Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0a56c444-c0a3-4b03-975e-06645fc31115/38149da3-b996-3207-ae47-a2ea9f87f0be.roa
File:                     38149da3-b996-3207-ae47-a2ea9f87f0be.roa (raw, json)
Hash identifier:          lptIFN4Z/VajsvgVR8UDaKSbFccnWzqbY0Uu2rqodog=
Subject key identifier:   90:05:8A:F9:B8:28:41:A3:F5:2F:D6:C2:77:D2:2A:B0:04:6F:03:EB
Certificate issuer:       /CN=0a56c444-c0a3-4b03-975e-06645fc31115
Certificate serial:       010D0C9F43285849752CBFD450C831EFFF6CA500
Authority key identifier: FF:B3:B6:11:EC:3F:7D:80:F3:08:5F:00:69:01:E4:7A:63:FD:D9:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0a56c444-c0a3-4b03-975e-06645fc31115.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0a56c444-c0a3-4b03-975e-06645fc31115/38149da3-b996-3207-ae47-a2ea9f87f0be.roa
Signing time:             Tue 08 Apr 2025 12:13:34 +0000
ROA not before:           Tue 08 Apr 2025 12:13:34 +0000
ROA not after:            Mon 07 Jul 2025 12:13:34 +0000
asID:                     63023
IP address blocks:        23.137.12.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:2c:bf:d4:50:c8:31:ef:ff:6c:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a56c444-c0a3-4b03-975e-06645fc31115
        Validity
            Not Before: Apr  8 12:13:34 2025 GMT
            Not After : Jul  7 12:13:34 2025 GMT
        Subject: CN=4e4694cf-cda5-4e7d-b3a9-07ac15637322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b4:7a:6b:8d:70:4f:cc:ac:a9:f2:72:e0:10:
                    75:62:65:73:45:c3:48:eb:09:e0:4b:e1:8a:63:80:
                    7e:29:68:40:9d:49:68:0e:12:8b:83:a1:8c:3e:e5:
                    bf:f9:23:85:ec:07:a9:8e:2a:b7:d5:fc:f7:ac:be:
                    9f:34:9b:c1:0d:a1:dc:de:a3:e0:9e:24:7f:c1:da:
                    3e:5d:4e:5c:28:27:1c:27:33:ca:01:c5:e5:2b:0c:
                    9d:e8:a8:11:62:f9:64:04:89:8f:cb:b3:b2:b2:72:
                    aa:bb:eb:16:1d:4d:29:f2:33:50:c2:d7:42:a0:fe:
                    42:c1:70:22:9a:57:e1:a3:c6:54:6c:4a:d5:f8:35:
                    23:c7:ba:ff:67:69:68:9e:ab:e4:19:2a:4f:48:86:
                    d5:af:5c:f3:bd:31:3d:ca:ff:9c:8a:7c:8e:3d:78:
                    1f:40:c4:19:3b:9d:3c:12:f7:cd:db:02:fd:f6:83:
                    37:e9:96:92:e1:2d:b2:06:d3:a0:71:79:65:dc:79:
                    29:20:45:fb:0c:c5:a8:90:0a:3c:07:b1:4b:a3:8b:
                    7e:7d:81:5a:16:6c:33:72:16:e7:87:a5:99:ad:e1:
                    bf:3d:30:59:e8:c5:84:26:f5:23:2a:81:a4:54:9c:
                    73:6d:7f:fd:1a:b9:1c:64:72:33:62:e3:8a:f3:38:
                    e2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:05:8A:F9:B8:28:41:A3:F5:2F:D6:C2:77:D2:2A:B0:04:6F:03:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0a56c444-c0a3-4b03-975e-06645fc31115/38149da3-b996-3207-ae47-a2ea9f87f0be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0a56c444-c0a3-4b03-975e-06645fc31115/0a56c444-c0a3-4b03-975e-06645fc31115.crl

            X509v3 Authority Key Identifier:
                keyid:FF:B3:B6:11:EC:3F:7D:80:F3:08:5F:00:69:01:E4:7A:63:FD:D9:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0a56c444-c0a3-4b03-975e-06645fc31115.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:f3:51:6c:5f:12:c1:17:7f:94:3c:f0:2e:93:0e:25:ea:06:
         8a:d2:53:31:d0:db:78:10:0f:1b:8b:17:b3:ce:66:9f:6c:cf:
         66:bc:5f:57:7d:3d:08:78:27:95:70:4f:b9:be:c0:89:87:38:
         50:19:cd:65:45:e2:f9:15:27:46:4a:f9:f3:ec:7b:8f:86:b3:
         6e:32:a2:7b:85:4c:d2:36:23:90:d3:f7:76:3f:81:c3:97:45:
         66:0e:ec:2d:4d:9c:b5:52:ee:46:37:78:74:ff:50:3a:45:c6:
         28:f8:92:92:c4:16:97:85:57:69:36:74:0c:26:96:f9:0d:5d:
         aa:67:ac:59:73:8e:06:94:1d:48:d8:5b:8c:8d:6e:a6:da:8f:
         c6:b8:d6:77:4c:d5:52:c8:e7:0a:5b:ed:55:f3:03:49:ab:41:
         ea:9a:e7:15:bd:26:67:65:15:01:15:82:c4:44:e8:68:e2:f7:
         05:db:11:68:5e:0e:30:87:e6:a8:6a:a8:59:4b:f0:64:f0:c2:
         fb:02:73:7c:f6:34:b8:1f:09:1c:9c:86:8d:ac:79:06:f6:cc:
         09:b0:b2:5e:5e:94:e9:21:1a:5e:a5:bc:8c:87:b8:3f:8a:db:
         ce:6e:d8:53:9f:f0:20:29:15:96:4a:a1:04:75:1c:23:db:1c:
         9d:8f:fe:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl1LL/UUMgx7/9spQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE1NmM0NDQtYzBhMy00YjAzLTk3NWUtMDY2NDVmYzMx
MTE1MB4XDTI1MDQwODEyMTMzNFoXDTI1MDcwNzEyMTMzNFowLzEtMCsGA1UEAxMk
NGU0Njk0Y2YtY2RhNS00ZTdkLWIzYTktMDdhYzE1NjM3MzIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbR6a41wT8ysqfJy4BB1YmVzRcNI6wngS+GK
Y4B+KWhAnUloDhKLg6GMPuW/+SOF7Aepjiq31fz3rL6fNJvBDaHc3qPgniR/wdo+
XU5cKCccJzPKAcXlKwyd6KgRYvlkBImPy7OysnKqu+sWHU0p8jNQwtdCoP5CwXAi
mlfho8ZUbErV+DUjx7r/Z2lonqvkGSpPSIbVr1zzvTE9yv+cinyOPXgfQMQZO508
EvfN2wL99oM36ZaS4S2yBtOgcXll3HkpIEX7DMWokAo8B7FLo4t+fYFaFmwzchbn
h6WZreG/PTBZ6MWEJvUjKoGkVJxzbX/9GrkcZHIzYuOK8zji9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJAFivm4KEGj9S/WwnfSKrAEbwPrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wYTU2
YzQ0NC1jMGEzLTRiMDMtOTc1ZS0wNjY0NWZjMzExMTUvMzgxNDlkYTMtYjk5Ni0z
MjA3LWFlNDctYTJlYTlmODdmMGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMGE1NmM0NDQtYzBhMy00YjAzLTk3
NWUtMDY2NDVmYzMxMTE1LzBhNTZjNDQ0LWMwYTMtNGIwMy05NzVlLTA2NjQ1ZmMz
MTExNS5jcmwwHwYDVR0jBBgwFoAU/7O2Eew/fYDzCF8AaQHkemP92V0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8wYTU2YzQ0NC1jMGEzLTRiMDMtOTc1ZS0wNjY0
NWZjMzExMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4kMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFHzUWxfEsEXf5Q88C6TDiXqBorSUzHQ23gQDxuLF7POZp9sz2a8X1d9
PQh4J5VwT7m+wImHOFAZzWVF4vkVJ0ZK+fPse4+Gs24yonuFTNI2I5DT93Y/gcOX
RWYO7C1NnLVS7kY3eHT/UDpFxij4kpLEFpeFV2k2dAwmlvkNXapnrFlzjgaUHUjY
W4yNbqbaj8a41ndM1VLI5wpb7VXzA0mrQeqa5xW9JmdlFQEVgsRE6Gji9wXbEWhe
DjCH5qhqqFlL8GTwwvsCc3z2NLgfCRycho2seQb2zAmwsl5elOkhGl6lvIyHuD+K
285u2FOf8CApFZZKoQR1HCPbHJ2P/is=
-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:47 2025 by rpki-client on console.sobornost.net