Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/bc77fd2e-d005-3d71-a7c8-c30d5ca46ca9.roa
File:                     bc77fd2e-d005-3d71-a7c8-c30d5ca46ca9.roa (raw, json)
Hash identifier:          G65F9x6IP3iLHas/1rmD985xhjPOpJtjzGJUaeM/xC8=
Subject key identifier:   DE:A2:FC:59:F1:33:31:84:DE:E1:A2:7D:0A:E6:B1:EE:79:AA:F1:E9
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584976A98EB3B6B7B546302B10C0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/bc77fd2e-d005-3d71-a7c8-c30d5ca46ca9.roa
Signing time:             Wed 09 Apr 2025 01:00:47 +0000
ROA not before:           Wed 09 Apr 2025 01:00:47 +0000
ROA not after:            Tue 08 Jul 2025 01:00:47 +0000
asID:                     13768
IP address blocks:        64.227.224.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:76:a9:8e:b3:b6:b7:b5:46:30:2b:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Apr  9 01:00:47 2025 GMT
            Not After : Jul  8 01:00:47 2025 GMT
        Subject: CN=244d12d3-11e9-4cce-9757-b6f58cdcf891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:58:2b:a0:69:eb:b7:f4:24:8b:35:f0:ef:80:
                    26:da:8a:26:53:a2:6b:0b:b2:97:b0:f0:f6:7b:3b:
                    ba:89:6d:ee:ab:17:e3:c0:ca:fd:f4:c6:96:38:bf:
                    41:8d:74:13:27:44:1b:cc:cd:58:eb:bc:b5:d8:9c:
                    53:05:b9:87:94:62:9a:37:fe:bd:19:6a:ba:02:42:
                    9a:95:47:98:80:c4:33:fd:ad:e4:f1:70:ee:e4:89:
                    2e:e7:27:99:c5:1f:c7:f9:6a:40:11:0b:68:72:0e:
                    4d:14:46:d7:bc:5b:1f:a1:70:42:60:fd:14:85:45:
                    3d:10:de:11:e6:fa:23:41:ab:5b:cb:5d:4f:65:34:
                    f4:07:77:8d:ff:41:1b:6a:3d:10:6b:0d:ae:44:56:
                    ad:d3:03:59:bb:71:4b:e0:00:fa:1a:c4:86:5b:d6:
                    58:d3:e1:71:6c:21:20:5e:fb:8c:eb:16:e1:dc:69:
                    fc:05:64:4e:58:1e:b3:2b:90:40:5a:20:46:16:62:
                    d0:c0:81:c1:8d:9a:75:47:a8:d9:40:df:78:db:2c:
                    3c:59:84:e3:04:f9:a5:3e:85:0c:78:32:4d:c5:7c:
                    3f:a7:eb:d2:6f:a3:e8:8f:a8:a6:69:c4:19:1b:a4:
                    d7:ee:e3:2b:b8:3b:1b:0a:15:98:dc:8c:e6:ac:d1:
                    11:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A2:FC:59:F1:33:31:84:DE:E1:A2:7D:0A:E6:B1:EE:79:AA:F1:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/bc77fd2e-d005-3d71-a7c8-c30d5ca46ca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.227.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:d7:59:42:d2:7a:a2:70:9b:a8:ee:6f:3b:e4:90:96:e4:79:
         3f:26:50:3c:c3:78:d7:36:8a:43:cb:3e:44:a1:5b:5a:96:e2:
         78:23:7e:31:f9:c7:19:2a:ed:6d:a1:0a:4e:ce:02:93:11:24:
         d0:2b:cc:51:c4:92:57:3c:a5:05:e4:73:c6:05:cf:28:f4:03:
         55:de:1c:66:cd:0b:0a:30:e0:7d:1b:0c:de:81:ac:9d:42:68:
         31:ac:11:21:ac:2b:93:1c:c6:3f:4b:a4:f5:5d:5a:72:83:4e:
         66:cc:02:1b:4e:65:33:ad:9c:1c:88:35:93:27:ba:43:10:49:
         52:7d:0b:a8:4d:96:f6:e3:99:39:d5:bc:f3:8b:9c:66:ca:09:
         5d:f1:4b:7c:dd:60:f7:c0:4f:40:24:dc:dd:c4:7c:c8:22:a1:
         65:53:30:f9:1c:94:f6:da:96:a2:76:33:49:8e:45:e3:ca:1c:
         da:24:bb:95:67:db:e9:bd:fd:52:59:b6:c1:bf:a0:d9:66:2f:
         18:3d:d4:41:a0:b4:b1:d2:d7:3a:de:6b:a0:64:0d:ec:54:76:
         b0:43:64:2e:0e:6e:aa:f5:df:cc:0b:0a:85:9f:2c:35:03:63:
         b9:e3:3e:be:a5:ca:1c:bd:85:a9:78:bb:d0:48:84:a1:ad:2f:
         03:f3:01:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl2qY6ztre1RjArEMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk
YjEwMB4XDTI1MDQwOTAxMDA0N1oXDTI1MDcwODAxMDA0N1owLzEtMCsGA1UEAxMk
MjQ0ZDEyZDMtMTFlOS00Y2NlLTk3NTctYjZmNThjZGNmODkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVgroGnrt/QkizXw74Am2oomU6JrC7KXsPD2
ezu6iW3uqxfjwMr99MaWOL9BjXQTJ0QbzM1Y67y12JxTBbmHlGKaN/69GWq6AkKa
lUeYgMQz/a3k8XDu5Iku5yeZxR/H+WpAEQtocg5NFEbXvFsfoXBCYP0UhUU9EN4R
5vojQatby11PZTT0B3eN/0Ebaj0Qaw2uRFat0wNZu3FL4AD6GsSGW9ZY0+FxbCEg
XvuM6xbh3Gn8BWROWB6zK5BAWiBGFmLQwIHBjZp1R6jZQN942yw8WYTjBPmlPoUM
eDJNxXw/p+vSb6Poj6imacQZG6TX7uMruDsbChWY3IzmrNER3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN6i/FnxMzGE3uGifQrmse55qvHpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3
OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvYmM3N2ZkMmUtZDAwNS0z
ZDcxLWE3YzgtYzMwZDVjYTQ2Y2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0
YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1
ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl
NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQOPgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADvXWULSeqJwm6jubzvkkJbkeT8mUDzDeNc2ikPLPkShW1qW4ngjfjH5
xxkq7W2hCk7OApMRJNArzFHEklc8pQXkc8YFzyj0A1XeHGbNCwow4H0bDN6BrJ1C
aDGsESGsK5Mcxj9LpPVdWnKDTmbMAhtOZTOtnByINZMnukMQSVJ9C6hNlvbjmTnV
vPOLnGbKCV3xS3zdYPfAT0Ak3N3EfMgioWVTMPkclPbalqJ2M0mORePKHNoku5Vn
2+m9/VJZtsG/oNlmLxg91EGgtLHS1zrea6BkDexUdrBDZC4Obqr138wLCoWfLDUD
Y7njPr6lyhy9hal4u9BIhKGtLwPzAXU=
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:02 2025 by rpki-client on console.sobornost.net