Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/243e6c44-67ab-3d11-9b79-1459d8df60c1.roa
File:                     243e6c44-67ab-3d11-9b79-1459d8df60c1.roa (raw, json)
Hash identifier:          4KmANfLclRTJ79M0NvS9BC1MewHD44RONHXEw0zhRv4=
Subject key identifier:   74:CF:28:FF:8A:73:5C:9E:E3:A2:80:7C:BE:D4:C5:32:D7:82:DD:AB
Certificate issuer:       /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial:       010D0C9F4328584971DE776E9DEB07C8FAC70F80
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/243e6c44-67ab-3d11-9b79-1459d8df60c1.roa
Signing time:             Mon 07 Apr 2025 07:48:25 +0000
ROA not before:           Mon 07 Apr 2025 07:48:25 +0000
ROA not after:            Sun 06 Jul 2025 07:48:25 +0000
asID:                     11870
IP address blocks:        167.23.90.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:71:de:77:6e:9d:eb:07:c8:fa:c7:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
        Validity
            Not Before: Apr  7 07:48:25 2025 GMT
            Not After : Jul  6 07:48:25 2025 GMT
        Subject: CN=5cae1789-17d4-45f0-8aa8-155949b03465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:db:c0:21:ad:cd:ca:43:c6:8d:52:e1:06:b5:
                    57:ca:34:f2:f5:76:50:95:02:7f:59:bd:91:3d:c5:
                    f5:af:50:da:3c:ac:95:f5:47:d8:52:d2:96:f3:20:
                    c5:78:a0:9d:74:35:f0:8a:f7:ef:62:62:82:42:61:
                    f5:6b:00:ae:4f:f9:ee:d5:b3:61:e3:a9:5b:85:52:
                    45:41:16:65:0c:7f:95:59:69:37:f0:fc:06:6f:9a:
                    ad:e4:86:4e:63:ea:2a:bd:2e:66:c4:cb:c0:ca:06:
                    0f:04:d3:9e:cd:f3:01:40:f3:26:ca:f2:a1:62:a8:
                    8f:76:80:82:ee:60:90:46:5f:8c:1f:cd:0e:58:55:
                    25:a9:5a:27:46:22:fe:a7:6b:f3:e6:4d:d0:ca:1a:
                    78:cf:5a:3a:a5:2f:15:28:03:6b:19:84:bf:01:43:
                    54:73:ed:b9:91:21:24:69:1a:a1:03:e0:64:20:9e:
                    cd:3c:07:b6:5e:6a:ad:0f:e5:75:86:35:ad:12:b6:
                    45:9b:b8:9e:0f:c0:f0:16:3a:a2:be:30:69:61:58:
                    97:ba:97:d6:f8:68:ed:0c:26:22:ec:b3:da:20:99:
                    ea:cf:e1:01:f3:53:cf:2a:48:83:1f:42:06:15:72:
                    25:89:4d:da:92:43:69:8b:26:72:4e:b5:a8:9f:d9:
                    ad:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CF:28:FF:8A:73:5C:9E:E3:A2:80:7C:BE:D4:C5:32:D7:82:DD:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/243e6c44-67ab-3d11-9b79-1459d8df60c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl

            X509v3 Authority Key Identifier:
                keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.23.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:3d:b5:7d:bb:89:a6:64:8e:27:88:68:70:26:3e:66:2c:7b:
         92:fe:50:8d:af:29:d8:19:ca:41:ff:23:14:dd:15:63:ae:90:
         4a:59:9f:ec:b2:6d:60:64:dc:41:8e:3e:62:c5:bb:33:7e:8b:
         cb:80:03:89:8e:11:00:05:12:da:ad:51:8e:3e:70:81:91:0e:
         a6:18:11:50:2a:39:93:3d:eb:2a:0d:83:a1:5b:ad:81:9b:77:
         8a:49:28:0b:00:67:12:0f:96:02:74:ea:10:85:28:7d:7a:b5:
         47:ec:3d:e9:6b:4a:6d:9b:52:b7:d2:65:4b:c1:b9:b0:62:63:
         42:21:43:05:f2:28:7d:a6:ae:98:37:bc:9a:26:2d:3c:ca:23:
         98:a3:49:3e:7d:c8:08:07:be:ed:0c:d6:e0:df:b3:f8:29:a8:
         62:5d:8e:b2:be:de:9d:7b:0b:f1:e2:54:90:72:44:8d:12:4c:
         47:c7:67:24:44:64:94:f2:f3:55:a1:64:a8:98:1f:1d:11:53:
         61:d7:79:5b:7b:01:ec:85:60:7e:9e:75:33:b1:48:62:f2:0a:
         6f:55:7f:19:0b:ed:d8:55:f4:9b:46:a5:1b:e4:35:27:37:aa:
         30:b7:cd:89:63:47:84:8f:bc:26:3e:c4:45:a1:d9:fa:7b:83:
         40:fc:6f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 10:55:00 2025 by rpki-client on console.sobornost.net