Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/45f1e332-cd9b-32b9-b65f-d9ca9de4cb80.roa
File:                     45f1e332-cd9b-32b9-b65f-d9ca9de4cb80.roa (raw, json)
Hash identifier:          843lssfvXgOYttM8Ltp275xArR+UseUUWRyqGo2/4yc=
Subject key identifier:   58:5C:6E:B1:1C:2A:01:C5:4D:2F:C6:AA:7E:72:51:35:9D:4F:BA:C3
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858496E4985791D1E64BA8DF1D580
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/45f1e332-cd9b-32b9-b65f-d9ca9de4cb80.roa
Signing time:             Sun 06 Apr 2025 01:00:47 +0000
ROA not before:           Sun 06 Apr 2025 01:00:47 +0000
ROA not after:            Sat 05 Jul 2025 01:00:47 +0000
asID:                     214238
IP address blocks:        23.27.122.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6e:49:85:79:1d:1e:64:ba:8d:f1:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr  6 01:00:47 2025 GMT
            Not After : Jul  5 01:00:47 2025 GMT
        Subject: CN=bcf4b99d-cf29-4c61-958f-3e3aaaf2ee6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:10:e9:82:10:93:b9:13:6f:ec:36:06:d3:c8:
                    f1:40:ee:6e:bb:29:65:e6:22:09:8f:85:f7:95:39:
                    2e:48:98:fe:16:eb:fe:7e:1e:88:b2:cc:1f:cc:40:
                    56:eb:42:5f:20:e5:5a:d2:2d:36:bb:50:bd:d8:83:
                    1f:63:0e:b2:18:b1:e0:0d:e6:50:af:10:b9:40:8d:
                    8f:d1:d6:11:aa:f6:bd:a1:e1:67:77:ac:4d:c5:dd:
                    1e:b9:ea:b0:90:c4:fe:c8:b5:b9:eb:03:9e:6f:5a:
                    65:70:f7:a5:bf:d7:4b:5d:44:4c:9a:bc:ea:22:f6:
                    f6:19:61:db:b5:7a:f0:af:b5:56:e1:92:58:59:0c:
                    f1:fa:60:8d:9c:3a:1e:f9:ce:41:b5:49:b6:be:ff:
                    9c:06:a4:7f:b0:6a:3c:d4:2d:9b:11:83:0d:da:ee:
                    81:75:49:eb:dd:f0:eb:af:98:f9:34:d4:74:2a:ef:
                    b8:05:79:38:8e:24:ef:7e:d8:b7:0d:ba:7a:b1:f1:
                    90:b2:83:d1:14:91:df:f0:13:9e:1d:f6:1b:4b:51:
                    f7:02:59:70:84:94:ab:92:ed:3d:cb:f5:d2:ec:e0:
                    8e:96:68:dd:59:b7:c2:37:78:61:ff:f8:ca:b0:04:
                    2d:b3:e7:78:bc:c4:a9:24:e7:9b:e6:b3:58:8a:93:
                    3a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5C:6E:B1:1C:2A:01:C5:4D:2F:C6:AA:7E:72:51:35:9D:4F:BA:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/45f1e332-cd9b-32b9-b65f-d9ca9de4cb80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:4a:81:f1:5b:5e:23:38:97:79:7f:b9:8d:ba:ea:43:20:e1:
         13:bb:ea:c1:c5:07:aa:fc:0f:4a:77:37:27:eb:d7:db:be:89:
         ad:16:41:55:9f:43:1a:7d:4b:a7:11:2e:74:bc:8f:37:6b:bc:
         08:26:0e:8f:c3:24:4e:b9:08:b3:23:69:19:c9:68:2b:5f:d7:
         be:8f:21:a0:91:9a:c0:1a:47:f2:4b:71:70:c4:28:66:da:de:
         b4:81:2d:41:c9:1d:cd:47:cc:9e:95:ac:e0:72:55:25:c4:0d:
         63:b5:a6:fc:9a:12:cc:cd:f0:bd:4e:f4:87:12:6f:d3:95:cb:
         2f:d4:1e:d6:dd:25:49:c7:29:96:6e:68:70:6f:2f:4e:09:0c:
         28:35:0c:af:8a:66:64:fe:dc:bb:a1:cb:98:f8:37:98:82:02:
         9d:6d:13:70:4f:f9:39:b6:2f:76:cd:ec:17:ca:6b:38:31:9e:
         5e:40:f3:67:93:cc:cf:a4:4d:4b:97:37:7a:47:69:94:bf:5f:
         42:33:a8:7e:2d:21:66:8d:af:fe:36:73:02:55:de:31:40:d3:
         e9:64:f3:68:2d:77:83:64:a1:04:5d:be:30:33:f5:63:fd:69:
         29:e3:89:6d:92:32:69:81:da:5d:32:83:e8:19:a8:51:6d:c5:
         5a:ab:b9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:19 2025 by rpki-client on console.sobornost.net