Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/955f3a04-020b-3de3-a057-2ce2758a7a1e.roa
File:                     955f3a04-020b-3de3-a057-2ce2758a7a1e.roa (raw, json)
Hash identifier:          NHTqYnzS7Ih0YssBMVB+71BafYaEwQRzH4oYil8b7Ww=
Subject key identifier:   D7:CA:C5:75:D5:00:28:2D:26:BF:71:BA:5B:45:69:42:5D:B9:BA:3F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584980E51C2AB456A0AFAD17D0C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/955f3a04-020b-3de3-a057-2ce2758a7a1e.roa
Signing time:             Sat 12 Apr 2025 16:58:55 +0000
ROA not before:           Sat 12 Apr 2025 16:58:55 +0000
ROA not after:            Fri 11 Jul 2025 16:58:55 +0000
asID:                     18779
IP address blocks:        142.252.33.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:e5:1c:2a:b4:56:a0:af:ad:17:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 12 16:58:55 2025 GMT
            Not After : Jul 11 16:58:55 2025 GMT
        Subject: CN=f15576ef-88f0-4813-a12f-9cf66d394329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d1:dc:bb:41:c7:0a:dc:7c:df:2f:a2:6f:bd:
                    5c:4f:2d:00:90:6e:18:55:68:8d:00:7b:16:ba:78:
                    b2:62:47:31:ca:1c:5e:88:5a:77:9a:8e:7c:50:91:
                    9f:5c:63:b4:94:bd:3c:ac:68:83:22:7b:87:70:bb:
                    df:61:be:6d:0b:aa:b9:f7:7f:bb:d8:fe:9b:df:f9:
                    ea:d3:42:34:a1:d4:69:94:d2:01:89:a7:05:e0:a8:
                    6a:14:f2:f1:f6:8e:d5:52:c9:26:0a:46:dc:e4:aa:
                    9b:0d:d9:f3:3c:70:89:df:57:79:c3:15:84:d5:60:
                    69:89:f0:13:86:b2:6e:89:82:71:19:79:0e:ff:0e:
                    a5:be:bf:51:4f:6d:f1:aa:ab:76:e6:b1:b7:a8:d6:
                    79:9c:56:45:b6:1c:b5:ca:6a:6f:16:ac:d5:d0:78:
                    8d:d7:22:dd:f8:c3:19:d0:17:4c:c8:57:54:9d:f0:
                    2e:63:85:71:c5:5c:5a:30:a5:2d:d2:23:55:e3:13:
                    2a:ba:59:65:40:16:72:67:ce:77:73:1b:58:58:4f:
                    ef:6c:a0:7c:9c:06:c5:02:e3:9e:24:06:5f:d5:f9:
                    86:e8:bb:7c:61:fb:f2:ab:09:1a:0b:ab:fe:44:84:
                    08:0d:d7:7e:7d:ab:86:1c:56:67:aa:c8:ee:78:d7:
                    ec:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CA:C5:75:D5:00:28:2D:26:BF:71:BA:5B:45:69:42:5D:B9:BA:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/955f3a04-020b-3de3-a057-2ce2758a7a1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:44:a7:87:2c:6e:38:0b:66:8f:03:c0:7d:38:13:02:8e:7a:
         56:4c:b2:a2:ec:db:ed:47:c2:f5:10:b5:44:c9:82:e6:c9:56:
         06:3b:fe:6e:51:a3:55:25:47:a9:df:8c:c8:97:34:10:03:d6:
         ff:c2:c5:4f:d3:3b:dc:63:c8:f8:c6:ab:b5:1c:68:04:92:2f:
         92:e9:42:98:4d:d9:1f:77:27:ce:b4:13:af:4e:99:8f:02:0d:
         ea:9c:01:32:c1:a1:db:9c:ea:62:23:32:b8:ee:58:b1:71:e2:
         c0:34:a5:c3:d4:8f:94:91:82:f4:bc:2d:6f:2d:07:d1:c1:c8:
         4f:38:e9:04:bf:f9:bf:7a:f0:d2:3a:cc:89:bb:75:4f:e0:fd:
         13:90:6c:3a:7e:d3:33:97:f8:cf:f4:fb:70:cf:03:11:d2:cb:
         3f:f2:64:d8:02:2f:31:4c:1c:5a:9d:b1:93:49:f2:8b:47:92:
         77:e2:07:1f:d9:99:a6:e4:f3:95:16:1f:77:30:68:7b:b7:fe:
         0a:96:ab:9d:31:8a:94:62:1d:8e:a7:9c:5a:48:3d:8b:72:0e:
         8f:c5:38:64:6a:93:e1:48:b8:b2:52:f8:5f:28:15:f0:90:43:
         6f:ff:04:9b:b8:af:20:e2:2c:a4:97:6a:39:8f:e2:22:50:fb:
         fc:b3:9c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----