Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/f8eaaa80-a751-3137-a927-fda10e9f5161.roa
File:                     f8eaaa80-a751-3137-a927-fda10e9f5161.roa (raw, json)
Hash identifier:          j5YxchgujtLEHuf9+5YGJPHRhRHyRwxw8h8JozBzvXg=
Subject key identifier:   79:D7:E9:7D:F9:87:86:BE:3D:8B:CC:F8:72:9B:F9:E4:9F:33:EC:F3
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F43285848B79E6EAE10B1D8197EA64140
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/f8eaaa80-a751-3137-a927-fda10e9f5161.roa
Signing time:             Thu 30 Jan 2025 14:39:02 +0000
ROA not before:           Thu 30 Jan 2025 14:39:02 +0000
ROA not after:            Wed 30 Apr 2025 13:39:02 +0000
asID:                     63360
IP address blocks:        168.225.16.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:9e:6e:ae:10:b1:d8:19:7e:a6:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Jan 30 14:39:02 2025 GMT
            Not After : Apr 30 13:39:02 2025 GMT
        Subject: CN=70d81a6e-f018-4242-a0f8-28732344a864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:90:a5:91:38:a1:7b:ae:60:2d:71:f4:01:ec:
                    ca:59:14:d3:8a:85:22:30:77:4e:fa:0d:ec:e5:68:
                    cc:1b:ac:0d:64:a9:b7:48:70:3f:61:44:01:76:f6:
                    7c:78:f0:fe:90:f4:c3:13:27:c8:2e:fd:e1:0b:31:
                    5b:a0:b1:09:ec:ee:23:60:1a:d2:cd:ff:a5:2b:81:
                    03:5d:a2:1b:3e:7c:be:49:71:b5:a4:b9:d3:b0:ed:
                    6b:2e:aa:a5:8f:48:ef:cf:bf:73:fd:37:31:fa:20:
                    b6:20:1c:74:29:03:20:d7:f7:fb:02:35:73:0e:30:
                    af:f4:11:27:08:99:9b:c6:72:80:bf:d7:e0:44:8c:
                    bf:0f:3e:c6:da:18:53:bc:1c:31:11:40:67:c6:60:
                    fa:d3:04:8c:d4:00:49:ff:9c:3a:b6:82:5e:22:51:
                    4f:5c:dc:d8:ea:1b:43:06:cb:94:09:75:c9:97:f3:
                    72:7b:c2:f3:59:5d:79:ab:68:23:d2:06:e4:fd:cf:
                    3a:65:bf:0d:49:53:09:05:a6:44:33:73:bc:8b:01:
                    33:f8:07:1d:ef:24:5e:e6:ed:da:60:7f:ab:77:4d:
                    77:a8:33:b5:64:61:63:88:ae:a7:f2:40:a7:76:f9:
                    90:d3:a5:c3:b0:24:c5:16:8f:98:cd:ba:cd:b8:2b:
                    85:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D7:E9:7D:F9:87:86:BE:3D:8B:CC:F8:72:9B:F9:E4:9F:33:EC:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/f8eaaa80-a751-3137-a927-fda10e9f5161.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ae:c9:79:cc:29:3c:7b:b2:44:bf:d9:18:eb:d5:f2:05:96:
         f6:2e:21:7b:ba:9f:88:d9:48:05:07:66:9d:68:c9:c1:36:04:
         9c:14:65:a5:a3:83:43:8d:ff:34:8c:6c:f7:df:65:d3:70:a3:
         7c:f3:8b:ed:6a:b8:7f:fe:fd:86:2f:1e:a7:07:58:33:b2:0f:
         85:b8:0b:fe:e2:3c:65:68:41:dd:93:6f:03:5d:69:bd:13:cd:
         43:e2:d9:a8:74:0f:47:4a:93:a3:c9:00:df:b9:6b:77:a1:7b:
         75:c2:cd:1d:53:2a:b5:2c:f1:fa:7b:18:bb:26:4c:08:5e:2c:
         8d:80:c2:84:ca:c4:bd:00:ba:2f:ba:48:5e:0d:cb:41:06:4a:
         c2:1a:b8:83:0a:31:93:04:f7:20:9b:fc:5f:ec:af:25:7f:29:
         37:9e:0d:88:76:2e:8e:f4:1c:49:a3:f6:db:db:30:9f:da:59:
         8b:e0:e7:ee:39:d2:21:16:32:ff:61:34:c4:d5:61:a7:c7:56:
         87:7b:d5:f9:0c:0e:83:17:18:e3:90:43:51:29:13:61:95:7c:
         b4:64:b4:d6:2c:d0:ad:b7:d3:5b:9d:d9:33:3a:e3:5c:c0:77:
         9c:17:31:83:4b:1c:eb:66:c9:62:6b:ef:40:19:31:56:48:fa:
         dd:a3:02:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----