Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/a423aacd-f3e2-3b98-8564-b312c78391e3.roa
File:                     a423aacd-f3e2-3b98-8564-b312c78391e3.roa (raw, json)
Hash identifier:          JntqQ+2tNnZ892yXR6yOlRbZb8WgK7Ufcv7Vsw69Lpk=
Subject key identifier:   54:E1:85:88:E2:D4:49:2B:B0:7E:E0:87:ED:B0:0B:50:39:33:6C:F2
Certificate issuer:       /CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
Certificate serial:       010D0C9F4328584960541AA1988A1357B8414900
Authority key identifier: DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/a423aacd-f3e2-3b98-8564-b312c78391e3.roa
Signing time:             Tue 01 Apr 2025 01:00:47 +0000
ROA not before:           Tue 01 Apr 2025 01:00:47 +0000
ROA not after:            Mon 30 Jun 2025 01:00:47 +0000
asID:                     26914
IP address blocks:        166.93.143.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:60:54:1a:a1:98:8a:13:57:b8:41:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
        Validity
            Not Before: Apr  1 01:00:47 2025 GMT
            Not After : Jun 30 01:00:47 2025 GMT
        Subject: CN=3a59957b-e02b-4e1d-9025-e260d0d5725f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:43:bd:cc:24:3f:98:51:43:84:9c:ef:c5:60:
                    e9:85:a2:b6:40:5e:fa:2a:20:b8:fd:81:e4:7d:bc:
                    0d:26:3d:11:7c:98:f9:6e:0b:96:fc:bf:ca:ce:be:
                    cc:51:02:89:f1:ca:e0:b8:1a:b4:0a:9e:b3:10:ba:
                    7e:6a:10:24:f6:b2:6f:cc:6d:1d:71:ed:8e:c8:31:
                    da:d3:3a:aa:7f:ab:db:69:5b:c4:94:33:c7:45:cf:
                    9b:1e:ef:df:54:57:08:55:b9:4d:a9:10:fb:87:0f:
                    32:2c:f4:db:b6:e2:30:67:8b:f5:22:ef:4e:ca:bc:
                    bd:cd:32:6f:0c:9a:18:67:44:93:0b:3f:f6:ea:90:
                    ef:e4:59:df:50:69:19:f9:de:63:44:c0:ef:53:ee:
                    46:fb:01:ac:47:4f:03:52:dd:fa:7f:8d:2f:07:45:
                    c8:c2:b8:51:ce:cc:a0:68:6c:53:fe:c3:52:33:c1:
                    72:c1:68:bb:bb:24:46:9f:8b:4f:00:39:45:34:6a:
                    0d:cd:aa:de:94:0a:0e:e1:c7:93:89:81:05:70:61:
                    35:79:b7:8e:88:cc:12:cb:97:23:a5:3f:38:01:87:
                    fd:da:bf:1c:32:8c:f5:fa:82:da:9c:4e:b9:c8:fa:
                    54:32:f9:a4:fd:cd:2f:a8:b8:ff:ad:7a:2f:15:14:
                    66:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E1:85:88:E2:D4:49:2B:B0:7E:E0:87:ED:B0:0B:50:39:33:6C:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/a423aacd-f3e2-3b98-8564-b312c78391e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl

            X509v3 Authority Key Identifier:
                keyid:DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.93.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:93:d8:a2:ff:54:de:34:f8:d3:f4:db:9b:ab:85:f8:76:6b:
         a2:94:57:c3:76:f9:34:16:cd:26:2e:8a:aa:b4:a8:3e:4b:aa:
         76:32:02:9b:4c:f2:0c:2e:e0:d5:1b:da:f3:22:f4:aa:43:c1:
         de:49:80:1d:e5:6e:6e:3c:1a:80:8d:b4:45:d1:5d:d9:2a:57:
         2a:8e:7a:e9:6f:13:a0:58:58:e0:8d:7a:5f:33:16:f3:e4:6d:
         61:54:c0:bb:b4:00:53:06:9d:94:98:b1:8d:77:b0:9f:1e:37:
         23:01:e3:07:b5:0b:32:27:28:46:92:2e:ef:bd:6a:31:e8:af:
         26:fb:23:5e:54:5d:61:d4:30:8d:80:fd:84:d3:ef:5e:94:56:
         7d:10:74:04:ae:dc:7c:4f:6a:67:47:ba:a2:04:02:93:bd:ea:
         c4:07:a1:76:24:36:09:ce:7a:f7:97:7f:4f:a3:5f:09:2d:35:
         ec:ec:b3:3d:8e:ef:1f:ef:ac:56:ff:0d:ef:3f:e0:57:2f:d9:
         2c:5c:09:58:a6:1c:a4:cb:0b:77:18:1b:02:b2:58:84:6f:b1:
         aa:b5:cf:46:fa:a1:23:fb:60:b7:6d:49:74:7f:a6:25:f2:8e:
         5a:73:2e:75:24:c6:91:3c:45:b1:af:83:22:bc:77:0c:6b:8e:
         28:1d:19:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:54 2025 by rpki-client on console.sobornost.net