Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/35febe00-9c57-373a-948b-0f3b0e170f27.roa
File:                     35febe00-9c57-373a-948b-0f3b0e170f27.roa (raw, json)
Hash identifier:          u24ptrANvi8vKjqgmIpDUPPLohcnVFPLIAE7u/HBbRE=
Subject key identifier:   6C:22:2B:18:26:FB:5A:41:4A:86:A3:5D:D2:62:CC:26:05:2D:BB:1E
Certificate issuer:       /CN=5d7f827b-f59c-40f4-83a5-cd0c4b16f42e
Certificate serial:       010D0C9F4328584981D45807DE5F4307914B3F00
Authority key identifier: D3:F5:EC:E0:5E:22:D9:CF:D6:34:82:88:FC:38:89:5F:E6:57:C2:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/35febe00-9c57-373a-948b-0f3b0e170f27.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     397984
IP address blocks:        198.184.156.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:58:07:de:5f:43:07:91:4b:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d7f827b-f59c-40f4-83a5-cd0c4b16f42e
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=086c74da-aa91-42d8-a12a-6c10a9f58102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0e:62:bb:76:c3:5a:2e:6b:4c:29:83:3e:0f:
                    61:f4:03:8d:d6:02:9a:98:02:ae:c7:b9:fb:36:f1:
                    e5:40:36:10:d4:3e:78:ce:c2:80:f8:b2:6b:5f:44:
                    b2:c2:3f:44:45:81:b1:bd:19:10:45:5c:d7:67:9f:
                    35:c1:c9:bf:cf:f8:a3:53:2f:bb:36:b7:ad:8f:af:
                    0c:f1:52:fb:68:9f:ee:04:69:20:5c:5c:05:fb:b5:
                    a6:a5:2b:b0:c8:09:c1:80:70:4d:0e:e1:0a:9d:c4:
                    38:ae:03:2b:b5:2b:1d:dc:89:f3:62:72:e7:6e:4b:
                    87:21:ee:b2:a6:4d:2e:2f:40:b1:9f:a0:f2:57:9b:
                    29:cb:fe:4a:0a:65:e4:18:e2:c5:8a:c1:ed:33:b8:
                    de:b4:0d:3a:b3:72:8b:d9:24:2d:97:b6:80:ce:95:
                    51:00:72:7c:ca:a8:f0:1e:92:87:c1:8c:07:5b:35:
                    a6:fc:b1:39:ea:63:fb:be:e4:e3:2d:46:6b:f4:63:
                    b9:40:77:52:e1:1d:11:ca:2b:4b:c5:e6:25:52:f6:
                    44:4c:e9:8a:ba:d0:d5:68:c8:bc:73:e1:e3:05:fa:
                    02:86:42:a4:53:6b:6f:86:e6:d7:40:fc:e6:1a:ef:
                    a9:53:d0:d9:54:e2:af:f8:38:6f:b2:14:31:23:b5:
                    4f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:22:2B:18:26:FB:5A:41:4A:86:A3:5D:D2:62:CC:26:05:2D:BB:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/35febe00-9c57-373a-948b-0f3b0e170f27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.crl

            X509v3 Authority Key Identifier:
                keyid:D3:F5:EC:E0:5E:22:D9:CF:D6:34:82:88:FC:38:89:5F:E6:57:C2:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.184.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:f7:47:ff:4d:1f:23:9f:42:d7:c5:e8:63:08:d0:4b:99:dc:
         49:c9:fb:f6:82:60:1f:75:38:82:b1:6c:ca:df:68:94:7e:b5:
         8e:18:16:71:de:3e:e6:0c:c5:1e:a8:00:8e:ed:a3:52:8f:5f:
         2a:66:3f:f8:0e:ed:8a:9c:8c:8d:39:2c:91:24:6b:f6:da:41:
         a0:2e:9e:8f:bd:d5:7a:61:3d:26:ea:8d:80:07:27:ba:4f:84:
         82:74:55:b3:f0:19:ac:43:c4:f5:fb:1a:a3:88:fa:7d:9c:f9:
         02:e2:dc:cd:8a:74:0b:22:87:c1:aa:b7:be:7c:a6:e8:69:3c:
         a4:39:58:7b:13:fe:dc:13:8d:92:fc:73:bf:0e:66:d1:f1:5d:
         fa:02:d7:29:73:f9:12:84:3f:a5:e9:0f:cf:27:ab:19:db:8f:
         b9:0c:f1:74:52:22:e9:99:ae:9f:7d:7d:e9:91:78:bb:93:d5:
         9f:77:b7:40:d6:ef:6b:4d:46:35:b9:92:8d:de:09:ad:f2:34:
         5d:f6:fe:fb:54:58:63:06:1d:1b:fd:19:02:13:ee:55:92:57:
         fc:43:26:e9:41:33:11:3e:26:ef:d7:87:7a:e8:79:30:f8:37:
         db:3f:77:8f:02:74:85:00:08:ca:44:d3:d9:d8:36:e0:ab:6e:
         3a:e4:a2:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmB1FgH3l9DB5FLPwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ3ZjgyN2ItZjU5Yy00MGY0LTgzYTUtY2QwYzRiMTZm
NDJlMB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk
MDg2Yzc0ZGEtYWE5MS00MmQ4LWExMmEtNmMxMGE5ZjU4MTAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiA5iu3bDWi5rTCmDPg9h9AON1gKamAKux7n7
NvHlQDYQ1D54zsKA+LJrX0Sywj9ERYGxvRkQRVzXZ581wcm/z/ijUy+7Nretj68M
8VL7aJ/uBGkgXFwF+7WmpSuwyAnBgHBNDuEKncQ4rgMrtSsd3InzYnLnbkuHIe6y
pk0uL0Cxn6DyV5spy/5KCmXkGOLFisHtM7jetA06s3KL2SQtl7aAzpVRAHJ8yqjw
HpKHwYwHWzWm/LE56mP7vuTjLUZr9GO5QHdS4R0RyitLxeYlUvZETOmKutDVaMi8
c+HjBfoChkKkU2tvhubXQPzmGu+pU9DZVOKv+DhvshQxI7VPvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGwiKxgm+1pBSoajXdJizCYFLbseMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81ZDdm
ODI3Yi1mNTljLTQwZjQtODNhNS1jZDBjNGIxNmY0MmUvMzVmZWJlMDAtOWM1Ny0z
NzNhLTk0OGItMGYzYjBlMTcwZjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWQ3ZjgyN2ItZjU5Yy00MGY0LTgz
YTUtY2QwYzRiMTZmNDJlLzVkN2Y4MjdiLWY1OWMtNDBmNC04M2E1LWNkMGM0YjE2
ZjQyZS5jcmwwHwYDVR0jBBgwFoAU0/Xs4F4i2c/WNIKI/DiJX+ZXwhcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC81ZDdmODI3Yi1mNTljLTQwZjQtODNhNS1jZDBj
NGIxNmY0MmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxricMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGb3R/9NHyOfQtfF6GMI0EuZ3EnJ+/aCYB91OIKxbMrfaJR+tY4YFnHe
PuYMxR6oAI7to1KPXypmP/gO7YqcjI05LJEka/baQaAuno+91XphPSbqjYAHJ7pP
hIJ0VbPwGaxDxPX7GqOI+n2c+QLi3M2KdAsih8Gqt758puhpPKQ5WHsT/twTjZL8
c78OZtHxXfoC1ylz+RKEP6XpD88nqxnbj7kM8XRSIumZrp99femReLuT1Z93t0DW
72tNRjW5ko3eCa3yNF32/vtUWGMGHRv9GQIT7lWSV/xDJulBMxE+Ju/Xh3roeTD4
N9s/d48CdIUACMpE09nYNuCrbjrkotY=
-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:12 2025 by rpki-client on console.sobornost.net