Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/56e3582d-6c86-36b2-862e-b04ac3b1a8df.roa
File:                     56e3582d-6c86-36b2-862e-b04ac3b1a8df.roa (raw, json)
Hash identifier:          OD+Aw9uDgSNae7BG6foAoF9hOOWYhHk5vAwZbFU6bGY=
Subject key identifier:   58:11:46:FA:F5:BE:A4:1E:0C:56:CA:6E:DD:D8:CB:3E:1C:0F:06:46
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858497251EC2974401803A989A780
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/56e3582d-6c86-36b2-862e-b04ac3b1a8df.roa
Signing time:             Mon 07 Apr 2025 11:41:02 +0000
ROA not before:           Mon 07 Apr 2025 11:41:02 +0000
ROA not after:            Sun 06 Jul 2025 11:41:02 +0000
asID:                     9009
IP address blocks:        104.250.176.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:51:ec:29:74:40:18:03:a9:89:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Apr  7 11:41:02 2025 GMT
            Not After : Jul  6 11:41:02 2025 GMT
        Subject: CN=0b334a14-197f-4baa-a6ff-cf127903856e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c0:36:87:09:b4:7b:ed:5a:56:07:0f:f9:b5:
                    de:17:e2:87:d5:d6:c3:94:14:85:dc:2c:2b:12:c3:
                    57:e6:4b:d0:54:1c:a2:86:f6:3c:51:d1:3f:a7:56:
                    77:33:f5:d8:52:03:7a:6a:a3:db:aa:dd:dc:84:13:
                    95:1a:89:7c:0d:d9:a0:53:b3:1a:3c:b7:14:ed:3b:
                    70:da:5c:35:b0:29:f1:2f:b7:a5:e8:ba:42:80:d8:
                    47:1c:04:77:fa:2e:38:3a:9f:38:90:8e:5d:97:69:
                    bf:69:84:75:76:12:fd:b2:b3:c3:26:d2:b1:29:1e:
                    18:30:32:62:2c:e6:f6:7f:6a:cb:4c:35:e0:2f:87:
                    36:a0:51:3f:61:1b:c5:81:42:d1:e4:8c:b9:03:5d:
                    9c:04:e7:69:97:55:1c:2a:e9:8c:44:4a:54:3a:84:
                    63:58:6a:20:63:1e:28:22:cd:60:4a:f9:11:d3:f5:
                    ac:ba:87:81:cf:2a:7d:2f:40:4f:b5:48:ca:84:bd:
                    06:cf:fd:07:10:7d:e7:7f:45:2c:6c:bc:c0:5e:15:
                    db:87:ac:c6:21:7a:03:d1:9e:a5:6c:01:15:a7:c5:
                    22:25:f6:0a:68:b0:89:7f:5a:81:0b:77:46:9a:ef:
                    ba:0a:01:cf:f2:63:3f:e0:a8:c7:cb:39:7c:73:19:
                    29:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:11:46:FA:F5:BE:A4:1E:0C:56:CA:6E:DD:D8:CB:3E:1C:0F:06:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/56e3582d-6c86-36b2-862e-b04ac3b1a8df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:26:12:f0:bf:28:11:68:85:3d:9c:86:36:54:19:e8:6a:f7:
         6f:f8:50:04:db:b9:33:cf:5f:b5:4c:24:9e:37:58:4e:70:6d:
         20:b5:17:29:82:43:5c:43:e6:86:fd:23:68:65:18:23:30:9f:
         5f:8b:94:f5:b8:06:f2:0d:a2:7f:89:3f:1f:fe:b6:9a:43:7b:
         38:b7:b2:25:e7:b5:a6:1b:17:df:1b:2d:b4:8a:4e:5e:06:fb:
         42:51:bd:f4:50:00:4c:15:06:56:7b:ba:8a:6a:94:40:2d:67:
         a5:ce:ae:ea:91:47:bd:e2:4c:37:4f:8c:94:0c:c1:dd:ec:aa:
         f7:fa:63:6c:1e:32:a5:d8:c1:13:37:34:44:04:59:cd:61:14:
         60:12:a2:61:d4:1c:2a:ec:7c:f1:c5:1e:a3:bc:af:1d:ee:67:
         9a:5e:4d:83:54:49:69:ae:5f:d4:53:8b:54:1a:fa:cc:fb:2a:
         0a:c1:4e:91:c4:d9:13:2b:1a:82:03:ed:ee:d8:79:9a:4b:4d:
         fa:e9:a4:0c:03:c7:15:0e:97:2d:7a:f1:bc:b1:4e:75:d4:34:
         ae:08:6a:42:da:91:c8:96:66:97:93:50:3f:7e:d5:4f:77:5c:
         b0:e0:e1:9b:54:7b:d6:7a:c3:4f:59:21:12:64:04:a1:e2:f9:
         98:df:b3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:27:23 2025 by rpki-client on console.sobornost.net