Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/87145267-5a8e-3c36-845f-011769715183.roa
File:                     87145267-5a8e-3c36-845f-011769715183.roa (raw, json)
Hash identifier:          SfW6x8FgbY0CHoMQotbGlt5M8taiN9HH/ioOWPHVers=
Subject key identifier:   24:99:4C:7F:75:C2:E2:71:9E:B5:B2:22:5C:94:F5:9A:69:EA:CE:94
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F4328584957F404D73597A081CAD74FC0
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/87145267-5a8e-3c36-845f-011769715183.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     7992
IP address blocks:        24.57.0.0/16 maxlen: 16

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:04:d7:35:97:a0:81:ca:d7:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=99874732-264f-49e0-8250-d4132b194a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ba:60:2f:c6:ad:bf:ff:a0:84:b7:47:b4:5b:
                    5f:40:c9:da:f9:24:52:bf:e9:9c:8f:4e:42:ba:f0:
                    88:f8:37:e1:54:21:84:f4:f9:a0:31:ea:e5:f4:2f:
                    05:ec:b3:bf:7b:76:60:89:38:c8:71:16:fc:13:dd:
                    4d:62:f4:d5:a0:93:be:e5:7e:a9:6b:e0:34:cc:77:
                    de:4d:9d:2d:fb:32:ef:0e:8d:f5:4e:92:6e:bf:e7:
                    d3:3b:15:09:2e:42:fe:a6:48:9a:18:fd:c4:fa:1a:
                    c3:e3:b6:3e:9e:a9:4a:37:e8:c7:a3:17:4e:39:5a:
                    de:28:1e:ee:70:45:33:f8:88:47:c1:b8:8a:f9:e8:
                    1e:11:62:28:ec:db:be:d2:3f:2e:f2:66:c0:d3:31:
                    81:ae:c6:75:68:b5:34:61:99:ec:0e:52:b2:da:3a:
                    8d:5d:02:4c:3f:2f:d1:d1:d8:01:a9:e3:dd:a2:01:
                    54:0f:40:ff:55:d9:8b:89:70:60:50:af:1b:e7:be:
                    e3:a3:bc:04:df:33:7b:e3:73:17:38:45:de:a8:b3:
                    c4:39:d2:06:8a:10:07:87:89:3e:d7:f6:34:1e:ef:
                    82:82:49:eb:b8:49:82:f2:f5:94:81:f3:17:a9:32:
                    db:cf:de:5b:f6:8b:3d:44:7c:48:26:d7:b6:da:06:
                    c6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:99:4C:7F:75:C2:E2:71:9E:B5:B2:22:5C:94:F5:9A:69:EA:CE:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/87145267-5a8e-3c36-845f-011769715183.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.57.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:46:9d:c8:5e:98:0d:39:5c:26:11:25:60:b2:d1:9e:b8:52:
         88:11:8b:e9:f1:0e:36:f9:5d:73:65:85:8e:76:41:f9:3c:76:
         33:c1:8a:09:21:69:31:dd:c0:21:5c:6d:a9:51:1e:34:8e:fa:
         40:31:6c:7d:e7:04:58:e5:32:67:98:6d:20:2b:da:6a:67:44:
         d5:67:94:a5:73:3b:d6:d8:ce:77:6d:ac:6e:f2:14:9a:5b:87:
         74:1b:26:22:b3:74:bb:5a:19:d8:a3:e5:8e:aa:57:83:2d:c1:
         a4:da:3b:6b:26:ed:56:f1:58:aa:26:c4:85:60:96:86:4a:af:
         88:8c:26:94:f6:39:59:35:2a:63:17:49:8b:29:99:2a:32:eb:
         23:86:6b:2b:fc:eb:1a:d6:94:ba:a8:01:4f:bf:a5:8d:39:9a:
         95:3e:74:34:bf:d4:5f:3e:33:ff:03:ee:35:63:fd:ec:a6:a1:
         8a:c1:e3:f0:8f:d7:9f:33:55:21:71:a0:a3:2b:8d:ec:ad:97:
         2c:e0:60:8e:24:5e:12:cb:74:d2:37:0d:f9:d0:21:6e:d9:c3:
         99:66:03:fa:47:e6:99:61:4b:c1:d1:ff:dd:72:61:62:30:3b:
         34:d7:c3:2e:46:79:4b:10:60:89:2b:d6:2e:fb:d4:dc:48:7f:
         84:b5:57:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----