Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/6c372e93-c67b-3e1e-a6f5-a68504c4f532.roa
File:                     6c372e93-c67b-3e1e-a6f5-a68504c4f532.roa (raw, json)
Hash identifier:          X7ttCloQw/NfmGuwC+CsQ/WtH/+5XQmJqTc3Tdb9MWo=
Subject key identifier:   D8:5B:90:79:4C:73:E7:D9:C2:F9:BF:CF:22:22:1C:F3:02:68:9B:19
Certificate issuer:       /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial:       010D0C9F4328584919418A259B5779E980D34B00
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/6c372e93-c67b-3e1e-a6f5-a68504c4f532.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     22765
IP address blocks:        72.20.202.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:8a:25:9b:57:79:e9:80:d3:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=2efe484d-a89b-4e09-859a-c73ca1c1aab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fa:66:47:3d:75:3e:e4:76:9b:b5:ef:57:97:
                    3a:aa:f8:95:65:8c:9e:b6:a3:85:33:31:39:43:3b:
                    02:a4:31:0d:53:a2:9f:1f:d8:e1:e2:ba:20:57:36:
                    54:6f:c2:40:db:c3:cf:28:e6:90:16:1b:78:f9:46:
                    db:05:a9:0c:a1:ef:a7:8b:bf:34:31:e7:19:89:44:
                    bd:e9:1a:4a:85:57:82:b2:ed:3d:27:f3:52:d0:48:
                    3e:75:96:e8:ee:3a:ae:53:c8:53:d5:d7:b7:ce:06:
                    dc:a4:ff:9e:ff:0d:a2:cf:b7:1b:24:9b:20:f8:13:
                    2f:21:42:3d:94:82:73:27:b9:89:9e:b5:69:a0:c7:
                    8f:bb:70:2c:ae:ce:be:cf:32:9e:73:be:24:d8:02:
                    04:26:62:09:b9:e1:a9:71:46:52:91:d5:64:21:5e:
                    17:0c:93:cc:ff:eb:33:12:00:00:76:53:69:82:dc:
                    8d:57:3e:70:f5:6e:05:6b:41:ad:0c:ab:ea:47:9d:
                    fe:5d:02:51:eb:53:e8:3a:c4:b9:39:f0:8b:9f:97:
                    9a:16:90:12:71:81:14:1f:b9:f2:7c:a6:c4:fd:12:
                    35:5f:eb:8e:65:0e:1f:6b:6f:ed:11:2c:28:ad:72:
                    13:8b:93:4a:fe:01:1e:13:eb:3b:85:65:39:42:d6:
                    5e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:5B:90:79:4C:73:E7:D9:C2:F9:BF:CF:22:22:1C:F3:02:68:9B:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/6c372e93-c67b-3e1e-a6f5-a68504c4f532.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.20.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:04:c6:63:53:d6:57:e4:3f:4b:de:d3:67:a4:44:f3:ff:06:
         5f:33:a8:0e:13:fc:4f:11:2d:5e:95:19:8c:50:3b:6c:90:7c:
         54:21:c6:b4:64:59:ad:fa:89:89:9e:c6:f8:4e:a8:43:ef:84:
         a3:26:b3:0f:36:b6:48:95:87:61:5e:36:a9:1c:44:f4:7f:4d:
         7b:c9:0c:38:8e:db:9a:48:05:6d:8e:d4:8d:54:63:d4:7e:e5:
         b1:af:ab:0b:f3:e4:19:32:dd:f9:79:83:f1:35:78:be:6b:7a:
         1f:e9:92:86:f5:40:01:8c:ef:35:b6:34:01:00:3d:49:59:cd:
         1a:9b:37:b5:d0:d8:96:28:16:3f:f7:39:e4:d7:82:ae:ed:98:
         7a:72:ec:6b:c9:d9:bb:9b:af:cf:fa:cd:71:12:27:86:a3:69:
         94:f9:c9:80:c9:c0:f8:be:bf:1a:00:4f:49:b9:89:8a:db:e0:
         1e:93:49:2e:6a:5e:12:f8:ba:c6:7b:36:a3:04:7e:29:47:07:
         f8:d2:a5:30:5a:89:e8:97:1c:50:f0:f1:bc:8c:25:ad:c5:e1:
         c3:c8:e4:ee:d5:c2:5c:58:1e:f1:22:cd:47:f5:b8:a9:19:d9:
         44:9c:65:91:28:d0:43:3b:d6:7c:5d:7e:ff:95:fb:9f:85:a5:
         36:be:b8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----