Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/765688b2-48c5-3fbf-b17b-160502565ffe.roa
File:                     765688b2-48c5-3fbf-b17b-160502565ffe.roa (raw, json)
Hash identifier:          GBAiaVnrNuft4ul1H3LzuNOKnVPRMllNXviEN9y2FYQ=
Subject key identifier:   BB:2C:4B:E1:1C:F1:77:3A:07:B6:64:6D:B6:0F:DE:A4:2A:B2:AC:26
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584929B4937797EF2716ADCD6200
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/765688b2-48c5-3fbf-b17b-160502565ffe.roa
Signing time:             Wed 12 Mar 2025 11:25:48 +0000
ROA not before:           Wed 12 Mar 2025 11:25:48 +0000
ROA not after:            Tue 10 Jun 2025 11:25:48 +0000
asID:                     63360
IP address blocks:        168.225.5.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:29:b4:93:77:97:ef:27:16:ad:cd:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Mar 12 11:25:48 2025 GMT
            Not After : Jun 10 11:25:48 2025 GMT
        Subject: CN=c9f214ac-f5bc-4b6c-adda-d0a89ed2dc9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2a:3a:69:58:97:e3:f0:cb:5c:9e:3f:f6:80:
                    21:6a:9e:92:db:6c:19:51:1b:c1:65:db:38:7e:bc:
                    d3:75:ef:3d:d1:91:c9:b4:71:19:75:ae:9e:ef:98:
                    57:78:ea:4d:a5:69:48:0f:47:5c:34:0f:7a:bb:e6:
                    2b:c7:6f:73:62:3d:5f:b9:3c:71:ed:cf:8e:bf:3f:
                    f0:ec:7b:c9:d3:bb:22:57:ad:f1:5f:82:45:40:2c:
                    b9:ce:28:d8:55:6c:e4:c9:09:10:a9:20:e8:8b:a5:
                    3b:75:cc:9f:e4:34:84:0e:21:a7:77:41:03:78:31:
                    8b:c6:a4:3d:3e:47:9c:3d:61:f5:b8:a7:f4:34:af:
                    05:12:1b:af:d2:5a:71:6c:62:1f:0e:13:2c:e2:5b:
                    a8:fa:8a:4c:3d:26:14:51:ce:ad:93:64:b8:71:e3:
                    8a:89:35:6d:71:e2:b9:a9:5e:be:b5:4b:b6:9d:f2:
                    e9:18:49:ec:ae:e6:38:79:e8:f7:9d:b6:a0:44:6d:
                    c9:81:49:44:94:6d:b0:33:3b:53:f7:8a:ca:31:e1:
                    5a:58:99:db:60:ae:0f:94:91:14:6b:de:82:be:c7:
                    b3:74:2e:5c:4f:15:99:fc:e0:3b:a3:c1:f4:13:08:
                    2b:6f:b6:6b:72:d8:b7:91:52:6b:c8:10:84:64:76:
                    e8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2C:4B:E1:1C:F1:77:3A:07:B6:64:6D:B6:0F:DE:A4:2A:B2:AC:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/765688b2-48c5-3fbf-b17b-160502565ffe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:4b:95:00:00:a4:84:55:8e:bf:fc:5f:a1:d5:fe:ba:4f:0e:
         47:5a:a9:f6:e6:f6:d6:55:97:6d:45:72:07:1e:21:6b:63:fd:
         44:52:af:f9:5c:3c:2a:b3:6b:d1:60:c3:88:d4:46:fa:4a:d5:
         6b:dc:7d:94:80:49:fd:db:d6:4e:1a:e3:53:69:3b:f8:d4:32:
         92:59:2a:f0:21:1e:a5:b2:6d:05:54:e3:b2:6e:0b:6f:0d:0d:
         56:c5:b8:04:34:61:3d:b8:29:e3:9c:35:7a:bb:47:3f:f4:81:
         e3:b2:ac:b2:01:e2:ce:e7:56:ab:b8:f5:d6:19:1c:54:57:2a:
         d9:1a:e4:82:3a:d0:55:4a:b3:55:48:bf:02:03:0d:b0:52:aa:
         9b:2e:72:ce:85:a1:eb:b2:c7:69:29:a9:1a:f9:fc:78:ac:c8:
         56:1b:37:d7:44:51:31:cf:3d:f8:cf:43:e3:52:eb:e5:30:40:
         a5:87:eb:c1:7b:aa:dd:1c:2b:b0:d2:3e:5d:4e:8a:0c:e3:cd:
         da:4a:34:d4:d1:48:89:21:b7:6e:f5:f9:01:13:5e:d7:1c:e7:
         ff:94:35:38:61:29:90:1f:05:d6:11:f3:4a:ee:0c:d3:13:a3:
         dc:18:c1:08:9c:ad:2b:d5:2b:7b:30:5f:4e:be:8d:17:71:e4:
         89:10:0c:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkptJN3l+8nFq3NYgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmMzMjYyZjYtNzNmMy00MzNiLWJhMjgtMTEyYTQ4NGZl
YzhhMB4XDTI1MDMxMjExMjU0OFoXDTI1MDYxMDExMjU0OFowLzEtMCsGA1UEAxMk
YzlmMjE0YWMtZjViYy00YjZjLWFkZGEtZDBhODllZDJkYzliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yo6aViX4/DLXJ4/9oAhap6S22wZURvBZds4
frzTde890ZHJtHEZda6e75hXeOpNpWlID0dcNA96u+Yrx29zYj1fuTxx7c+Ovz/w
7HvJ07siV63xX4JFQCy5zijYVWzkyQkQqSDoi6U7dcyf5DSEDiGnd0EDeDGLxqQ9
PkecPWH1uKf0NK8FEhuv0lpxbGIfDhMs4luo+opMPSYUUc6tk2S4ceOKiTVtceK5
qV6+tUu2nfLpGEnsruY4eej3nbagRG3JgUlElG2wMztT94rKMeFaWJnbYK4PlJEU
a96CvsezdC5cTxWZ/OA7o8H0Ewgrb7Zrcti3kVJryBCEZHbobQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLssS+Ec8Xc6B7ZkbbYP3qQqsqwmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMy
NjJmNi03M2YzLTQzM2ItYmEyOC0xMTJhNDg0ZmVjOGEvNzY1Njg4YjItNDhjNS0z
ZmJmLWIxN2ItMTYwNTAyNTY1ZmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmMzMjYyZjYtNzNmMy00MzNiLWJh
MjgtMTEyYTQ4NGZlYzhhL2ZjMzI2MmY2LTczZjMtNDMzYi1iYTI4LTExMmE0ODRm
ZWM4YS5jcmwwHwYDVR0jBBgwFoAUUpK8EPoV93nOpcP0We0R1gy4M5UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMyNjJmNi03M2YzLTQzM2ItYmEyOC0xMTJh
NDg0ZmVjOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOEFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKhLlQAApIRVjr/8X6HV/rpPDkdaqfbm9tZVl21FcgceIWtj/URSr/lc
PCqza9Fgw4jURvpK1WvcfZSASf3b1k4a41NpO/jUMpJZKvAhHqWybQVU47JuC28N
DVbFuAQ0YT24KeOcNXq7Rz/0geOyrLIB4s7nVqu49dYZHFRXKtka5II60FVKs1VI
vwIDDbBSqpsucs6Foeuyx2kpqRr5/HisyFYbN9dEUTHPPfjPQ+NS6+UwQKWH68F7
qt0cK7DSPl1OigzjzdpKNNTRSIkht271+QETXtcc5/+UNThhKZAfBdYR80ruDNMT
o9wYwQicrSvVK3swX06+jRdx5IkQDCQ=
-----END CERTIFICATE-----