Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/49ac5f33-1e5e-3a56-990e-f74453e8f2ae.roa
File:                     49ac5f33-1e5e-3a56-990e-f74453e8f2ae.roa (raw, json)
Hash identifier:          LhGJsybwEvPoxZ4ARymy+No6Uix88GLT6dlsM+N48fM=
Subject key identifier:   92:69:CE:31:B3:5A:D0:BC:73:04:F2:7A:62:59:81:21:77:A6:F3:7E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858497F09AC53569D4B2A8F0B8C80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/49ac5f33-1e5e-3a56-990e-f74453e8f2ae.roa
Signing time:             Sat 12 Apr 2025 01:00:48 +0000
ROA not before:           Sat 12 Apr 2025 01:00:48 +0000
ROA not after:            Fri 11 Jul 2025 01:00:48 +0000
asID:                     7018
IP address blocks:        166.88.44.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7f:09:ac:53:56:9d:4b:2a:8f:0b:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 01:00:48 2025 GMT
            Not After : Jul 11 01:00:48 2025 GMT
        Subject: CN=1ebea7fc-292c-472d-9195-7451e9cc2112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7b:a5:64:04:ee:1c:d0:18:21:d5:2f:e9:d7:
                    0f:be:3c:4f:10:10:88:67:35:c3:af:19:26:cc:3e:
                    d0:3d:81:51:dc:35:0f:26:ac:69:3d:54:f2:66:3d:
                    e8:fb:fa:c7:70:82:8b:ec:c0:37:9c:c9:c6:71:7a:
                    c0:57:1b:51:10:81:7e:aa:a2:88:55:7d:ac:d7:8f:
                    d8:39:e5:79:61:f3:6d:7a:8c:59:37:a6:97:9b:91:
                    e8:bb:b5:62:a9:2e:cf:bf:b7:e4:1a:19:f2:0f:10:
                    80:12:eb:36:70:e6:5d:24:5d:64:9d:4d:45:0c:7c:
                    08:33:56:e1:3b:11:1f:72:21:ea:81:d6:fd:5c:5b:
                    0a:da:13:99:e0:59:65:80:50:3d:52:57:d1:6d:4a:
                    83:f7:ad:1d:50:66:79:78:11:92:6a:97:89:dd:ca:
                    68:14:82:85:06:a3:1c:80:16:fb:1c:5d:b8:f8:3c:
                    a5:a1:7a:2c:74:ba:7a:aa:d7:86:f6:f0:52:e4:ee:
                    fc:4b:14:fc:a2:13:c4:83:10:f6:43:0c:69:5a:9a:
                    bf:68:7e:34:3e:02:8d:c2:c0:88:eb:28:68:cd:0d:
                    e3:3b:a4:42:af:0c:09:ac:c8:ec:d4:3c:41:38:60:
                    be:3a:dc:23:90:ac:3b:82:f3:ee:e8:2d:fe:f5:d2:
                    69:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:69:CE:31:B3:5A:D0:BC:73:04:F2:7A:62:59:81:21:77:A6:F3:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/49ac5f33-1e5e-3a56-990e-f74453e8f2ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:59:aa:2c:f6:bd:a5:46:8f:73:16:99:95:f8:73:03:4a:8c:
         85:ff:5e:ad:6f:e9:32:f4:f1:5e:40:24:14:36:9b:99:5e:8b:
         cf:9c:9d:85:fb:08:3d:1b:ee:7b:46:a2:3a:34:17:85:3e:41:
         3b:0d:68:41:6a:fd:d4:77:d2:71:51:90:09:c8:85:ea:02:ca:
         3e:0d:4e:91:0f:81:8b:4b:f2:1b:af:69:b7:9a:da:98:8f:84:
         f8:f9:d1:5d:5a:8c:9d:ae:23:c3:c3:91:26:77:64:ed:8e:c1:
         74:99:19:d8:16:ef:e2:53:d8:47:7d:b5:79:44:f4:7b:de:dd:
         89:72:d1:7f:f6:c0:8b:d6:0b:51:fa:72:79:2c:ba:05:86:d3:
         1f:21:af:f7:d4:81:62:7a:a3:b0:9a:26:2a:07:ef:cd:ad:31:
         84:6d:4d:d5:28:6a:47:f4:fa:d1:7a:11:6d:c5:8b:cd:be:e4:
         53:e2:1a:5a:da:ab:37:64:2c:a2:2c:9d:59:f2:b2:61:00:e2:
         23:e3:72:85:74:a0:fe:5d:6b:f6:36:cb:1a:92:ec:33:b2:60:
         44:9b:bd:8b:41:a1:46:1c:04:34:af:de:4f:60:46:6f:80:8d:
         a1:34:15:94:5d:bf:71:76:3d:9e:c5:1c:c3:a3:52:07:92:63:
         1f:5b:8a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:19 2025 by rpki-client on console.sobornost.net