Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c1f8562-35e5-3180-b4df-e4605ff06b9d.roa
File:                     1c1f8562-35e5-3180-b4df-e4605ff06b9d.roa (raw, json)
Hash identifier:          OXUj8ylJsmJ2H+PXjlIxhZ4nDmnCr+1EfHnbrhaUgyA=
Subject key identifier:   EC:8E:36:3D:7E:2E:16:46:AD:28:B7:68:41:75:8A:4C:31:A8:4D:F5
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285849780F1F52AB956A00D1945F80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c1f8562-35e5-3180-b4df-e4605ff06b9d.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     7029
IP address blocks:        173.186.236.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:1f:52:ab:95:6a:00:d1:94:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=8efdf082-0db2-4922-b544-ef5d0b1c6f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a8:d1:c4:54:a2:aa:82:cd:05:c6:c0:44:d5:
                    6c:3a:7a:42:9d:40:9a:e8:be:24:b1:60:83:de:b2:
                    3f:38:53:d5:e4:1a:b7:8f:b5:e2:19:eb:39:19:fa:
                    6a:fc:a9:ff:9a:38:67:37:51:3a:d8:30:67:37:70:
                    cc:4f:9a:6f:50:38:91:bd:4f:42:3e:ed:fa:03:dd:
                    57:cb:a8:92:14:96:56:ef:a4:12:5d:27:20:3e:10:
                    9a:13:0c:c3:9a:ac:f3:ae:a2:58:a8:0f:e0:fd:f5:
                    bc:dc:42:98:9a:47:0e:5a:5f:ab:4e:f3:8e:51:fa:
                    98:69:2b:c1:ec:cd:8d:67:a2:19:c4:7f:67:41:af:
                    97:1f:3e:3f:99:d1:f7:71:67:6f:14:bb:5c:09:d0:
                    ed:55:db:16:89:90:06:09:ef:e8:4a:df:7e:f4:fc:
                    7e:42:29:e3:25:83:4f:a4:bc:5e:23:fd:52:4a:ec:
                    88:ec:8b:83:ab:23:01:61:fb:c6:71:ab:93:32:bc:
                    7d:69:49:2c:4d:11:96:48:37:d2:58:05:b3:68:e8:
                    c8:21:4a:cd:63:73:05:8b:1e:09:70:1b:4a:77:e9:
                    fe:0b:7f:62:f9:77:d1:f7:c2:af:14:c2:fb:fa:25:
                    6e:27:3f:7c:a0:79:5a:5b:e2:61:7a:1e:f3:bb:7c:
                    53:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8E:36:3D:7E:2E:16:46:AD:28:B7:68:41:75:8A:4C:31:A8:4D:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c1f8562-35e5-3180-b4df-e4605ff06b9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.186.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:71:73:ce:89:b2:9d:38:f2:d4:b0:72:73:cb:4c:9a:d0:40:
         37:0e:d1:c7:77:5a:ea:12:75:e0:16:fd:0c:fa:d8:cc:45:ae:
         76:04:8a:10:7a:7b:e5:5e:02:9f:ca:e6:1b:e8:1e:74:f0:5a:
         30:b2:ad:2e:f7:35:4a:73:e8:db:79:30:2c:45:12:a7:a5:17:
         31:50:b6:bb:01:b6:59:ca:8c:3f:a8:13:9e:b5:e9:40:59:c3:
         f1:18:b7:e6:b2:06:88:f6:5a:c7:5b:33:18:e9:05:fe:32:6b:
         aa:d6:05:55:7e:ce:86:d6:cd:19:01:c2:01:90:dd:df:15:cf:
         f4:44:f2:c2:e8:a1:c5:2e:c8:b8:7f:40:01:7f:22:f2:cc:4c:
         9b:d1:9b:28:aa:ec:b5:39:49:80:90:39:74:66:65:98:6c:23:
         a8:43:56:fd:65:e5:c8:cc:dd:5e:3e:3f:82:30:97:ee:3d:67:
         f8:36:14:98:b0:75:50:23:47:38:2a:69:a9:18:b0:cd:69:25:
         2e:6c:1c:d8:5a:8a:43:7f:fe:be:b5:a7:92:7f:b6:2e:cc:9f:
         88:74:cd:b2:56:db:1e:96:79:22:41:37:4d:46:68:04:08:be:
         c4:c2:53:66:91:12:57:ee:96:d6:6e:4c:ca:ed:78:b1:cb:da:
         0c:83:67:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:56 2025 by rpki-client on console.sobornost.net