Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d5c8ec6-b4dd-3f2a-b245-0e05f8236151.roa
File:                     5d5c8ec6-b4dd-3f2a-b245-0e05f8236151.roa (raw, json)
Hash identifier:          SRoQTEGC0MsT//A/mgEPZf7VQ3BR74xDZ1aYMjR4aF0=
Subject key identifier:   54:54:26:E1:D8:E1:F2:03:BC:AA:52:FD:7C:DB:F0:C3:55:C2:C3:BB
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858496A19B8E78DF0B60E0CCC97D0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d5c8ec6-b4dd-3f2a-b245-0e05f8236151.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     7029
IP address blocks:        166.82.8.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:b8:e7:8d:f0:b6:0e:0c:cc:97:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=55353563-c0e7-4ee8-a263-851d5323e37b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:50:3e:19:ba:92:59:5e:07:38:e3:4f:37:e9:
                    0e:63:6b:a3:50:67:a7:9e:4a:b4:2b:4a:fa:5d:88:
                    51:24:88:11:3b:3b:aa:5f:48:c5:79:99:92:7e:d2:
                    86:bf:f3:03:94:6f:f8:24:a3:cb:9d:55:26:12:62:
                    cb:85:3e:99:f6:5c:db:3a:1a:2b:8b:84:7b:00:66:
                    47:95:78:d7:91:ba:84:be:f8:4c:e1:d0:fb:17:77:
                    1a:6c:c7:8d:a7:e1:08:b5:a2:1e:4f:17:96:ce:7c:
                    40:b2:6d:5e:2a:e2:cf:c9:90:75:41:8f:77:0b:71:
                    4f:2c:42:74:85:39:5d:bc:e2:e3:b5:42:47:27:de:
                    46:5f:dd:17:79:1e:85:bf:6f:55:45:41:07:63:b9:
                    6b:6b:7e:e9:42:71:50:28:d0:3b:5e:47:60:c0:13:
                    c2:c1:d7:fa:71:ce:12:f9:7e:5b:8c:1b:b1:dd:88:
                    02:a2:71:16:bc:72:42:36:29:c6:84:c2:db:45:ed:
                    37:75:eb:4b:04:27:90:41:04:5b:97:64:bd:78:86:
                    c9:48:9d:78:6a:c4:77:99:11:c8:d7:0c:f3:ea:1c:
                    27:6d:3a:86:9e:a6:d1:1b:47:99:bc:4c:50:13:8e:
                    0e:d0:69:dc:d3:1b:73:4a:8b:51:d2:59:d3:c0:ce:
                    b6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:54:26:E1:D8:E1:F2:03:BC:AA:52:FD:7C:DB:F0:C3:55:C2:C3:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d5c8ec6-b4dd-3f2a-b245-0e05f8236151.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.82.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:5c:2b:a7:10:2f:a7:ce:98:38:0d:73:e7:07:1a:74:f5:af:
         28:0b:70:41:4c:fc:90:55:48:4e:63:66:b2:11:15:c1:02:fe:
         af:26:43:37:ad:8b:a6:4e:08:3c:bf:c7:fe:b5:3e:7c:02:e1:
         f4:5e:de:7b:c5:c3:b2:fe:15:1d:77:9a:3e:3f:54:4c:ef:87:
         72:97:9b:7a:26:a2:57:b9:26:19:89:c2:1c:c3:e7:da:ef:a6:
         5a:75:90:4b:b4:6e:91:b4:cf:77:bc:cf:b4:1b:89:b5:5f:aa:
         c5:46:a2:c9:ba:f7:b9:39:31:e4:0f:1a:9e:40:1e:bd:5a:37:
         d5:78:c9:ac:b1:34:da:5c:2c:f7:c4:23:73:43:e8:d1:8d:96:
         82:a7:a3:2c:37:b0:df:a6:1f:c6:47:3d:05:8f:b9:11:b4:db:
         c1:a8:e3:30:f9:fe:e9:43:64:90:d3:84:18:32:ad:8d:2d:e5:
         b8:08:16:ca:2f:9f:c9:34:68:cc:25:74:76:bf:e0:08:e9:18:
         84:7c:91:70:59:96:b1:4f:ab:df:5d:a3:94:d4:aa:67:24:df:
         c8:87:5c:1b:3a:cf:19:73:ab:5b:e1:38:6a:2f:1b:cf:44:76:
         91:e6:bb:f7:0d:01:82:05:4e:97:86:8d:65:d5:06:70:8a:42:
         3c:4e:a1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:05 2025 by rpki-client on console.sobornost.net