Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/df06a591-de7d-3d32-ac3a-c3ae36cab293.roa
File:                     df06a591-de7d-3d32-ac3a-c3ae36cab293.roa (raw, json)
Hash identifier:          3pczbzHr37O7vytlbr2Y4uKEfGy5r1ORUjWDtC391L8=
Subject key identifier:   C0:84:E6:D4:24:E7:E5:2C:B6:D7:B8:B1:1C:BA:E7:38:0E:1C:F9:16
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584940395C74E080B722C155C900
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/df06a591-de7d-3d32-ac3a-c3ae36cab293.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        2607:8940:41c0::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:5c:74:e0:80:b7:22:c1:55:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=81be6b75-3c8f-4271-a638-6d31b0c55262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:92:42:91:04:8c:1f:9c:44:85:c4:db:07:62:
                    b6:b4:da:c8:06:08:1f:8c:fc:d0:27:32:55:b4:74:
                    cd:ad:70:86:7c:83:84:c3:a8:85:02:e9:3c:68:d7:
                    3e:b6:52:dd:68:60:b3:89:94:18:24:6d:ed:e5:0d:
                    2d:02:d1:66:9d:9e:1b:33:be:c2:d5:75:7d:bb:0d:
                    cc:d1:9d:05:4a:db:a0:af:7e:ff:dd:28:1f:67:69:
                    82:51:6f:34:17:b2:f0:8d:43:72:84:15:de:f7:34:
                    25:6b:84:8f:78:c6:42:c1:f7:c6:d1:12:2a:27:d7:
                    f0:85:e7:7f:42:66:f9:91:66:15:7b:84:00:78:7c:
                    5b:6b:7b:9c:85:aa:6f:25:a9:06:93:81:46:bf:77:
                    4c:9a:bb:28:5e:ad:44:da:05:cf:b3:66:73:dc:eb:
                    5f:ee:74:be:96:ba:b3:62:1b:03:5e:d7:03:df:58:
                    fb:0e:7e:5e:f6:5c:47:66:0a:99:ac:86:b0:aa:28:
                    ed:cc:7d:27:b9:f7:b7:0f:f4:f4:0d:60:64:6e:1b:
                    72:b8:9c:fa:96:d2:5a:ff:59:29:58:32:b2:1b:11:
                    55:a3:f0:27:03:8a:88:4f:57:e5:68:11:31:38:8d:
                    20:f5:02:43:1b:cc:0a:49:b5:18:ab:b0:f8:c4:27:
                    e2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:84:E6:D4:24:E7:E5:2C:B6:D7:B8:B1:1C:BA:E7:38:0E:1C:F9:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/df06a591-de7d-3d32-ac3a-c3ae36cab293.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:41c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:9c:ed:9e:6a:61:75:c3:94:65:21:cd:a8:35:78:d4:3d:12:
         5f:d5:c3:98:9a:74:84:96:0e:9e:af:47:0c:04:28:e2:21:6b:
         75:1a:8d:54:3a:03:4c:3f:5e:30:c6:df:26:25:7f:f1:9a:21:
         46:04:cd:56:30:8e:65:be:0b:f0:18:0a:8d:4e:1c:2f:c8:73:
         22:81:d4:a6:c4:d2:8c:12:22:17:09:26:80:dc:64:af:53:c2:
         92:be:37:57:96:b4:b0:c9:23:3d:4c:50:eb:79:f4:74:8f:fe:
         51:89:4a:7f:87:46:86:c8:a7:45:cc:ed:6c:e9:ec:f7:73:64:
         71:96:ec:84:b6:c7:6c:03:86:1c:a8:9b:e2:87:ef:f6:56:ea:
         44:dd:fe:53:95:2b:9b:16:d3:32:a3:a8:c9:f1:e1:88:3e:78:
         5d:e9:b9:40:62:30:21:27:ad:4c:75:17:46:73:35:34:b7:11:
         61:ae:c1:09:d8:75:97:6c:c6:73:a8:98:39:cd:39:70:e9:7a:
         c9:f9:bc:9c:c3:1b:ca:bb:6b:4f:b3:58:6a:a0:40:ec:e6:04:
         c2:65:40:bf:64:fa:42:3b:7d:82:f2:42:dc:22:a0:0b:a8:e9:
         6e:e2:0b:dc:73:10:87:04:af:37:e4:4f:19:0c:f6:fa:8b:24:
         c1:7a:43:2f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOVx04IC3IsFVyQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk
ODFiZTZiNzUtM2M4Zi00MjcxLWE2MzgtNmQzMWIwYzU1MjYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJJCkQSMH5xEhcTbB2K2tNrIBggfjPzQJzJV
tHTNrXCGfIOEw6iFAuk8aNc+tlLdaGCziZQYJG3t5Q0tAtFmnZ4bM77C1XV9uw3M
0Z0FStugr37/3SgfZ2mCUW80F7LwjUNyhBXe9zQla4SPeMZCwffG0RIqJ9fwhed/
Qmb5kWYVe4QAeHxba3uchapvJakGk4FGv3dMmrsoXq1E2gXPs2Zz3Otf7nS+lrqz
YhsDXtcD31j7Dn5e9lxHZgqZrIawqijtzH0nufe3D/T0DWBkbhtyuJz6ltJa/1kp
WDKyGxFVo/AnA4qIT1flaBExOI0g9QJDG8wKSbUYq7D4xCfirwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMCE5tQk5+Ustte4sRy65zgOHPkWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZGYwNmE1OTEtZGU3ZC0z
ZDMyLWFjM2EtYzNhZTM2Y2FiMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEHA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFec7Z5qYXXDlGUhzag1eNQ9El/Vw5iadISWDp6vRwwEKOIha3Ua
jVQ6A0w/XjDG3yYlf/GaIUYEzVYwjmW+C/AYCo1OHC/IcyKB1KbE0owSIhcJJoDc
ZK9TwpK+N1eWtLDJIz1MUOt59HSP/lGJSn+HRobIp0XM7Wzp7PdzZHGW7IS2x2wD
hhyom+KH7/ZW6kTd/lOVK5sW0zKjqMnx4Yg+eF3puUBiMCEnrUx1F0ZzNTS3EWGu
wQnYdZdsxnOomDnNOXDpesn5vJzDG8q7a0+zWGqgQOzmBMJlQL9k+kI7fYLyQtwi
oAuo6W7iC9xzEIcErzfkTxkM9vqLJMF6Qy8=
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:01 2025 by rpki-client on console.sobornost.net