Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/76988ed8-0896-3fce-b0d6-0f4b3b091909.roa
File:                     76988ed8-0896-3fce-b0d6-0f4b3b091909.roa (raw, json)
Hash identifier:          9juKhyChMH/YM7/N4qiAVx2n1ctPeiaDCuuONMMyCSI=
Subject key identifier:   B8:9C:CA:CC:B0:81:21:D9:C0:8F:CD:6A:93:BB:B4:60:F0:1C:63:47
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584960541AB59C39C77B336B5B70
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/76988ed8-0896-3fce-b0d6-0f4b3b091909.roa
Signing time:             Tue 01 Apr 2025 01:00:47 +0000
ROA not before:           Tue 01 Apr 2025 01:00:47 +0000
ROA not after:            Mon 30 Jun 2025 01:00:47 +0000
asID:                     212238
IP address blocks:        173.244.58.0/25 maxlen: 25

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:60:54:1a:b5:9c:39:c7:7b:33:6b:5b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Apr  1 01:00:47 2025 GMT
            Not After : Jun 30 01:00:47 2025 GMT
        Subject: CN=914bcb22-6a9b-4a4c-9626-f706abb5f96d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:27:cb:d6:72:24:b7:12:9f:15:43:77:b2:ff:
                    93:be:e5:93:fe:7e:45:04:e3:fe:36:49:d5:0f:2f:
                    45:86:a4:10:ac:1c:ca:f5:59:f5:0e:9b:3c:3c:05:
                    5f:dc:e2:97:b6:b8:fa:b8:ec:65:39:d7:b1:b9:64:
                    bd:12:db:f1:0c:6d:49:65:ff:93:ff:54:4f:27:43:
                    6d:04:c3:13:1e:0c:a2:8e:8f:d6:4e:c0:b4:a7:7a:
                    28:b7:a3:06:a1:73:1c:61:e1:6c:f5:ca:03:f1:2d:
                    08:21:b7:e7:8b:a3:35:00:2f:00:a7:e3:b4:a3:35:
                    a4:77:81:a6:1a:6a:77:b8:8b:1c:67:b8:b1:21:f2:
                    aa:71:f5:81:43:bc:36:47:6b:89:33:92:49:7f:d9:
                    c5:8f:e7:06:66:ff:51:da:7d:b6:4e:0b:1f:6d:78:
                    a7:d5:cf:2d:e4:61:d2:37:91:98:9e:8b:07:a0:40:
                    47:1d:0f:01:81:9c:08:53:c2:2b:eb:82:e0:af:79:
                    a1:1e:a6:03:16:66:42:83:44:52:25:98:ec:0a:3d:
                    e5:6f:6c:1d:3f:a5:6e:48:84:2a:fd:18:4f:ed:4b:
                    2f:dd:47:f8:b0:4f:55:09:08:ac:1e:25:2b:91:7a:
                    1b:31:f6:5e:c4:6d:1a:f1:c8:19:3a:23:fb:b3:98:
                    62:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9C:CA:CC:B0:81:21:D9:C0:8F:CD:6A:93:BB:B4:60:F0:1C:63:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/76988ed8-0896-3fce-b0d6-0f4b3b091909.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.58.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:8e:41:df:c0:ff:f7:e1:8b:f4:b3:62:5e:f5:80:cf:6b:f7:
         fc:d3:80:6b:7b:2b:d8:3f:dd:e5:07:99:8d:51:e0:59:4d:8c:
         29:1b:54:5e:5a:fc:9f:9f:ee:40:1a:f5:c5:45:6e:61:5b:f2:
         de:39:58:bd:03:b8:fc:89:a9:2b:32:e6:1a:09:f2:6b:da:4a:
         29:0d:e4:16:69:0d:a0:4d:1b:26:53:83:c9:34:b8:2a:9c:bd:
         99:30:18:9b:b1:04:95:d7:ae:f5:24:1c:fa:e9:81:bd:33:3c:
         2e:a2:d8:c1:c2:10:af:d3:08:b9:92:23:c5:29:fe:2e:1e:26:
         85:d1:78:94:91:66:d0:24:d6:7a:c9:52:a1:ab:c7:eb:61:93:
         4c:ac:57:4f:12:8a:4e:30:ac:17:23:e7:72:d6:47:b0:13:35:
         c6:70:17:65:4c:ce:45:c6:66:65:2b:af:88:13:91:8d:8e:2f:
         e0:ad:a2:fc:45:8f:b9:7f:bb:07:02:d8:2c:43:a1:d2:92:fe:
         5f:56:51:8e:c1:3f:78:ca:bc:fc:37:e9:18:c7:f7:df:e1:03:
         10:db:f4:f8:b1:9c:c6:1f:c6:f6:21:dc:e1:42:e4:19:b0:d2:
         01:f7:f9:48:a3:8b:57:90:54:6e:ff:60:c0:13:df:b0:92:b1:
         cf:8c:3f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:54 2025 by rpki-client on console.sobornost.net