Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/2a107519-0ec5-30d7-9c54-2f762d58dd15.roa
File:                     2a107519-0ec5-30d7-9c54-2f762d58dd15.roa (raw, json)
Hash identifier:          wNpMJrFUSA0t75h/7V/hNap2TT5tGbgbU0pdaJsXtis=
Subject key identifier:   CB:F3:CB:88:9E:01:2B:2C:AD:C5:83:AD:69:C5:CF:8F:77:3D:3D:EC
Certificate issuer:       /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial:       010D0C9F43285849071BE8AF922F84298A2C7B00
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/2a107519-0ec5-30d7-9c54-2f762d58dd15.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     22765
IP address blocks:        68.170.202.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1b:e8:af:92:2f:84:29:8a:2c:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=44f50b06-0621-4093-ae78-4bea7e50140a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e4:7b:60:4b:82:d8:02:32:71:c0:ad:af:2d:
                    11:fd:9e:7b:c1:53:72:a5:01:54:e5:1b:1b:4c:49:
                    54:c7:03:02:55:b1:ad:25:da:e3:62:da:10:55:22:
                    5e:57:86:f6:69:64:3e:1b:f8:e7:e8:fe:c8:c0:01:
                    32:6a:13:20:40:fc:b3:e6:68:0f:86:39:31:b9:0a:
                    ef:11:90:6b:e1:6c:a1:b0:12:de:94:8c:d4:a4:0f:
                    0a:2e:71:d3:f1:e9:62:17:19:65:62:59:67:63:5e:
                    4b:ba:59:3e:3b:9a:a5:d7:82:e5:a7:0e:e2:03:57:
                    95:1d:f1:23:ad:db:7a:11:e9:e7:05:ae:17:1d:50:
                    f0:2b:b6:33:de:3b:0b:4d:ac:d8:c5:24:5b:3c:f0:
                    dc:63:f0:2c:1f:99:f8:d2:72:99:14:9c:4f:08:53:
                    ed:f9:e0:c0:8d:de:2d:02:87:b6:26:09:6d:da:2d:
                    04:56:82:29:0d:9f:28:de:9a:a0:27:d1:6b:d2:e8:
                    fe:ef:29:01:64:50:43:36:ce:e8:de:1c:5b:61:78:
                    96:73:e7:09:6c:88:43:06:58:9a:4c:d6:cd:87:fb:
                    bc:ac:d0:cd:2c:aa:26:c6:50:ae:8b:d4:6c:5f:aa:
                    d3:13:9f:39:cb:46:41:c1:94:0a:0b:76:33:3e:3b:
                    4c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F3:CB:88:9E:01:2B:2C:AD:C5:83:AD:69:C5:CF:8F:77:3D:3D:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/2a107519-0ec5-30d7-9c54-2f762d58dd15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:22:ed:42:9d:e0:fc:4c:8b:f6:9e:4f:6e:7f:e6:2e:8f:6d:
         57:b7:ea:84:36:02:09:2b:44:77:fc:71:3c:bf:63:ed:1e:3f:
         36:72:7f:9e:97:d6:ff:54:11:34:e8:17:4c:aa:8b:4f:6e:9e:
         f3:57:f8:59:a8:b6:3c:c1:b4:59:07:7e:89:3a:40:17:31:51:
         7d:37:c0:d0:e3:1e:21:f1:06:95:c3:11:19:a5:0a:d8:a3:83:
         46:32:c2:9f:15:bd:a4:e1:a0:f6:5a:2d:0b:de:55:6a:76:f2:
         45:d7:99:96:45:dc:20:be:1a:27:8d:c0:50:dc:2d:63:f1:14:
         18:b2:03:d4:88:23:a7:e5:75:9c:69:bb:f3:ff:bf:86:06:b7:
         13:51:44:43:25:91:06:4e:4b:78:01:d9:7f:16:e1:53:f4:94:
         43:b5:6a:88:10:04:d5:39:32:9b:49:90:3e:d5:e8:11:27:98:
         d6:6e:f1:fb:da:28:68:30:40:29:1d:65:40:3d:ce:e6:68:b0:
         f2:f9:6a:e9:f8:95:ec:1b:4c:58:31:5f:50:75:45:c5:55:b8:
         dc:d7:df:58:88:dc:f3:c2:97:85:75:a3:39:f4:7e:2b:03:19:
         b9:64:88:3c:a7:2c:1f:b2:00:03:ca:f6:b7:f6:41:57:b0:48:
         2c:a3:1a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----