Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/15fe7004-cf74-3371-8689-19351b716eb2.roa
File:                     15fe7004-cf74-3371-8689-19351b716eb2.roa (raw, json)
Hash identifier:          /7FOVkGvMBm9Qjzh8BptDYzQeH/z/TpSNrXkA2f5Ruo=
Subject key identifier:   D4:EF:0D:4F:C7:71:C0:DA:D9:51:67:7E:5C:C8:8C:18:F4:64:2C:3B
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F432858494E2EAFED335F73922568B140
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/15fe7004-cf74-3371-8689-19351b716eb2.roa
Signing time:             Tue 25 Mar 2025 13:00:51 +0000
ROA not before:           Tue 25 Mar 2025 13:00:51 +0000
ROA not after:            Mon 23 Jun 2025 13:00:51 +0000
asID:                     14618
IP address blocks:        167.234.50.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4e:2e:af:ed:33:5f:73:92:25:68:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Mar 25 13:00:51 2025 GMT
            Not After : Jun 23 13:00:51 2025 GMT
        Subject: CN=bf002cb2-2ab2-4d86-96e3-7ccfbcae677c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:41:7f:0b:d6:9f:2c:07:73:5c:19:74:06:6f:
                    43:d7:5a:83:22:d7:ba:40:c9:a3:dd:ca:61:f7:e7:
                    3b:06:fe:26:eb:ef:2f:0c:e7:38:8d:99:02:08:fa:
                    89:82:f7:06:62:18:18:bb:37:23:27:b7:ef:0d:68:
                    24:c4:33:dd:82:6a:d7:e6:72:c5:20:b8:76:44:04:
                    22:6e:c3:10:09:2c:2e:a3:93:ba:80:18:30:ae:f8:
                    b0:c1:78:82:c7:6d:eb:ce:4f:85:c9:b5:a1:4c:14:
                    e3:82:17:50:bf:e5:c7:24:41:02:c3:51:d7:5e:ef:
                    63:d1:06:f8:b9:72:5a:2b:56:c4:ea:40:ce:54:cd:
                    d6:7f:bc:74:bc:06:17:59:3e:8a:49:14:dc:0f:5d:
                    3b:55:bf:c9:69:22:ba:29:b8:b9:58:69:32:58:1a:
                    fd:6f:85:54:22:a0:ba:95:48:43:cb:b9:5b:65:fc:
                    c3:51:7d:5d:ad:4e:77:9b:c9:31:8f:0e:f7:a2:f2:
                    b3:33:37:7f:76:7b:f2:f2:f8:d1:db:1f:1b:6b:0e:
                    e4:3d:9c:e6:27:c3:9a:7e:88:af:9a:09:34:a1:6a:
                    0a:c7:4d:d3:17:98:29:f0:ec:7a:81:5b:18:6f:c1:
                    cc:02:68:1d:cb:24:8d:6e:ad:86:fe:24:1b:2e:28:
                    d3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:EF:0D:4F:C7:71:C0:DA:D9:51:67:7E:5C:C8:8C:18:F4:64:2C:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/15fe7004-cf74-3371-8689-19351b716eb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.234.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:9a:a2:4c:2f:a8:05:0f:be:9c:ae:27:34:88:bb:6b:49:8e:
         42:12:d5:34:17:77:eb:04:a6:b7:5e:b4:d2:84:95:dd:af:c4:
         65:5e:9f:f4:06:b3:13:35:52:45:8d:b1:9d:28:92:1b:32:fd:
         77:4f:e5:77:dc:67:2a:83:79:7f:f2:fb:9b:6e:b8:36:77:5f:
         5c:b9:a6:9f:6d:89:f2:f4:1f:c2:4a:b2:fd:8e:e7:fe:4a:ba:
         c2:10:2b:0f:4c:1d:33:c3:fe:a9:c6:fd:0f:c2:c2:59:70:b9:
         30:98:f5:1c:79:66:fc:e1:b3:39:ef:8d:41:9b:73:d4:82:3b:
         08:b2:f3:c8:57:9c:9f:a6:b0:f6:7c:64:74:d8:9a:f8:cc:84:
         a4:9a:42:26:d6:a1:2d:97:96:18:29:52:43:90:05:42:6b:8f:
         60:48:ef:76:23:ed:a8:b9:d0:a9:84:e6:0e:81:17:4d:44:68:
         7b:08:fb:92:37:ff:ad:46:0e:ec:c6:d3:94:fa:3d:9f:3c:cc:
         b3:cd:c9:83:26:ba:f4:97:7a:c0:56:22:25:ca:8c:9a:5a:cd:
         5d:79:20:1a:cf:ae:b1:23:17:c0:2e:d1:1a:19:e6:31:25:a3:
         da:84:9c:e5:7b:70:5e:e4:78:9e:cc:cc:03:64:c1:de:39:47:
         d1:d2:92:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----