb8-63dfa0ee15eb.roa (raw, json)
Hash identifier:          vM3sQuxxzpYLnJm4Uy6syUzTm7XihKBR0xuXriUxmtA=
Subject key identifier:   89:A4:E5:9F:3B:94:2F:CF:E7:5B:F5:0C:58:9B:E3:7C:64:8F:47:51
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F43285849088194B9143370B0019C3280
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/fa151b3b-b492-3f1b-bdb8-63dfa0ee15eb.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     25972
IP address blocks:        169.145.42.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:94:b9:14:33:70:b0:01:9c:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=8c5e4b61-c846-48e3-8b2c-853267bac3aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7b:e6:cb:ba:12:54:2c:a6:8e:1e:e5:5b:2e:
                    e6:96:fe:92:6e:6d:39:77:fc:37:e0:12:48:13:e7:
                    76:e8:f1:70:26:49:f8:92:60:5b:61:5e:67:11:6e:
                    15:12:47:ff:ab:7e:57:b0:38:51:45:e3:35:10:83:
                    89:86:7d:3b:01:a6:f9:e3:76:5e:86:0e:0c:08:b3:
                    79:01:61:ee:67:74:76:64:6e:20:be:93:b3:9a:f3:
                    e3:6d:11:0e:75:d5:d7:f1:3b:6e:c0:cf:65:f1:95:
                    9b:40:c0:17:7d:5b:d4:a0:6e:b0:1d:7b:0a:64:03:
                    87:28:b0:2f:2f:93:bc:b5:29:12:77:b1:14:49:a4:
                    0d:24:e7:ef:f0:ce:76:05:22:fc:3d:31:89:8a:65:
                    b3:cd:3a:91:04:36:66:a4:ea:6b:cd:b5:f2:c9:4e:
                    f7:ef:83:8d:58:8a:dd:26:07:1b:af:c9:23:4c:d6:
                    d7:47:bd:a7:84:bf:2a:d9:52:74:f1:f6:fa:ea:82:
                    7b:d5:c4:1d:0e:fc:ce:65:db:ef:a1:f4:1f:8d:3c:
                    cb:03:41:bd:d7:f0:3a:51:89:06:9b:a3:f7:e6:6c:
                    6f:56:6b:d3:0e:d8:cc:bb:96:35:e6:50:9a:f6:2c:
                    b1:fb:10:46:d8:5f:4c:de:1b:61:b8:1b:93:8f:61:
                    f3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A4:E5:9F:3B:94:2F:CF:E7:5B:F5:0C:58:9B:E3:7C:64:8F:47:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/fa151b3b-b492-3f1b-bdb8-63dfa0ee15eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:fe:28:05:e7:b8:23:31:c3:3d:c9:1c:52:dd:05:15:d7:9e:
         5f:16:a1:51:2e:90:cb:ab:0e:a7:87:b6:e7:8a:93:7c:dd:fc:
         4f:9a:7d:2d:fc:e2:e4:83:22:12:64:49:1d:32:04:76:b3:f9:
         40:07:db:9a:47:42:b9:58:23:da:60:19:27:88:fa:af:ec:fc:
         22:49:6f:90:45:25:49:26:d6:37:96:52:9b:02:8b:07:43:00:
         35:83:8c:62:a5:de:78:91:57:93:d6:9d:8b:df:1a:c9:51:59:
         b9:98:35:6b:54:23:b1:58:35:7f:60:bd:ab:e1:31:46:8c:7e:
         1f:29:35:2d:03:bc:df:eb:78:0f:7b:63:b9:aa:33:0b:15:ca:
         4b:e5:62:b0:b8:8d:fe:b3:32:3b:bb:e5:bf:55:60:5e:1f:75:
         a9:0a:7d:9e:ed:7a:87:56:c8:0c:e3:27:68:38:2a:58:0c:a8:
         6c:9e:93:91:f0:5f:12:0b:89:7d:a6:06:a2:05:69:3f:32:54:
         ca:d9:b7:30:b2:c5:e8:11:e7:c5:dd:ff:38:24:3a:52:35:ce:
         c8:d8:14:d0:43:5f:01:5c:28:16:1b:c3:45:18:b8:8d:f1:05:
         23:a1:c5:86:0b:0c:22:3a:7f:52:97:d0:03:b0:a3:b1:70:d7:
         3c:e5:38:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----