Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/361cf8c1-5bc4-3a71-999c-b46e5c1050a6.roa
File:                     361cf8c1-5bc4-3a71-999c-b46e5c1050a6.roa (raw, json)
Hash identifier:          UKWrLpNclWKIW/Wj69MeJKDoxnnqm/zP7o6Kykgu3YY=
Subject key identifier:   D3:20:41:A2:4B:05:6E:36:90:FE:BB:84:EF:B5:95:B3:5F:E3:E3:41
Certificate issuer:       /CN=9ff43aab-c8c2-4f23-91e5-373be2462e9f
Certificate serial:       010D0C9F43285848A830AE442814F8853D107F00
Authority key identifier: 56:45:75:A6:DC:99:39:16:88:BC:D3:FE:86:9A:FD:9C:E9:FD:74:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/361cf8c1-5bc4-3a71-999c-b46e5c1050a6.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     18140
IP address blocks:        104.145.16.0/20 maxlen: 20

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:ae:44:28:14:f8:85:3d:10:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff43aab-c8c2-4f23-91e5-373be2462e9f
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=92bb0c7e-d96e-4ace-86e0-2313dd254f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5c:39:4d:5a:a6:08:ba:b2:d4:0b:f7:3b:f5:
                    24:95:a3:34:1d:c0:95:84:a2:65:8c:fc:e4:9b:52:
                    b6:9f:cc:fd:a3:eb:71:21:7b:28:bb:a4:29:17:2b:
                    4b:56:22:b1:e5:9e:81:be:f4:83:1a:7b:e1:ef:dd:
                    c3:76:c4:0d:51:2c:c6:e4:3e:25:c4:da:93:85:67:
                    97:45:0a:25:69:ae:b7:6e:d8:5c:ff:d6:10:b4:11:
                    ff:7f:f0:2f:7a:e0:9e:42:a3:d6:e6:6e:68:ce:91:
                    7a:d4:7a:55:d5:b5:8d:e2:dd:99:48:21:ef:f9:3a:
                    2e:8c:0f:5a:0e:83:59:8b:0e:2b:f0:1a:10:8c:5b:
                    05:df:e6:a7:9a:a6:25:30:de:6b:a8:8f:96:15:86:
                    fd:14:6b:c4:d7:a6:40:c2:cb:49:ed:a0:5e:2c:85:
                    e9:0d:64:ca:8d:3c:34:26:c3:c5:da:e2:2a:13:4c:
                    fa:77:79:8a:57:19:f6:87:d2:15:40:26:06:ca:3f:
                    bb:07:49:c5:b1:1a:ac:72:d9:26:e3:c1:eb:87:fa:
                    4a:ea:52:f0:96:22:a3:1a:79:d3:18:f9:77:4d:54:
                    b9:0b:60:53:60:1e:83:fa:11:c0:20:5a:68:1b:77:
                    6f:43:0b:f0:61:e0:e8:72:d8:8d:d6:8c:fa:23:7f:
                    b7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:20:41:A2:4B:05:6E:36:90:FE:BB:84:EF:B5:95:B3:5F:E3:E3:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/361cf8c1-5bc4-3a71-999c-b46e5c1050a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/9ff43aab-c8c2-4f23-91e5-373be2462e9f.crl

            X509v3 Authority Key Identifier:
                keyid:56:45:75:A6:DC:99:39:16:88:BC:D3:FE:86:9A:FD:9C:E9:FD:74:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:1e:77:61:c4:e9:53:25:e2:13:e6:d3:13:dc:6a:2b:07:4c:
         9d:71:75:9b:2c:ac:bd:f7:38:06:b7:30:41:95:cf:49:11:af:
         fe:3c:ed:65:ae:16:cb:5f:30:92:5b:69:21:81:e4:ab:d5:72:
         07:70:1e:34:18:6e:0b:54:d0:c7:69:5e:8d:08:8f:7c:78:44:
         fb:3b:c9:3a:76:52:b0:f5:47:4f:61:49:2e:34:2a:32:48:37:
         cb:9b:18:e2:cb:df:f7:6a:c0:ee:ce:7a:1a:8a:c7:a5:ec:d5:
         4a:99:d4:65:c7:f8:3c:1d:91:27:9b:43:97:2c:14:2b:12:54:
         31:86:2c:5b:6b:96:5b:7a:7f:44:fd:df:33:06:a0:67:9b:f0:
         d9:74:7c:98:f4:7c:51:55:ad:19:9d:48:ab:4e:40:68:fe:c8:
         fb:05:b5:84:63:03:12:fc:1e:8c:b2:34:42:d8:21:22:25:ee:
         01:f9:32:af:41:15:a3:5b:f7:86:8d:38:34:41:20:0b:3b:8b:
         e1:0e:2e:80:bc:61:af:71:a6:dd:5d:c1:d3:20:74:a2:43:14:
         04:16:5f:d8:77:1f:98:bd:da:1f:af:d8:00:e3:a4:0c:8a:5b:
         01:e0:a5:ae:32:9e:dc:52:b2:4f:c7:ed:4e:6e:a2:1d:a6:db:
         8a:ea:82:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----