Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef/69d41eb5-ba8e-3a7d-8c7c-019c2a156f54.roa
File:                     69d41eb5-ba8e-3a7d-8c7c-019c2a156f54.roa (raw, json)
Hash identifier:          Bc+8vMBAbh4DAEb2UibuyvJyqtt4F7+xd8PHeCiKRM0=
Subject key identifier:   DA:B1:93:04:E5:AD:80:16:11:89:64:80:DC:29:90:C9:37:9A:E7:BD
Certificate issuer:       /CN=cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef
Certificate serial:       010D0C9F43285849674EECD251ABF23BD798E100
Authority key identifier: A2:87:E7:BA:DC:3B:3A:CD:21:31:DD:4C:39:D4:8D:CD:FE:A6:3A:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef/69d41eb5-ba8e-3a7d-8c7c-019c2a156f54.roa
Signing time:             Thu 03 Apr 2025 13:01:02 +0000
ROA not before:           Thu 03 Apr 2025 13:01:02 +0000
ROA not after:            Wed 02 Jul 2025 13:01:02 +0000
asID:                     14396
IP address blocks:        216.168.183.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:67:4e:ec:d2:51:ab:f2:3b:d7:98:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef
        Validity
            Not Before: Apr  3 13:01:02 2025 GMT
            Not After : Jul  2 13:01:02 2025 GMT
        Subject: CN=60c9d3a9-aa4e-412a-a2f4-cbcd6acca424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:eb:42:c4:c1:ab:0e:e2:d5:c9:0e:95:bb:e6:
                    40:97:bc:8e:83:e4:e4:bb:59:38:e8:5c:91:df:d1:
                    8b:54:9c:6f:37:37:3d:bf:71:bd:03:d6:f1:0a:c5:
                    a5:41:0c:c6:51:a8:38:6a:36:14:67:74:b4:72:61:
                    f1:88:1d:fa:2b:57:ff:f5:06:69:4c:2b:0f:14:cd:
                    d3:b3:db:3b:d9:b8:2e:26:a5:9e:00:15:ae:35:0b:
                    26:e4:c5:e8:7c:f9:54:09:53:19:25:e4:60:71:b5:
                    0b:65:58:70:04:77:99:2d:60:9e:63:f5:fb:12:8c:
                    4a:d1:c1:63:98:6e:5d:3c:09:d6:c4:12:3b:3d:1e:
                    6d:a2:63:2a:8b:f1:3d:1b:62:25:32:2a:aa:c7:c6:
                    fa:a4:98:5e:35:da:bd:7a:00:67:eb:de:89:6c:11:
                    57:5f:2a:ad:02:6b:b5:30:8d:85:3b:60:eb:6b:75:
                    ee:6f:04:db:a5:f7:a2:01:8e:63:5a:58:95:bc:4c:
                    82:df:72:52:8e:51:b7:f2:8b:c5:c0:3b:dd:e9:e9:
                    f5:1c:2e:f7:90:c6:9b:96:d8:c4:53:33:2e:60:62:
                    1f:70:db:40:2d:4e:1f:c3:e0:bf:24:7f:6e:dd:3f:
                    c2:1c:dd:66:47:7e:cc:17:67:0f:48:df:7f:41:45:
                    57:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B1:93:04:E5:AD:80:16:11:89:64:80:DC:29:90:C9:37:9A:E7:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef/69d41eb5-ba8e-3a7d-8c7c-019c2a156f54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.crl

            X509v3 Authority Key Identifier:
                keyid:A2:87:E7:BA:DC:3B:3A:CD:21:31:DD:4C:39:D4:8D:CD:FE:A6:3A:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:84:dd:47:6c:09:d5:77:79:9a:ce:c8:d1:08:2e:66:a1:c9:
         00:84:79:06:e9:0f:19:76:3c:70:58:a2:47:e2:d6:c4:bb:9c:
         e9:0b:a9:bf:f4:78:75:e8:3b:22:fe:71:ff:14:14:98:c6:0e:
         88:1e:6c:3d:56:81:7b:3e:87:ae:21:65:ed:58:7b:32:b7:ec:
         52:90:d1:ac:a8:0a:d6:34:29:55:ba:a4:20:c9:8a:bf:6a:36:
         af:6b:c1:9d:c4:2f:7d:67:99:1b:78:ff:c2:a5:b0:56:ef:09:
         95:9c:2c:ee:8e:7f:e3:a8:88:89:a8:cb:61:fe:e2:25:f2:b0:
         e7:ec:6d:a6:e8:d1:aa:fe:ac:89:86:41:71:b7:2f:af:f9:5d:
         12:b0:b2:41:86:5d:dd:db:11:f6:e0:4c:70:6f:d2:1e:84:f7:
         41:3c:e0:cd:23:02:2b:85:27:bd:45:2c:94:38:3f:44:80:ee:
         94:61:a5:6a:00:eb:e0:3d:fe:fb:12:31:04:af:a6:10:6a:f5:
         1d:16:e5:5c:e3:36:57:d0:8e:e0:6c:8a:55:ac:48:fa:3f:f6:
         9f:37:c7:17:00:13:b2:04:85:2f:2f:06:99:40:ce:6f:d7:bc:
         57:75:c4:e8:cb:f7:e1:bd:81:78:3f:92:aa:f6:83:54:7d:d2:
         15:2d:88:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:38 2025 by rpki-client on console.sobornost.net