Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/4bd7e0b7-2238-33c8-a229-20f0948809be.roa
File:                     4bd7e0b7-2238-33c8-a229-20f0948809be.roa (raw, json)
Hash identifier:          cz0wTUtxBxjFjliNKmE9A+mTI2j2pKEYbv2T1CZjQpM=
Subject key identifier:   00:FF:0B:6D:D7:1C:EC:B6:33:E1:21:3B:BB:99:8D:79:38:23:A7:8E
Certificate issuer:       /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial:       010D0C9F43285849350E9C1434B73ADAA242DA80
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/4bd7e0b7-2238-33c8-a229-20f0948809be.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     3257
IP address blocks:        208.72.208.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:9c:14:34:b7:3a:da:a2:42:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=c5cd6916-5c32-476a-a57f-894c22fef7c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f9:c8:e1:4d:97:55:2e:08:64:89:fe:58:4e:
                    0c:a4:d4:a0:19:b5:94:82:a5:57:74:fa:d9:27:51:
                    77:8f:86:8a:df:3c:8f:51:b1:55:cd:0d:41:54:a0:
                    60:cd:e2:49:25:0b:3c:48:62:0e:5b:bb:2a:78:65:
                    dc:f2:de:e0:6b:9d:16:b4:55:0b:f0:cd:a2:3e:a0:
                    60:c8:9d:46:c1:b2:f6:a4:07:75:3e:c4:3a:36:26:
                    d3:f4:78:29:e2:42:37:90:6f:44:cd:30:c6:da:bc:
                    35:10:06:b8:fe:79:ae:0e:4b:82:63:21:5d:24:a0:
                    d3:a8:95:cf:01:47:e4:0d:d6:99:59:f9:4d:ca:0d:
                    dd:0e:8b:bf:e2:c8:fb:3a:34:82:30:42:0f:fc:e9:
                    21:0c:80:6a:67:7d:fa:f7:cb:bc:66:37:39:5e:ca:
                    91:58:25:1a:e9:48:88:ba:55:ac:72:a6:fd:f0:2b:
                    29:70:08:23:77:c0:7b:11:6f:7b:8b:17:1e:c9:a4:
                    e6:a2:3d:24:ad:5b:06:27:0d:51:1e:eb:25:59:ba:
                    e1:52:8e:36:01:2b:30:b6:fd:df:05:64:75:ce:7d:
                    74:ad:38:97:a3:5b:ac:73:5b:4d:b0:7e:6d:c0:4d:
                    e4:6f:66:c3:9b:9d:03:9e:be:ae:83:db:02:a9:2b:
                    80:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FF:0B:6D:D7:1C:EC:B6:33:E1:21:3B:BB:99:8D:79:38:23:A7:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/4bd7e0b7-2238-33c8-a229-20f0948809be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.72.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:43:cd:f4:ac:93:0c:d8:30:3e:9b:20:98:87:f3:dc:d9:de:
         c4:8f:4b:c2:76:62:7b:f6:85:17:64:f1:e2:68:c8:73:db:80:
         b0:58:f7:16:9a:f1:3f:db:2e:b3:02:84:0d:ae:38:8d:d6:38:
         b8:1d:e0:5a:65:e5:77:49:5e:fa:dd:67:d7:e5:b8:df:5f:72:
         99:ec:44:4e:1c:ca:d1:22:80:b6:fd:b4:df:2f:05:1b:e5:4f:
         5f:35:05:fe:e9:0d:b3:25:f8:65:ef:3a:29:47:1d:70:45:10:
         bc:c2:79:51:6a:af:88:69:10:8b:a1:58:fe:ed:bc:ff:a0:0d:
         47:b4:6b:43:ff:74:52:19:1a:af:e9:bd:7f:7c:89:e4:65:24:
         6e:f7:ef:ac:45:12:89:12:70:99:b1:5a:30:2f:69:7b:9f:f9:
         ba:25:fe:83:8d:6e:ea:d3:5b:e6:95:27:74:d1:b2:62:e6:95:
         6c:96:d8:dc:5f:61:cf:9e:36:2e:25:9d:ca:43:77:e8:11:75:
         49:16:47:1a:c3:74:dc:e2:4f:6b:fe:1a:d8:07:ed:78:2d:94:
         de:ff:8f:af:78:25:7a:17:d6:a8:44:ec:8b:df:9c:c9:10:8d:
         13:12:a2:74:86:de:21:f2:9f:13:3d:d4:b2:cf:a3:bd:ee:59:
         3f:34:41:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----