Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76b18b75-4c19-3ae8-a06c-cde19cfd6fa3.roa
File:                     76b18b75-4c19-3ae8-a06c-cde19cfd6fa3.roa (raw, json)
Hash identifier:          EuAFHRhvDrWFd+j+LFpq4l2qTuAhy9BIO9HKD0AvAIM=
Subject key identifier:   C3:9F:04:02:CF:F3:98:6F:19:CE:F3:F4:B0:7C:9D:21:FA:8B:AD:EA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581478594B52BF4D6691100
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76b18b75-4c19-3ae8-a06c-cde19cfd6fa3.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        172.242.198.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:47:85:94:b5:2b:f4:d6:69:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=84fda4b3-6789-4590-95a1-b7fa92cf9eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:78:b5:ab:8f:92:8c:fa:39:ee:ae:5d:35:43:
                    25:f1:a1:4f:80:7f:00:52:ff:b9:b9:45:41:22:33:
                    da:a6:90:21:e3:0c:86:91:42:38:52:5e:bf:d9:a0:
                    a2:e2:24:a9:e3:ff:e0:f7:75:a3:89:60:f8:a4:67:
                    19:ac:da:8c:5b:18:83:e2:20:cc:db:79:87:ba:6e:
                    e3:f4:ed:f3:5e:0c:c2:68:35:de:ae:47:bb:38:2b:
                    3a:45:70:2d:ac:2c:2b:61:8a:92:7d:bf:30:7c:ef:
                    14:10:d5:65:73:88:3a:f0:aa:c6:a8:d3:d2:27:75:
                    be:a6:89:51:c9:ea:ec:34:2c:1b:f5:6c:fc:f0:79:
                    22:a0:1a:31:8f:52:0f:4b:d9:72:b4:f6:b1:d7:6d:
                    ab:d0:fe:ca:7c:6e:f3:4f:84:99:ac:cb:3a:07:cf:
                    c6:f7:c5:1a:61:19:1c:e2:5c:42:4a:b8:82:7c:79:
                    11:97:9e:77:cf:87:b8:53:71:ce:48:b3:b6:8f:63:
                    a5:0b:07:20:81:bc:60:3f:f6:b0:99:5a:39:0e:ac:
                    f2:cc:5e:e5:d0:99:30:aa:a2:76:07:3e:68:57:eb:
                    aa:11:ce:35:39:cf:0b:3a:54:d4:0f:8b:81:3b:f7:
                    d5:f7:ea:84:c8:91:49:6d:03:54:a0:b7:38:a2:70:
                    aa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9F:04:02:CF:F3:98:6F:19:CE:F3:F4:B0:7C:9D:21:FA:8B:AD:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76b18b75-4c19-3ae8-a06c-cde19cfd6fa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:05:f4:8d:11:09:ae:d1:90:8d:43:c1:42:fc:8e:88:36:16:
         3f:3b:dd:77:d6:b8:74:21:c6:27:f1:10:47:89:14:91:4b:de:
         84:43:ba:b4:be:32:49:31:3a:b3:75:88:e5:f7:e7:19:9c:eb:
         07:32:ad:d0:2e:51:d0:84:69:71:e5:fa:ae:9a:7d:4c:97:ed:
         8f:5c:77:0f:3d:32:39:77:d7:42:24:c8:5e:22:0a:4b:e7:36:
         50:12:5c:cd:22:4d:13:d1:79:3b:e3:61:73:4a:9e:ad:99:19:
         14:a0:f4:0f:3b:e3:1a:55:6a:af:07:b8:f6:90:20:93:14:79:
         82:b5:ff:02:50:dd:e0:8e:e3:75:10:08:be:99:dc:84:45:db:
         8a:05:ea:95:5e:32:2a:23:ff:d1:ff:0a:2f:9b:53:be:cc:5e:
         df:c6:e7:ff:19:be:03:f3:c0:31:5f:3f:d9:cf:5e:4e:8e:06:
         85:50:13:f9:64:9b:9e:7c:98:35:86:df:c5:7e:29:4d:60:11:
         f8:98:bb:09:d4:b5:fc:9d:35:3a:28:80:a0:5c:86:4e:3d:0b:
         98:0d:37:fe:28:aa:18:ed:7d:72:2c:09:5c:d6:02:2d:c1:a4:
         0a:d7:d0:2e:06:3f:9f:c5:32:6b:86:67:f8:cf:c3:57:b0:cb:
         5c:3d:5e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:46 2025 by rpki-client on console.sobornost.net