Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e6c954af-d510-3bdb-8331-f2915895708e.roa
File:                     e6c954af-d510-3bdb-8331-f2915895708e.roa (raw, json)
Hash identifier:          s89yaWFyRBKYv1ZS+9jASiF+Wt3RvUNaaX6jpjK3SPw=
Subject key identifier:   C0:1C:14:32:22:6E:CC:78:53:1F:0C:70:67:92:18:95:31:0C:93:97
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858492CB0B5E65BDAB81DF2F54F80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e6c954af-d510-3bdb-8331-f2915895708e.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     26481
IP address blocks:        216.172.150.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:b5:e6:5b:da:b8:1d:f2:f5:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=52cbc5bd-db9a-42f7-acb8-c4bd89cc1b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:99:9a:b1:be:1c:67:7a:c6:c2:24:b2:18:45:
                    34:bb:a7:0a:24:0f:7b:6c:b5:b3:3d:f2:d7:90:01:
                    90:37:36:c1:02:16:c1:5b:51:ab:28:3d:4b:bd:0d:
                    c7:00:e1:00:3e:31:b5:ec:ed:03:70:d8:20:e4:bd:
                    4b:c7:27:af:3d:e7:86:fe:48:79:f1:a6:75:ab:90:
                    f0:e2:32:34:9b:e8:d7:ad:ad:48:90:28:5b:8e:75:
                    b0:0f:07:57:79:6b:b0:d4:38:41:d7:46:fc:97:b0:
                    04:ef:fe:e7:0d:0a:a0:fd:6e:34:dc:df:5b:7d:83:
                    8d:e6:c4:8e:ae:33:2a:4b:7e:11:df:87:90:5b:86:
                    35:6a:45:72:8c:8c:03:c4:d3:17:ca:1f:19:24:d9:
                    dc:61:25:58:0d:13:e2:c2:2a:8b:6c:2d:cf:e5:fe:
                    fc:31:44:b4:1d:39:e9:f3:8e:8b:d0:b1:96:80:c9:
                    60:a1:31:bb:90:d2:e7:4d:27:19:82:61:b3:e9:bd:
                    4f:5d:fd:da:5c:36:96:b4:e0:bf:3d:68:e5:cf:f4:
                    f5:25:48:aa:c3:bc:5e:97:a8:10:8b:73:5c:96:1f:
                    d5:5b:90:b1:1d:d1:ba:3c:2a:26:75:16:08:cb:68:
                    81:ac:f9:e7:bf:4d:6c:af:45:40:9d:f9:56:7d:76:
                    69:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1C:14:32:22:6E:CC:78:53:1F:0C:70:67:92:18:95:31:0C:93:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e6c954af-d510-3bdb-8331-f2915895708e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.172.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:01:4d:ef:07:b1:bd:40:36:f0:04:fc:03:99:54:e5:6b:df:
         44:51:d5:6c:7e:97:fc:1e:a9:67:d7:d6:17:6d:3c:f0:13:e4:
         36:19:ad:6a:f5:ae:7b:c4:89:fc:2c:9b:34:c4:77:79:d1:7d:
         eb:ca:87:44:06:33:ee:84:79:ba:9a:12:24:62:46:ef:1d:d5:
         2b:f1:6a:54:5d:42:82:74:ca:37:56:52:6e:a5:c4:1e:b0:2f:
         f7:89:d6:48:9f:68:f1:b1:1f:f6:f0:de:e7:fd:a4:f7:90:f1:
         3e:ee:ec:aa:47:e9:9d:bc:0e:31:21:41:7e:43:0f:19:1d:a3:
         87:83:28:b8:11:f8:30:d8:d0:9b:46:3d:15:8d:8e:04:23:06:
         c2:5b:04:51:2a:60:3c:1e:51:de:5d:54:ea:2d:eb:e6:87:b9:
         79:6b:9c:b1:23:80:de:93:73:96:87:f9:e5:82:f8:fd:7c:bc:
         7b:87:f3:27:39:f2:8d:7b:fe:de:19:e8:22:98:24:3f:3d:c6:
         52:36:4d:2a:1f:86:28:e9:51:70:b5:f9:3c:4d:5c:94:51:67:
         7c:f3:1e:1a:c6:a9:8f:d7:9d:ed:24:de:70:f6:95:9e:cb:65:
         02:58:38:f2:ac:57:de:96:e1:23:d1:f2:b2:32:33:99:fb:63:
         2e:13:01:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----