Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/c94ce2a3-4802-3ebb-ac84-90080f08baea.roa
File:                     c94ce2a3-4802-3ebb-ac84-90080f08baea.roa (raw, json)
Hash identifier:          8to2LJRZLbmDIk9NIpq+REjlrNQ5fC0b+mPUM8bRiV0=
Subject key identifier:   0F:32:AB:BF:D6:A9:03:2E:08:25:B7:71:87:77:16:F6:C2:FD:29:79
Certificate issuer:       /CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
Certificate serial:       010D0C9F43285848E2D1069AEF1BDF511FFE4400
Authority key identifier: 27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/c94ce2a3-4802-3ebb-ac84-90080f08baea.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     22418
IP address blocks:        209.151.160.0/20 maxlen: 20

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:06:9a:ef:1b:df:51:1f:fe:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=021493fd-3fb9-4b1d-ba88-71c882577e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:61:39:55:cd:7c:49:00:ff:be:f8:e9:ff:de:
                    7a:cf:c9:d4:6a:2b:6c:7a:5d:19:0b:dc:43:54:dc:
                    27:59:df:57:a5:4c:7c:af:de:d2:ef:43:8b:5d:ea:
                    4b:28:12:b9:ab:b3:71:e2:1f:9d:b8:07:51:85:c5:
                    68:47:d5:27:99:3b:ac:37:4d:bb:fe:87:fc:aa:f9:
                    ae:6f:b1:23:bf:31:0d:3e:b5:a9:3f:e0:0d:dc:3e:
                    3d:3d:37:26:83:68:77:c9:ea:46:cb:98:35:c2:71:
                    15:9c:bc:21:6b:41:8f:50:ce:86:30:0a:6d:ec:0f:
                    b1:6f:4b:18:90:84:3a:6e:c3:78:f0:57:b4:90:74:
                    28:40:1f:8b:13:ec:f4:4c:d7:71:64:7f:9a:b3:30:
                    48:e9:a7:a6:54:83:6f:b1:d2:58:53:da:a1:08:fd:
                    ee:54:f6:87:b9:86:43:f6:c5:75:8b:3f:6d:3e:e7:
                    23:89:66:8e:29:e0:ed:49:0e:69:3f:11:e8:00:fc:
                    5c:99:7d:76:a8:19:f3:cb:d0:d8:86:59:d1:75:ba:
                    df:28:8f:ef:1d:4b:6c:95:80:e7:2a:4d:05:eb:fa:
                    f6:53:72:5e:51:39:aa:0b:82:ab:7f:db:e1:20:07:
                    0a:1e:15:82:eb:2b:78:b2:f5:4e:6a:49:42:5c:e5:
                    78:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:32:AB:BF:D6:A9:03:2E:08:25:B7:71:87:77:16:F6:C2:FD:29:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/c94ce2a3-4802-3ebb-ac84-90080f08baea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl

            X509v3 Authority Key Identifier:
                keyid:27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:a4:09:15:c8:ab:0b:83:e2:8e:65:07:96:df:02:aa:0b:2e:
         03:76:88:dd:2f:1f:85:f5:a9:79:19:65:fe:41:73:a6:a8:a5:
         39:fc:d5:2d:23:5c:d2:f3:22:a9:a0:6e:12:a8:e0:58:cb:69:
         b7:79:58:c2:bb:ed:ba:5d:e7:9d:a4:a0:1b:01:42:d1:4b:96:
         9e:44:78:97:47:98:3f:62:5c:c1:95:55:30:9c:26:19:01:9a:
         ee:3e:cd:7b:dc:c9:3e:ae:f9:ed:63:c8:4f:07:55:dd:e4:c0:
         1b:88:3d:2a:f0:9a:ed:b0:64:c0:40:ba:5e:f9:1e:3b:cc:f1:
         09:96:86:81:09:71:e2:6f:0a:ec:2b:c3:7f:b8:b4:c8:a4:5b:
         eb:3c:f2:f4:09:c5:68:de:01:d2:93:68:cc:23:91:1d:f7:10:
         c9:a6:cb:9c:86:24:60:ee:9b:d2:36:60:65:81:94:23:c0:05:
         5b:c6:b7:b3:2b:f6:5d:21:1a:98:56:12:63:99:97:ce:ed:bf:
         41:72:f0:61:e0:27:b3:f8:1c:d0:bf:15:59:33:dc:ef:f3:06:
         3f:f7:3a:59:eb:14:3c:4e:c2:db:ec:ec:41:34:08:f8:85:a2:
         df:a3:3c:8d:7d:73:83:a5:c0:74:78:ed:7b:fe:c2:ed:c2:a5:
         ee:d9:b6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----