Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/43557251-f42e-3068-aefb-7f3c8c2e4165.roa
File:                     43557251-f42e-3068-aefb-7f3c8c2e4165.roa (raw, json)
Hash identifier:          OMYZCV571ZMmXADu2wHsI+gUY3078M3jfGquKl8+sDs=
Subject key identifier:   EA:CF:67:71:7B:BA:95:CC:0B:1E:55:D9:4B:53:0D:DA:1F:28:91:4B
Certificate issuer:       /CN=0858b07f-775e-4c05-ae48-d43b5d938b9b
Certificate serial:       010D0C9F432858497F09A52FE7F797ADCA46FF40
Authority key identifier: CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/43557251-f42e-3068-aefb-7f3c8c2e4165.roa
Signing time:             Sat 12 Apr 2025 01:00:48 +0000
ROA not before:           Sat 12 Apr 2025 01:00:48 +0000
ROA not after:            Fri 11 Jul 2025 01:00:48 +0000
asID:                     8075
IP address blocks:        165.125.49.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7f:09:a5:2f:e7:f7:97:ad:ca:46:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0858b07f-775e-4c05-ae48-d43b5d938b9b
        Validity
            Not Before: Apr 12 01:00:48 2025 GMT
            Not After : Jul 11 01:00:48 2025 GMT
        Subject: CN=db7eb839-1cac-4754-9f78-740c9a64948c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3e:61:30:51:af:f2:e4:da:e8:5c:3c:8e:11:
                    c3:d8:cc:96:b4:12:d1:4a:e4:97:73:41:a3:d9:54:
                    e3:99:74:96:c5:15:37:cb:04:c0:3d:73:f7:c1:9d:
                    64:af:e5:84:91:95:95:c8:6e:b7:20:52:69:b2:cf:
                    97:47:1a:4a:83:ef:85:7a:7a:3e:cd:6e:38:93:9b:
                    96:7e:a1:11:dc:d4:53:95:8e:9e:53:dc:e9:f2:e1:
                    14:e3:3d:cc:f7:7c:3d:70:43:98:2e:53:ff:07:f2:
                    32:cf:51:44:8d:57:35:80:af:06:a2:d0:fc:cb:52:
                    9e:b7:be:d8:45:b7:35:75:40:c2:45:db:ad:cd:78:
                    f1:78:2c:32:e0:ae:09:2f:f4:9f:52:ec:36:61:b8:
                    88:01:aa:ba:2d:d0:ba:c2:a7:7f:22:0f:ff:96:85:
                    f0:3b:d9:24:0e:9b:57:06:91:02:57:08:1c:92:48:
                    ad:27:01:8e:8d:af:c6:76:ef:7e:97:c3:06:e4:9d:
                    a2:f4:dc:4f:68:9c:d1:af:85:f3:16:7e:0d:14:91:
                    10:d5:46:97:d6:31:28:ea:08:59:1d:65:d3:1f:70:
                    de:f3:d9:99:24:79:35:39:d8:7a:9b:d4:6c:79:30:
                    62:32:f7:b9:ff:dd:92:1a:01:8f:05:71:02:9a:69:
                    24:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CF:67:71:7B:BA:95:CC:0B:1E:55:D9:4B:53:0D:DA:1F:28:91:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/43557251-f42e-3068-aefb-7f3c8c2e4165.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.crl

            X509v3 Authority Key Identifier:
                keyid:CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.125.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:07:bb:92:54:43:34:a9:b5:d9:c5:e6:90:74:41:4b:98:e0:
         ae:a0:58:56:6e:38:74:7b:0d:64:3b:b1:0f:a0:e8:19:d8:89:
         91:d3:d0:5c:a2:02:d8:41:eb:21:c2:6a:8e:ca:31:c6:8a:34:
         43:5a:2f:8b:10:b9:3a:0a:59:d0:bc:cf:cb:0b:c7:0c:09:cd:
         99:36:34:90:83:71:47:e7:79:28:ca:63:61:e1:f2:93:13:9a:
         54:cd:4c:db:a3:0d:32:28:6d:b8:9c:43:28:30:4d:ab:55:af:
         24:40:fd:47:60:3a:5b:50:e3:18:99:7c:54:e2:fe:ea:d0:55:
         51:70:a7:62:5c:18:f3:dd:c9:b4:1f:db:ae:7a:30:17:95:af:
         3c:f7:ab:5c:a6:37:d7:58:f2:5f:53:59:9e:22:21:bf:7e:a8:
         c1:ef:75:3f:70:8c:29:1b:90:52:10:f5:6a:57:b0:96:79:d3:
         10:3e:56:61:71:e3:6c:3c:be:3b:39:a8:e1:ce:03:4c:5b:bb:
         70:f0:ce:2e:0e:21:ca:2b:82:16:a4:8a:76:0c:ae:89:4a:ff:
         52:db:25:ed:26:1f:98:d4:8f:cd:42:3c:2d:c2:c2:c3:25:63:
         ec:38:9b:2e:17:c2:96:04:8c:bb:26:49:0d:18:0f:0f:8f:df:
         4d:0b:a6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 10:55:00 2025 by rpki-client on console.sobornost.net