Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/374a3ebf-2b4e-3e32-81d7-17250d12ee58.roa
File:                     374a3ebf-2b4e-3e32-81d7-17250d12ee58.roa (raw, json)
Hash identifier:          vnjydQ15/JMBZm2Dc0d2xCHYKZH87Xp3G01xEt7IJl4=
Subject key identifier:   BD:BD:17:A4:F9:BA:DD:00:56:75:45:2B:B8:8A:04:2A:F0:CB:BA:CF
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858497F099F6AAAD878364FBA9880
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/374a3ebf-2b4e-3e32-81d7-17250d12ee58.roa
Signing time:             Sat 12 Apr 2025 01:00:48 +0000
ROA not before:           Sat 12 Apr 2025 01:00:48 +0000
ROA not after:            Fri 11 Jul 2025 01:00:48 +0000
asID:                     7029
IP address blocks:        173.186.224.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7f:09:9f:6a:aa:d8:78:36:4f:ba:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 12 01:00:48 2025 GMT
            Not After : Jul 11 01:00:48 2025 GMT
        Subject: CN=678df4df-a502-4964-9620-2c1a4a88263a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7f:bb:41:bc:9a:76:ff:bc:17:51:aa:a6:3f:
                    96:73:d3:ec:48:78:1d:b1:7b:d4:ce:a8:49:24:c2:
                    4c:56:35:b4:f3:44:92:a6:10:bd:ff:02:e1:dc:1c:
                    e8:d1:0c:6a:59:49:12:92:04:85:3c:41:12:89:94:
                    7d:9f:3e:0e:c8:dd:50:95:70:e8:7e:c0:98:f7:41:
                    1e:5f:74:ba:1c:76:ed:85:59:52:f7:d4:26:a7:b1:
                    f7:71:2b:12:60:2f:1d:bd:1d:50:00:bd:72:8f:9a:
                    75:ab:20:d3:f3:e8:c2:33:05:7f:55:2c:70:2d:b2:
                    b2:bf:b0:bb:76:c2:02:55:d4:90:c1:1e:71:b3:06:
                    39:64:aa:08:2f:aa:e7:e4:8c:2d:a1:c9:ff:f0:17:
                    b6:c7:82:bb:90:00:7c:4d:1e:5b:7b:eb:72:14:d0:
                    8c:87:9c:4e:08:fa:6b:9d:e9:0a:8c:11:c5:e8:70:
                    5e:0c:12:55:ad:be:93:ca:a5:76:e8:68:15:ca:9e:
                    bf:ba:cf:12:0c:4c:10:f4:d0:a1:39:91:a6:40:60:
                    cf:92:ef:5e:7b:da:11:75:be:8e:b6:f6:43:8a:1d:
                    c1:35:7b:10:93:21:d4:a7:4c:9d:8c:cd:d5:75:9c:
                    45:3c:75:91:c4:dc:9a:a2:75:24:55:37:c5:10:a7:
                    db:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BD:17:A4:F9:BA:DD:00:56:75:45:2B:B8:8A:04:2A:F0:CB:BA:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/374a3ebf-2b4e-3e32-81d7-17250d12ee58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.186.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:2a:9d:d1:cd:31:7e:ff:0f:23:61:c3:4b:9e:6b:f0:6e:e2:
         a6:1c:0f:80:04:46:a6:0d:db:f5:b8:87:69:a9:9d:90:ed:af:
         4f:77:de:60:35:87:bb:56:d7:4f:8a:20:d9:ea:91:6f:04:80:
         c9:db:ef:2b:6c:b2:6c:02:b5:cb:87:5b:e7:ae:54:84:55:43:
         b5:0c:c0:f8:34:9e:32:e8:5c:d4:45:e3:f7:cc:d9:a9:a9:96:
         4d:31:49:90:10:b6:d6:3a:d8:dc:fa:0b:4c:69:b2:6c:56:32:
         e6:22:f0:21:30:b2:ec:f6:89:59:03:89:cb:99:ee:8c:59:19:
         d1:23:ee:2c:3f:3d:28:6e:60:37:82:10:fe:31:d6:fb:27:8f:
         f8:24:eb:31:cc:be:15:48:06:8f:ec:a5:59:2e:a5:e0:3f:b4:
         82:47:d6:40:43:73:72:dc:94:3d:d9:0d:e2:7f:c7:ad:b6:f8:
         ea:56:5b:f9:5f:b2:11:ce:c2:b6:f5:3d:8e:0c:23:6e:19:40:
         31:8b:95:36:77:35:2f:dc:64:96:ec:2d:77:0b:cc:66:2f:5e:
         7a:d5:cf:d1:7f:fa:67:26:17:64:6c:f0:af:ca:99:8c:95:d7:
         9c:65:7f:6f:62:cf:7a:e9:a8:5e:15:b5:64:e1:38:b2:de:aa:
         b5:ac:e2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:04 2025 by rpki-client on console.sobornost.net