Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/75f33e0c-6e06-3d4b-b8eb-e9250a69028e.roa
File:                     75f33e0c-6e06-3d4b-b8eb-e9250a69028e.roa (raw, json)
Hash identifier:          kTqPO+J6aXnIY4Sammbnj8GIN5EycDZgtBQMmEjpXoQ=
Subject key identifier:   4D:68:7A:D5:E6:6D:D3:CD:B8:BD:07:51:FC:D5:AC:0E:59:6F:3F:49
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C58107733DC7D7697772B400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/75f33e0c-6e06-3d4b-b8eb-e9250a69028e.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        70.41.112.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:07:73:3d:c7:d7:69:77:72:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=e654b01f-96fe-492e-b36d-98f9215b54bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e7:0a:4f:88:17:ee:25:7a:d6:f0:bd:e6:45:
                    3a:07:95:4d:52:ad:b4:32:5a:51:27:ca:5f:76:3c:
                    8c:75:9a:b8:71:29:45:51:21:78:cd:06:05:b7:aa:
                    8a:49:f4:4a:c8:33:90:74:69:57:7e:09:01:94:b8:
                    d0:f0:dc:32:84:03:46:27:d9:c2:5a:ed:44:01:ef:
                    b8:81:b9:00:1f:35:5d:67:24:44:94:d3:3f:37:b3:
                    06:33:59:f2:a1:57:10:a7:5d:0d:19:1d:f2:d2:18:
                    07:5e:13:d0:29:14:14:a2:71:26:bf:b5:0d:ec:db:
                    d1:00:5b:6b:d9:46:27:33:e0:a2:4b:e2:0e:3a:ec:
                    89:a7:2e:a0:b2:ef:c9:c8:62:38:62:d3:46:60:e7:
                    3c:f0:28:4d:f8:b3:66:9f:44:ce:f6:0c:d8:17:39:
                    02:cc:d9:1f:8f:03:7f:b5:bb:82:c3:18:89:76:1f:
                    f0:a7:00:04:4d:4a:9b:40:06:52:c8:48:19:b7:5f:
                    09:80:e6:e5:c8:18:87:76:5c:95:48:c8:3e:d9:a0:
                    37:ed:f9:4e:c0:c2:c1:dd:8f:79:7e:47:da:5d:14:
                    41:02:80:5a:c0:23:a5:7b:bf:c3:18:4c:68:95:17:
                    ce:fe:41:d4:d5:e3:61:ce:b6:8e:ed:fa:8a:02:b1:
                    a0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:68:7A:D5:E6:6D:D3:CD:B8:BD:07:51:FC:D5:AC:0E:59:6F:3F:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/75f33e0c-6e06-3d4b-b8eb-e9250a69028e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:26:71:cf:ec:38:6b:fd:4f:f8:0f:0b:37:f1:26:97:48:ba:
         9b:49:5c:86:6e:41:4f:93:f0:9d:9f:61:50:aa:29:ad:99:ec:
         68:ef:83:bf:2e:e9:ed:a9:c1:e3:fd:9f:f8:ed:60:9a:dc:79:
         65:35:f1:ab:2a:e4:aa:35:8b:6f:79:9b:e5:2c:4c:6c:7b:24:
         ce:ac:5d:c0:c3:70:87:07:20:a7:69:b7:f0:db:16:72:50:fe:
         b1:7d:21:06:e4:65:18:0b:70:ff:d4:38:5e:93:8f:ea:b6:29:
         18:72:2a:7a:23:a6:93:3e:e0:ab:98:4f:39:7a:f8:27:fa:8b:
         83:5b:94:e4:42:80:31:93:a3:fa:95:31:97:3d:91:fc:d0:bd:
         fc:fb:54:75:3d:79:db:53:c3:46:dd:cd:a0:81:a1:ba:b5:8f:
         6a:b6:2c:43:63:ee:5f:cd:a6:51:be:4b:56:8b:7c:6f:90:1e:
         2e:a0:fc:24:fb:58:49:ff:b7:23:b2:0a:3f:48:97:65:84:76:
         60:44:d6:e3:85:b1:33:a7:9d:a1:b3:f6:ac:37:31:a5:ee:68:
         d7:b7:73:c5:44:41:89:f6:47:67:61:3c:ca:4e:f6:9f:d6:da:
         52:e2:2b:7a:42:3c:80:5c:36:f4:c0:96:ce:55:82:36:b3:62:
         4f:d9:e3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:46 2025 by rpki-client on console.sobornost.net