Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/060d8ece-dbff-3237-910b-63e9b1ddd301.roa
File:                     060d8ece-dbff-3237-910b-63e9b1ddd301.roa (raw, json)
Hash identifier:          bsVGE/RnMWJqbn0nYmcxAtaOtKrXz8VyHK4V29fGHfo=
Subject key identifier:   A9:02:03:C6:15:E1:BD:5C:98:B8:0A:5C:43:1C:BE:CE:DA:2F:94:27
Certificate issuer:       /CN=ae55b5de-dd92-467b-8e52-a8892152f63e
Certificate serial:       010D0C9F432858496A198FEB389A4218754AB180
Authority key identifier: 3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/060d8ece-dbff-3237-910b-63e9b1ddd301.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     63375
IP address blocks:        134.199.54.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:8f:eb:38:9a:42:18:75:4a:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae55b5de-dd92-467b-8e52-a8892152f63e
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=0e962d26-2555-4e44-b7fe-a885c09b9b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e7:b8:bb:5d:d8:72:d2:2b:85:3a:02:82:00:
                    24:87:2c:f5:01:8b:5e:8b:d6:15:3f:b0:1f:fa:6d:
                    07:ff:2b:21:17:95:d5:b9:7a:45:09:88:9d:8e:10:
                    60:5f:be:48:95:78:3b:80:ea:9e:6d:f3:6f:98:90:
                    3b:65:04:0c:7c:3d:f7:04:b3:51:ec:e2:d0:b9:ce:
                    15:2f:dd:d5:9d:60:80:79:76:3e:a4:e7:3a:ef:ce:
                    e1:b2:17:5e:3e:62:33:4a:bc:9d:a1:f1:e2:06:01:
                    0e:a7:6b:7d:d1:7d:c0:e2:c8:e2:37:09:f2:3d:bf:
                    09:c9:bb:9c:25:1a:e4:da:e7:2a:ab:5a:0a:80:c2:
                    cb:f3:01:22:a8:e4:58:50:69:5f:c1:d3:43:5d:28:
                    87:43:9a:9f:d5:68:13:6c:06:52:19:97:f2:69:17:
                    d8:3b:15:ff:2b:4c:27:0f:96:21:ee:c3:e9:4f:8f:
                    66:6d:9b:e0:97:e7:e3:ce:88:26:bd:07:10:a3:ae:
                    fe:db:cc:7e:e5:ba:e3:72:3e:22:1f:f4:72:6d:d1:
                    15:5a:d4:ec:5b:37:88:b1:61:51:0f:ae:22:e6:f7:
                    ee:00:07:5f:9c:63:33:9e:00:14:5f:2f:87:a9:3a:
                    a6:df:ad:1d:ae:93:1a:be:74:a7:c5:86:db:17:af:
                    d5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:02:03:C6:15:E1:BD:5C:98:B8:0A:5C:43:1C:BE:CE:DA:2F:94:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/060d8ece-dbff-3237-910b-63e9b1ddd301.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl

            X509v3 Authority Key Identifier:
                keyid:3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.199.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:e4:16:ad:df:4c:f6:4c:99:30:ae:73:26:89:f5:24:eb:35:
         05:65:5f:ec:7d:78:32:82:77:f1:0f:e1:20:d2:1c:02:80:24:
         c8:60:a6:42:d1:85:eb:db:d1:2e:41:ec:32:b4:53:70:18:64:
         45:fb:4b:eb:f7:66:77:ca:10:83:52:03:f1:32:76:c0:c2:20:
         96:6a:ac:2f:4c:6a:fe:e9:69:4c:a5:3d:68:c8:52:87:93:f9:
         17:da:fd:4e:0d:b8:86:0a:0d:e0:f4:48:d4:96:66:65:fc:05:
         c8:51:a7:c9:a8:da:15:79:60:ab:a9:35:03:a7:ae:d9:46:59:
         3b:19:22:aa:fc:1e:77:c5:05:22:37:83:e8:6a:9e:66:1f:11:
         b3:d3:47:ca:6f:ba:09:fc:88:da:86:60:4f:f5:45:19:eb:6c:
         c3:af:f7:e1:b5:fb:86:4f:c4:7c:fd:8d:1b:94:a6:48:88:62:
         ca:78:05:1c:af:be:16:19:88:2f:51:8a:a6:0a:03:8e:73:87:
         6c:0e:2c:ca:eb:9d:0d:5f:ba:f4:54:67:c7:80:77:53:8c:61:
         74:1f:27:a2:de:2d:ed:b4:7f:21:9d:5e:aa:fd:cf:d9:89:7b:
         67:ca:e3:d0:10:bb:c2:70:a7:45:12:7e:35:b8:c9:32:15:09:
         87:4e:36:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:20:19 2025 by rpki-client on console.sobornost.net