Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/706229b3-bb19-3146-9186-71020ab2961c.roa
File:                     706229b3-bb19-3146-9186-71020ab2961c.roa (raw, json)
Hash identifier:          2tNw435u8NHfDFns4N/3INWLiI9kZ4C6fof283JLvgQ=
Subject key identifier:   0F:5A:DC:57:DC:97:A6:36:18:95:33:D2:95:82:2F:0C:61:9D:06:1E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858494F93F300F0E62770724D0E40
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/706229b3-bb19-3146-9186-71020ab2961c.roa
Signing time:             Wed 26 Mar 2025 01:00:40 +0000
ROA not before:           Wed 26 Mar 2025 01:00:40 +0000
ROA not after:            Tue 24 Jun 2025 01:00:40 +0000
asID:                     8881
IP address blocks:        23.27.88.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4f:93:f3:00:f0:e6:27:70:72:4d:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 26 01:00:40 2025 GMT
            Not After : Jun 24 01:00:40 2025 GMT
        Subject: CN=cbd65bf7-b923-4e9f-840d-4cbb1df9e79b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:36:08:8a:ea:e5:1b:51:6c:92:31:a7:28:5f:
                    75:a1:a3:ad:8d:54:97:c8:90:f4:6c:f4:32:3d:57:
                    7a:45:9b:8b:fc:67:57:9c:ae:bd:68:ba:55:d4:ef:
                    27:63:ee:8a:d3:13:89:88:3c:30:2f:ab:bf:39:a4:
                    52:41:f7:f8:56:56:04:9a:af:80:4e:20:7c:42:e8:
                    1c:5a:0a:b5:c5:94:94:cb:d5:f9:cd:fb:c6:47:fd:
                    24:cb:0e:22:b5:5a:ff:b6:1d:c2:22:d3:02:2a:ff:
                    6b:c3:d6:a6:2c:19:04:2e:c3:f4:50:cf:b3:d6:6c:
                    d4:bb:a0:70:42:74:4d:05:35:d2:74:8d:07:98:66:
                    3f:31:57:99:a4:59:4e:a6:f1:ba:a0:68:11:9d:b1:
                    f9:c9:30:00:1d:f9:a9:64:80:22:0f:53:7d:a9:b7:
                    48:35:18:88:ee:33:13:64:6e:3a:a1:45:90:1d:c2:
                    ff:b8:52:9e:20:46:04:45:3b:27:b3:d7:e7:c7:c2:
                    c6:b8:bb:18:d4:5c:b0:8c:a6:92:39:80:9e:04:52:
                    9b:7b:38:e0:1a:c5:62:fd:0a:4b:d2:e1:69:2b:a6:
                    79:06:36:7a:23:40:8e:80:c9:9a:3d:d6:83:3d:aa:
                    b1:d4:cb:23:63:96:dc:9a:6c:b9:83:27:ad:94:fb:
                    35:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5A:DC:57:DC:97:A6:36:18:95:33:D2:95:82:2F:0C:61:9D:06:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/706229b3-bb19-3146-9186-71020ab2961c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:fd:a7:64:b9:18:29:ac:96:4a:12:ff:2a:13:88:0f:0f:80:
         a2:58:71:65:d3:e0:b0:49:20:96:a1:6d:da:08:e9:65:ac:4d:
         d5:70:48:5c:01:c5:0f:d5:d3:88:cc:d5:d6:b4:ea:6c:5d:73:
         61:c2:cc:2d:cc:9d:f6:c7:00:14:fb:b2:b6:49:35:a8:3b:d2:
         5e:7b:0b:eb:79:42:52:fb:96:a7:d8:8e:c9:08:2e:a0:e1:75:
         68:84:3a:96:f8:ed:31:45:c3:11:a5:f2:b1:fb:33:d0:d5:28:
         d2:19:fd:4a:95:ab:fc:97:79:d1:70:7d:55:ac:0e:a7:40:af:
         f4:ec:23:e6:20:3f:ef:a0:85:97:34:9c:d2:9a:d5:c4:96:85:
         58:aa:5b:2d:d0:95:30:f4:86:5c:c2:61:f6:df:66:15:07:50:
         5b:81:16:4c:9a:e7:e1:0c:71:fd:5b:1e:e1:55:f3:3a:71:e0:
         31:e6:b5:a7:35:c8:5a:92:47:d8:40:16:84:00:a9:94:ab:61:
         33:cc:ca:40:9e:8c:e2:04:25:9d:4b:b4:bf:e3:5e:de:94:46:
         cc:2e:77:1f:cf:b7:5c:47:b2:e9:c1:8f:ce:93:5b:05:9f:62:
         77:9f:ae:4d:d4:be:ae:e0:86:4f:15:6a:28:9c:72:6e:fa:a5:
         7c:78:75:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:19 2025 by rpki-client on console.sobornost.net