Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/abfcc368-40d0-301b-af70-d0a13b23cb4f.roa
File:                     abfcc368-40d0-301b-af70-d0a13b23cb4f.roa (raw, json)
Hash identifier:          be1VWGlVPTx8gj8aQYOIjuaTPfYVK5cZvg5p/pHS+JE=
Subject key identifier:   DA:85:5E:B5:B4:4D:08:50:5E:29:10:B7:5D:A7:11:B6:EF:08:28:9E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848EC96AC9EDC209B01647C1D80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/abfcc368-40d0-301b-af70-d0a13b23cb4f.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     201106
IP address blocks:        142.252.213.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:ac:9e:dc:20:9b:01:64:7c:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=aff15004-2164-4f78-b699-2d246a0a7552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0e:d9:30:53:80:b5:2f:a0:71:d5:f9:82:63:
                    f6:8d:00:a4:61:61:f5:39:62:73:07:fc:17:03:02:
                    c3:ef:cb:36:4c:bc:d3:88:a2:57:62:d1:fe:e0:ae:
                    a3:fe:d0:d4:74:f2:7c:eb:cc:87:26:ca:96:ec:c9:
                    e8:51:36:d1:ac:52:93:df:f7:df:87:e5:0a:3a:de:
                    8e:7c:fb:fc:b3:36:68:ad:87:dc:b3:a3:1f:57:4d:
                    cc:7e:87:f8:91:55:ce:a7:ba:ab:9d:81:72:40:63:
                    23:3c:c6:d5:3b:03:74:cc:6c:5e:f3:aa:76:6b:d3:
                    db:99:d0:38:18:7f:c6:9e:8a:a8:bc:77:52:cf:74:
                    90:99:b2:c6:ed:95:fd:e6:23:f9:58:11:32:87:85:
                    3d:d7:d2:37:a9:f5:89:7a:54:94:b2:b4:6e:8d:0e:
                    44:c8:4d:fd:c3:3d:d5:8d:c1:a5:1d:5c:20:11:aa:
                    b3:95:13:57:7c:b8:8a:82:5e:d0:5f:d0:6c:8d:fc:
                    97:26:0e:e4:ea:20:95:95:5c:95:1f:b1:a6:7a:e2:
                    14:03:b6:b4:1a:2e:c3:91:b0:78:f2:d6:b6:e5:60:
                    91:c3:23:7b:ea:74:2b:41:fd:65:c6:04:3f:50:53:
                    dd:7e:1a:29:e0:0c:fe:77:84:0c:6d:02:02:83:67:
                    71:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:85:5E:B5:B4:4D:08:50:5E:29:10:B7:5D:A7:11:B6:EF:08:28:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/abfcc368-40d0-301b-af70-d0a13b23cb4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:10:29:12:dc:22:58:18:20:68:03:97:00:5e:75:e9:1f:40:
         23:f6:04:36:4b:b0:95:0e:57:02:9a:c9:f3:f1:b6:63:ac:09:
         93:76:59:c0:b1:ae:79:a3:86:b8:63:b4:94:ea:56:5b:32:39:
         cf:b9:56:5b:87:e7:8a:76:da:df:cf:1b:e0:fb:6a:0e:b5:2a:
         d0:41:88:60:c7:34:d0:51:52:1f:e2:93:52:57:72:5b:e2:b5:
         61:3c:3b:ff:38:19:53:7f:73:43:b4:2a:3e:0e:a8:df:16:b9:
         5e:c4:3a:f1:c9:c3:71:e7:fc:4e:e1:9a:7d:37:5f:19:35:35:
         0e:0c:bb:4b:58:d7:23:a4:31:ec:9e:e4:bd:50:2f:9a:b1:e1:
         b6:3d:07:c9:19:c3:71:0f:a0:a3:0f:35:d1:de:a4:6a:aa:24:
         ce:d1:25:19:fb:24:68:16:ea:a3:12:3f:0b:4a:bd:42:f7:22:
         fb:74:62:39:4f:b2:1f:28:94:77:76:db:64:bd:24:aa:88:9f:
         5e:47:d9:33:ad:87:c6:40:ad:ad:8e:a4:e0:ab:55:84:cf:62:
         db:5c:d3:85:6b:70:e9:b8:ff:eb:d3:88:d8:0e:66:ae:8e:e0:
         8c:a5:12:c0:91:cd:96:3e:0d:eb:3d:2c:26:bf:ac:f4:2d:1b:
         c0:ac:0e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----