Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/acfe93c1-0f81-3c52-bb6f-b9ce7a09e1ba.roa
File:                     acfe93c1-0f81-3c52-bb6f-b9ce7a09e1ba.roa (raw, json)
Hash identifier:          eBZPuguFBumTojauvjqid7k7i0BFYBz71FSPBPoCLUU=
Subject key identifier:   74:99:00:74:1D:EF:E6:23:F8:F7:F5:19:91:E8:90:67:5D:C6:7E:3F
Certificate issuer:       /CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a
Certificate serial:       010D0C9F432858496A19A77D588D12445F00AD80
Authority key identifier: AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/acfe93c1-0f81-3c52-bb6f-b9ce7a09e1ba.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     209453
IP address blocks:        2604:3400:dc3::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:a7:7d:58:8d:12:44:5f:00:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=277e4032-a98d-482d-a3a1-2c16a9e95de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:31:11:a9:08:55:45:f1:f1:df:e5:1c:18:a6:
                    d4:da:68:7b:6a:1e:e3:32:3e:33:5b:d5:83:4d:67:
                    fa:3b:e5:c1:6a:00:9c:53:25:07:dc:f8:3b:d1:37:
                    c3:09:f1:8b:0f:74:98:01:9f:9d:95:2e:67:ec:4f:
                    cc:ad:53:d2:61:85:30:0f:19:87:be:d3:0c:c7:52:
                    84:37:ba:17:4d:72:96:3b:b5:2a:3d:9e:f0:91:ef:
                    93:d5:f8:74:c0:dc:7c:58:79:42:f2:62:e4:a4:1f:
                    db:12:ca:8c:2c:a0:72:20:59:62:5f:d3:63:c1:e1:
                    34:a0:af:cf:cd:1c:59:45:08:9e:52:df:20:14:fb:
                    6c:cf:8e:72:96:d5:f8:a9:01:7e:6a:a3:52:8e:42:
                    39:38:74:12:4a:ea:5e:8d:62:f0:7e:84:57:5d:bc:
                    eb:48:75:fb:78:91:62:bd:d4:9f:43:40:a7:d2:6e:
                    30:a5:0a:4f:d8:4c:5f:3d:93:20:14:96:f1:e6:4a:
                    e0:dd:19:0f:27:7b:45:0e:03:93:f5:65:e1:f0:87:
                    cb:d6:9b:3f:28:26:44:0f:b8:f4:0b:5a:93:40:4f:
                    43:67:a5:a6:75:7d:f4:57:54:c0:f2:9c:81:e7:d5:
                    91:f9:46:5a:fb:03:a7:fb:ad:1a:bb:e5:91:12:4e:
                    d7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:99:00:74:1D:EF:E6:23:F8:F7:F5:19:91:E8:90:67:5D:C6:7E:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/acfe93c1-0f81-3c52-bb6f-b9ce7a09e1ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.crl

            X509v3 Authority Key Identifier:
                keyid:AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3400:dc3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:67:67:37:7f:aa:2d:a8:86:0b:2a:74:12:8d:48:e6:18:41:
         04:dd:80:09:d0:d4:65:3c:f3:94:50:c1:58:1a:13:52:0c:06:
         98:60:78:db:09:d7:a2:89:f9:19:37:ac:97:b4:01:13:f2:5f:
         f2:99:1a:8f:7c:ad:58:b7:d4:4d:3c:9e:d7:b2:70:dc:e2:d2:
         49:ab:6e:1d:65:c5:3d:61:2d:5b:da:2f:f0:54:1e:1d:29:ae:
         01:c2:3c:90:ef:cf:9d:2a:ce:a2:9a:0c:28:c9:90:b9:c9:96:
         14:11:9c:ff:69:f3:01:21:4f:00:63:5a:f7:dd:b1:33:db:10:
         82:66:5a:85:08:97:85:d0:3e:3f:05:95:f6:87:2e:9a:d1:e4:
         db:f0:e0:98:0f:44:77:e1:b9:61:cb:5e:43:1b:2c:73:ed:bb:
         a1:0e:c8:49:f9:44:eb:bd:7f:fd:a3:91:f4:89:b5:62:01:e5:
         b2:52:a7:b3:7c:ea:91:65:68:4a:9f:4c:69:3e:32:92:1f:48:
         10:67:95:59:77:65:09:87:e2:b3:60:6c:22:e9:15:43:30:ca:
         b4:71:a7:aa:f6:3c:67:13:79:ff:15:bf:b3:f7:d1:ff:a8:bf:
         0e:99:b7:10:a2:c3:e7:74:40:99:9d:cd:5a:ce:7e:7b:aa:69:
         3b:07:43:1f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElqGad9WI0SRF8ArYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTRlZTMyOWYtNmE5Ni00NGNiLThjYzUtMjIyZTBmZWM4
YzNhMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk
Mjc3ZTQwMzItYTk4ZC00ODJkLWEzYTEtMmMxNmE5ZTk1ZGUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzERqQhVRfHx3+UcGKbU2mh7ah7jMj4zW9WD
TWf6O+XBagCcUyUH3Pg70TfDCfGLD3SYAZ+dlS5n7E/MrVPSYYUwDxmHvtMMx1KE
N7oXTXKWO7UqPZ7wke+T1fh0wNx8WHlC8mLkpB/bEsqMLKByIFliX9NjweE0oK/P
zRxZRQieUt8gFPtsz45yltX4qQF+aqNSjkI5OHQSSupejWLwfoRXXbzrSHX7eJFi
vdSfQ0Cn0m4wpQpP2ExfPZMgFJbx5krg3RkPJ3tFDgOT9WXh8IfL1ps/KCZED7j0
C1qTQE9DZ6WmdX30V1TA8pyB59WR+UZa+wOn+60au+WREk7XowIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHSZAHQd7+Yj+Pf1GZHokGddxn4/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNGVl
MzI5Zi02YTk2LTQ0Y2ItOGNjNS0yMjJlMGZlYzhjM2EvYWNmZTkzYzEtMGY4MS0z
YzUyLWJiNmYtYjljZTdhMDllMWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTRlZTMyOWYtNmE5Ni00NGNiLThj
YzUtMjIyZTBmZWM4YzNhLzE0ZWUzMjlmLTZhOTYtNDRjYi04Y2M1LTIyMmUwZmVj
OGMzYS5jcmwwHwYDVR0jBBgwFoAUrkgj+aHqwwoeetBYqtTqeK/B7BowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNGVlMzI5Zi02YTk2LTQ0Y2ItOGNjNS0yMjJl
MGZlYzhjM2EuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQ0AA3D
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAABnZzd/qi2ohgsqdBKNSOYYQQTdgAnQ1GU885RQwVgaE1IMBphg
eNsJ16KJ+Rk3rJe0ARPyX/KZGo98rVi31E08nteycNzi0kmrbh1lxT1hLVvaL/BU
Hh0prgHCPJDvz50qzqKaDCjJkLnJlhQRnP9p8wEhTwBjWvfdsTPbEIJmWoUIl4XQ
Pj8FlfaHLprR5Nvw4JgPRHfhuWHLXkMbLHPtu6EOyEn5ROu9f/2jkfSJtWIB5bJS
p7N86pFlaEqfTGk+MpIfSBBnlVl3ZQmH4rNgbCLpFUMwyrRxp6r2PGcTef8Vv7P3
0f+ovw6ZtxCiw+d0QJmdzVrOfnuqaTsHQx8=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:50 2025 by rpki-client on console.sobornost.net