Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/902fdb51-9331-3771-85b0-ea4819e1b711.roa
File:                     902fdb51-9331-3771-85b0-ea4819e1b711.roa (raw, json)
Hash identifier:          2LLdqA+ZZ/hvXHVZoFnvF7NPwyXx5NcVjz4jRrY/gvQ=
Subject key identifier:   88:5B:23:2A:35:28:6A:BD:5B:DB:D7:4C:BF:ED:9C:9F:CB:37:63:20
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C58165354AEF13742755DF38
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/902fdb51-9331-3771-85b0-ea4819e1b711.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.63.66.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:65:35:4a:ef:13:74:27:55:df:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=54f58b66-67dd-4912-9a3a-7e21f7adb553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7f:44:e0:0a:00:c6:33:7f:5a:a4:f9:b1:08:
                    6c:75:6f:10:9e:e5:a2:3d:fd:89:7e:c3:e9:27:29:
                    2a:9b:23:83:cc:81:a5:1b:88:09:2e:66:24:ce:9a:
                    e6:34:03:fa:59:6a:a6:3f:21:e4:54:9e:42:5a:e3:
                    82:e8:c9:67:94:57:4d:91:4d:43:5e:c8:f4:1b:48:
                    37:09:88:51:df:88:d3:4d:a3:b2:82:fb:fe:d9:e1:
                    0e:53:47:cd:b2:5a:05:a8:30:d5:e0:1a:5b:5e:73:
                    0c:9d:77:6c:2c:79:ce:39:ac:d1:7a:26:b8:c0:73:
                    69:28:09:8b:78:a6:ac:62:5a:cd:aa:a2:b2:e7:c7:
                    cc:07:a6:8d:50:47:cd:00:db:a1:2f:bf:9d:d0:82:
                    73:47:24:f1:65:e3:ec:7d:94:60:7b:ac:4c:3d:43:
                    94:89:6b:f3:df:3d:ae:f9:19:71:c4:01:12:f4:ea:
                    de:c9:04:09:ef:ed:04:08:72:76:0c:0f:f0:77:b7:
                    f6:83:31:a6:21:7c:9f:41:4e:36:99:bd:8e:ba:5e:
                    f1:61:f7:df:d3:56:5d:2a:92:f9:51:50:be:32:fa:
                    33:95:f4:3a:4a:77:42:37:a2:28:df:df:fa:6f:43:
                    ff:f2:5e:71:89:6f:9b:48:29:5a:49:c3:98:0a:65:
                    ec:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:5B:23:2A:35:28:6A:BD:5B:DB:D7:4C:BF:ED:9C:9F:CB:37:63:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/902fdb51-9331-3771-85b0-ea4819e1b711.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:1a:25:00:cb:11:df:7d:ca:8f:46:8d:bb:bd:44:f3:ca:af:
         26:b1:0c:3f:16:df:e3:ee:3c:f6:20:95:bc:c6:36:d9:0b:3c:
         ed:54:05:00:3a:92:3d:79:f4:1f:d7:be:f0:1d:a5:8f:e8:7b:
         d2:72:25:f6:ab:98:53:b3:c4:dd:fc:66:6b:e2:7c:51:19:1a:
         34:b3:08:37:e0:0b:49:b6:b2:6a:c4:fe:20:1d:7a:47:76:25:
         6d:85:eb:40:25:4e:47:38:d9:dc:46:4c:e1:b1:6c:a5:bd:a0:
         2b:f8:7f:d5:1c:ea:2c:68:43:c2:9e:3d:41:97:ba:6b:e8:44:
         43:82:c9:d2:b9:98:43:af:a7:a2:b3:3f:38:5f:73:26:47:0b:
         64:a1:9d:70:c0:ef:38:07:1a:9e:b4:31:55:73:7c:4a:c7:6c:
         9d:c1:ed:d6:9f:13:67:ca:b8:99:38:c9:df:1c:12:78:74:d7:
         5f:7d:a6:3a:51:48:f0:ec:58:d2:ad:b5:30:13:97:fc:51:3b:
         a9:20:6f:00:94:97:66:fe:21:78:87:d7:f2:7b:b7:26:1b:03:
         98:ca:4b:04:78:49:3f:25:73:b3:1e:0f:c0:55:6c:f2:20:4c:
         5a:5c:f9:20:b1:01:f8:c5:2f:4f:3a:61:63:6b:d3:c0:8f:a2:
         ca:03:4a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:53 2025 by rpki-client on console.sobornost.net