Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a353a6ed-43c3-4996-b762-0b1c02617d17/2cf45b32-9ef5-37f8-91b1-d78393a410d9.roa
File:                     2cf45b32-9ef5-37f8-91b1-d78393a410d9.roa (raw, json)
Hash identifier:          CyUVx5yR8KXn1Rjq7BfhbjZf9QgeVpDaBOFTYrZrvEY=
Subject key identifier:   12:7F:D9:3E:BD:3C:3E:76:1F:54:D0:FE:80:66:AA:B3:D1:B5:F7:AC
Certificate issuer:       /CN=a353a6ed-43c3-4996-b762-0b1c02617d17
Certificate serial:       010D0C9F4328584973DEE8E09AE4864580DF3EC0
Authority key identifier: AF:29:9E:36:51:0C:95:3B:AF:12:12:E5:63:37:50:16:EB:3D:8B:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a353a6ed-43c3-4996-b762-0b1c02617d17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a353a6ed-43c3-4996-b762-0b1c02617d17/2cf45b32-9ef5-37f8-91b1-d78393a410d9.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     54307
IP address blocks:        205.207.178.0/24 maxlen: 24
                          2620:a8:6000::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:e8:e0:9a:e4:86:45:80:df:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a353a6ed-43c3-4996-b762-0b1c02617d17
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=8d83ae3c-8a40-4213-bf2c-45a0e3044eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9e:ec:38:4d:c9:4e:3e:ef:12:5f:64:03:af:
                    f4:59:3b:9e:c7:97:1b:e3:6f:48:d3:7b:c3:a8:1b:
                    d0:01:95:2c:89:2c:0e:cd:53:0c:0b:5d:d7:55:f5:
                    33:de:57:68:a8:e8:13:c6:cf:b7:59:c6:81:51:f8:
                    d7:f4:51:44:13:97:dc:77:9e:68:84:60:7a:73:87:
                    5e:d7:99:59:83:2c:7b:06:e9:78:c3:cb:69:85:a3:
                    d5:98:82:c4:e6:61:06:ec:49:6a:43:5c:37:c7:89:
                    ba:dc:ec:a9:34:d5:a9:49:03:03:2a:bf:f0:42:ed:
                    da:80:fc:2b:00:33:6d:09:eb:3b:73:9b:d3:c3:79:
                    3e:40:40:82:21:8e:63:e6:c7:1c:de:87:2e:71:59:
                    54:cd:a3:c9:41:dc:09:4a:53:c8:e9:c8:a5:f6:61:
                    07:0f:25:c7:db:0f:a8:93:99:6d:79:b7:37:6d:83:
                    c2:21:e4:ff:87:52:69:92:81:cc:ce:f7:c9:bf:48:
                    ea:dd:e8:0a:e7:d5:9c:3b:dd:32:b1:0f:00:92:7f:
                    14:95:51:93:52:9c:f1:41:63:b9:d8:02:62:ae:a3:
                    8c:b3:ac:b6:93:c8:01:6a:c7:e0:d3:81:1e:21:f3:
                    36:2e:56:e5:f1:3a:cc:98:49:5d:db:71:29:b8:c2:
                    33:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:7F:D9:3E:BD:3C:3E:76:1F:54:D0:FE:80:66:AA:B3:D1:B5:F7:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a353a6ed-43c3-4996-b762-0b1c02617d17/2cf45b32-9ef5-37f8-91b1-d78393a410d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a353a6ed-43c3-4996-b762-0b1c02617d17/a353a6ed-43c3-4996-b762-0b1c02617d17.crl

            X509v3 Authority Key Identifier:
                keyid:AF:29:9E:36:51:0C:95:3B:AF:12:12:E5:63:37:50:16:EB:3D:8B:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a353a6ed-43c3-4996-b762-0b1c02617d17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.207.178.0/24
                IPv6:
                  2620:a8:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:8b:a2:52:90:ed:ae:7b:ba:ff:1e:cc:bb:ce:c9:a2:62:f4:
         1c:5e:86:9e:59:32:17:48:16:38:4c:93:b6:f3:a8:2f:28:8f:
         03:26:a5:40:a7:3b:b7:7a:d1:91:22:f6:53:0c:59:0b:33:f4:
         8f:72:53:ba:4c:17:57:bf:d0:d6:dd:f5:66:22:1c:9a:82:51:
         8c:06:1d:f0:43:88:85:7b:92:68:25:7e:9c:d5:ff:75:1c:8c:
         01:ec:01:b3:30:96:cf:9c:77:8a:4f:c1:c8:f4:34:b5:15:e6:
         34:02:ff:37:a0:d8:98:10:83:ae:02:89:24:3b:30:3d:8c:60:
         fc:08:44:6d:51:70:53:4f:a4:04:c2:65:ea:f4:12:e6:30:92:
         43:48:85:aa:bf:b6:95:d5:bc:59:8a:6c:49:18:d5:40:95:c2:
         ec:7a:4f:46:d8:fa:2a:27:fb:8c:ce:02:47:51:de:38:cb:f6:
         5f:a7:61:e8:e4:f7:67:fd:26:13:c5:cf:bf:d5:76:3b:2b:9b:
         a1:27:a7:5d:11:9f:8a:86:47:05:d4:49:a6:b3:d6:5e:ac:cf:
         60:23:00:93:5a:0f:5a:a9:0c:60:19:96:c1:ac:86:d3:12:d2:
         6c:f9:f5:48:c0:fb:2f:c5:8d:15:fe:ca:69:e4:4a:03:af:1c:
         73:27:50:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----