Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/09ff6eaf-eccc-3dbd-892c-e6b889b1b63d.roa
File:                     09ff6eaf-eccc-3dbd-892c-e6b889b1b63d.roa (raw, json)
Hash identifier:          LdvlDZiFbiorIvK2GSO6rW8TKep7FHEpU51gb/8xJIo=
Subject key identifier:   2F:6E:1D:2A:AB:C8:05:37:CB:24:B9:14:A0:2B:CF:74:96:17:47:7A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858497F099A84C6C8F92C5F57CF60
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/09ff6eaf-eccc-3dbd-892c-e6b889b1b63d.roa
Signing time:             Sat 12 Apr 2025 01:00:48 +0000
ROA not before:           Sat 12 Apr 2025 01:00:48 +0000
ROA not after:            Fri 11 Jul 2025 01:00:48 +0000
asID:                     11798
IP address blocks:        166.88.150.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7f:09:9a:84:c6:c8:f9:2c:5f:57:cf:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 01:00:48 2025 GMT
            Not After : Jul 11 01:00:48 2025 GMT
        Subject: CN=e079493b-2cff-4b87-89b6-ffb7889fb45a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c2:b0:02:b2:29:cd:b6:c3:fb:c5:26:64:ee:
                    8b:1d:bf:11:7c:12:18:fa:a4:96:e7:81:3e:62:af:
                    71:82:52:93:31:ff:31:b1:af:9b:b9:2b:29:c6:a7:
                    26:10:a0:f0:33:87:f6:6d:d1:f0:e2:bc:82:5d:de:
                    af:c2:30:79:97:e3:a3:1a:c5:07:6c:d2:fc:49:3d:
                    e9:40:70:5b:5b:7f:59:72:11:87:34:e8:47:03:7a:
                    3e:4d:b3:54:bd:9c:7c:c3:99:b9:48:2e:42:b6:d1:
                    f0:8d:2e:7d:5b:9e:49:84:76:e4:11:2c:89:27:d3:
                    84:5c:b3:18:2b:4b:17:91:be:a8:fa:82:67:9d:8c:
                    f2:3d:78:d1:a2:42:54:b8:3c:fc:0d:5c:75:bb:84:
                    27:d6:91:79:88:cc:f0:26:64:bc:14:4a:3c:62:f4:
                    3a:fe:7e:48:31:21:47:c7:6e:27:5a:fa:a3:4e:8b:
                    18:21:2d:d4:a4:b1:e7:e1:f1:dc:d2:13:0c:f3:b5:
                    9b:48:eb:48:98:42:ae:8c:03:ba:73:76:fc:99:09:
                    e0:7c:d2:1c:b4:c4:39:66:89:56:5b:02:e7:b3:08:
                    0f:e0:cd:5d:8f:74:4c:11:a1:d0:5b:01:ca:ba:82:
                    c4:47:6f:61:92:2e:17:10:a7:3d:c4:8d:f0:80:7a:
                    a4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6E:1D:2A:AB:C8:05:37:CB:24:B9:14:A0:2B:CF:74:96:17:47:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/09ff6eaf-eccc-3dbd-892c-e6b889b1b63d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:13:24:0d:20:7e:fb:ea:b8:42:10:5e:14:be:db:f3:57:0a:
         6c:e7:93:bc:7c:42:c6:c2:f8:06:5a:ef:69:0d:fa:d5:59:b3:
         c4:62:3d:27:31:23:50:ea:83:a0:85:0e:ee:e2:bc:4b:83:5c:
         b7:b4:fd:2a:e5:fe:33:9a:31:07:a5:3c:d1:93:5b:6c:eb:b9:
         46:1a:80:89:7d:ac:2d:80:c9:9a:5d:0b:db:e7:33:0f:3a:8c:
         33:e2:7c:56:7e:af:a5:26:27:39:d0:9f:74:36:56:03:b4:ee:
         83:0e:cb:c0:e6:e5:b8:bc:59:3a:53:91:6f:51:73:a9:55:9e:
         be:d2:c8:4b:78:54:a5:93:93:2a:16:01:b0:21:59:97:70:c2:
         0d:1c:77:4c:c5:5f:3f:5f:0d:45:cd:9e:b5:1a:38:9c:2e:21:
         cc:c3:68:a8:32:3b:ea:94:1c:4a:7d:78:0a:32:c7:8c:46:cb:
         ad:58:69:83:85:94:08:38:52:33:93:91:af:95:92:a8:4a:0e:
         6e:8b:8f:11:85:dc:a0:2c:cb:59:51:02:59:21:a1:0e:0a:1d:
         05:29:d3:9a:43:14:bc:5e:2b:c9:01:21:b5:e5:60:20:0c:66:
         b8:0a:c8:e4:e7:0a:77:96:20:03:d4:10:cc:dd:5f:a2:90:5f:
         c5:a0:3b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:18 2025 by rpki-client on console.sobornost.net