Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/dff21604-1698-3188-98f1-6b0994e52624.roa
File:                     dff21604-1698-3188-98f1-6b0994e52624.roa (raw, json)
Hash identifier:          9QaZxmSo4Pua+nUBxrJdMLiBB9mRQO2mip/ZnwSLjZc=
Subject key identifier:   AA:ED:2B:56:0E:F2:EF:0E:FE:63:8F:35:28:C2:D1:2C:00:8E:96:6A
Certificate issuer:       /CN=d899d3d2-c968-408b-b21e-5744f982c130
Certificate serial:       010D0C9F43285848B1F62F016FFE55307576BDA0
Authority key identifier: 2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/dff21604-1698-3188-98f1-6b0994e52624.roa
Signing time:             Tue 28 Jan 2025 14:00:52 +0000
ROA not before:           Tue 28 Jan 2025 14:00:52 +0000
ROA not after:            Mon 28 Apr 2025 13:00:52 +0000
asID:                     393821
IP address blocks:        192.169.66.0/23 maxlen: 24
                          206.125.144.0/21 maxlen: 24
                          2607:3680::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b1:f6:2f:01:6f:fe:55:30:75:76:bd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d899d3d2-c968-408b-b21e-5744f982c130
        Validity
            Not Before: Jan 28 14:00:52 2025 GMT
            Not After : Apr 28 13:00:52 2025 GMT
        Subject: CN=7dcbd235-3e58-4099-a767-42e57108e27c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:90:23:fe:05:bb:ee:4a:db:70:09:41:26:f9:
                    1b:4b:9d:64:a0:92:ad:51:f5:ad:5e:b8:28:41:6d:
                    28:80:b5:21:d6:63:2a:f2:b3:23:1a:7e:62:13:ac:
                    5b:af:27:66:bb:70:ee:71:50:8b:83:9f:4d:86:9b:
                    7f:e9:75:2d:73:38:0a:23:cc:85:bc:c6:de:ff:eb:
                    ae:3d:cf:fd:f5:82:dd:4a:57:ad:0b:9c:14:f4:dd:
                    d5:60:d4:5f:4a:4a:25:6a:a3:7d:48:1a:b5:84:cd:
                    e0:86:dc:71:f6:ef:8a:d6:87:15:a7:fd:26:61:e2:
                    cf:04:32:d2:21:fd:02:1c:e4:16:11:36:53:16:1c:
                    2a:93:b7:52:1d:d8:34:57:43:ef:fb:50:7f:2f:7d:
                    77:3b:2b:15:6e:c6:4a:1b:3e:f3:c4:f3:86:d2:84:
                    73:4d:21:bf:4a:94:fb:80:1f:40:19:cf:b8:65:3b:
                    f3:76:43:23:64:d6:bc:9c:bc:54:67:45:0b:f0:60:
                    28:4e:8b:2c:cb:d0:72:00:ab:59:b8:c9:c4:ee:a8:
                    7d:a2:f5:fe:e0:ed:80:be:bb:1a:b4:9c:df:d5:dc:
                    c4:84:0c:4e:f3:b4:f7:38:9f:53:ad:37:8e:fb:73:
                    48:12:9a:fd:a2:87:06:ba:22:88:92:3c:fb:32:1c:
                    01:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:ED:2B:56:0E:F2:EF:0E:FE:63:8F:35:28:C2:D1:2C:00:8E:96:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/dff21604-1698-3188-98f1-6b0994e52624.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.crl

            X509v3 Authority Key Identifier:
                keyid:2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.169.66.0/23
                  206.125.144.0/21
                IPv6:
                  2607:3680::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:ac:16:5a:1e:71:08:38:95:8e:7a:80:57:da:7a:bf:e2:ee:
         ea:e0:4e:c7:81:01:70:2a:a9:4a:cf:ff:34:6b:bf:6f:24:f9:
         a6:b1:74:c8:9b:8e:ee:e2:da:6e:de:07:36:db:50:41:38:66:
         d5:ad:55:40:56:e8:80:0a:5a:42:21:10:be:d3:0f:e2:c5:e2:
         03:69:6c:2e:f2:85:4e:b6:f9:98:f9:2f:58:fd:6a:45:1f:5d:
         60:18:0d:35:71:b4:60:2f:76:57:c4:66:aa:c5:4f:be:92:62:
         0d:f6:51:06:98:f0:30:89:c6:db:32:27:1f:c4:5c:95:dc:64:
         33:e3:ad:f8:42:7b:ce:14:bc:bd:4b:ab:bd:c2:1d:3f:2d:52:
         c9:df:7d:39:b4:bb:a6:3e:f1:ea:54:e4:ec:a8:2e:8f:4b:85:
         aa:58:63:a9:e2:09:0f:8b:d7:95:20:86:3d:34:e7:fe:87:5f:
         08:8d:25:d2:6d:66:03:3d:f3:35:bd:a6:3b:70:23:51:87:57:
         bf:3e:17:58:da:68:80:f7:60:0e:99:75:11:5b:7b:17:a5:bd:
         ed:37:45:64:cd:8e:fe:95:58:d7:30:68:b6:d8:58:39:5e:d8:
         26:fd:a6:ab:55:92:9d:39:6d:da:62:ea:7f:de:54:f9:e4:16:
         8e:14:05:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----