Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/93609b81-7549-330a-a052-bca3bd4d9e8f.roa
File:                     93609b81-7549-330a-a052-bca3bd4d9e8f.roa (raw, json)
Hash identifier:          Dlh3T/vdgGtIHxHKCGjG8ppRxpcrOJDiElbgAoF11cg=
Subject key identifier:   A8:15:62:63:B1:90:85:77:B6:1E:AA:12:20:E3:19:4E:23:57:A8:DD
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584930DE73AAAD3EF40E90ABC700
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/93609b81-7549-330a-a052-bca3bd4d9e8f.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     212238
IP address blocks:        104.250.181.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:73:aa:ad:3e:f4:0e:90:ab:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=cde8c679-45f4-4371-9dc4-f2d1dd0994b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:69:e2:1b:69:67:fc:c2:de:3b:97:78:9b:0e:
                    a6:1e:bd:f0:f8:93:de:92:f4:e4:7d:b4:9d:c8:e8:
                    cc:7f:37:bf:f4:44:f5:06:ac:95:50:50:97:40:f3:
                    14:3d:94:02:d6:d3:27:f2:db:fc:76:94:6b:f8:d1:
                    02:8b:55:97:b9:33:7d:b5:6b:02:95:af:72:2e:8a:
                    aa:54:58:a3:d9:ce:8d:dc:69:51:da:10:14:52:df:
                    dc:2c:d9:ba:be:3d:40:7f:9e:8f:c2:11:85:59:40:
                    0d:5b:51:d1:dc:bb:53:4e:10:18:e4:39:b7:66:aa:
                    1a:97:05:78:58:a8:b1:68:d5:6a:d2:31:bb:99:77:
                    dc:99:8c:f6:c4:dd:2e:e5:a2:2f:62:18:0d:e0:e0:
                    29:88:51:74:cb:c7:4d:c9:b5:62:1e:19:5d:08:88:
                    97:c3:57:78:24:0a:db:f9:90:d9:15:f2:df:42:11:
                    d0:80:39:fd:d7:1a:14:2d:1b:e7:c8:ff:cb:b6:7e:
                    53:75:a3:f7:0f:9d:48:ec:a6:ca:bd:55:6e:bf:58:
                    0e:d7:88:50:1b:b7:16:7b:d1:98:21:78:0e:ff:a7:
                    93:4e:b1:60:e3:cd:d3:54:e2:64:ea:0c:da:0f:ee:
                    53:be:be:a9:0b:34:5f:04:25:9b:d4:5d:6c:fb:41:
                    27:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:15:62:63:B1:90:85:77:B6:1E:AA:12:20:E3:19:4E:23:57:A8:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/93609b81-7549-330a-a052-bca3bd4d9e8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:bf:46:71:14:19:c9:32:13:5f:31:44:5c:35:63:57:bc:19:
         fe:51:44:2e:7e:12:3b:d8:99:89:78:2c:00:42:8c:3a:35:0e:
         1a:68:d3:93:22:d4:15:3a:87:04:6b:17:20:87:30:e0:bd:7a:
         56:0e:fe:f8:c9:c5:36:ae:49:f9:f8:c0:c2:4b:74:1e:ca:f0:
         27:62:dc:5f:2e:a5:0c:f7:c0:3b:0d:70:8b:23:7c:84:3c:ff:
         ef:dd:9a:5a:4f:a7:e2:e9:28:0a:19:8a:ae:55:aa:d5:e6:02:
         0a:ce:d7:cd:e1:e2:fc:75:1d:06:73:b4:99:57:da:64:94:ab:
         60:08:97:6e:52:d4:4e:61:40:ff:7e:f8:1e:1f:1f:a8:1d:ca:
         fa:c6:f5:aa:d1:5f:f7:4b:23:25:5a:05:f8:f4:8c:db:7d:d8:
         38:74:95:14:97:13:37:eb:5b:5f:ae:02:32:c4:40:23:ea:ad:
         8b:8e:0f:76:4f:35:78:1e:0c:b4:2a:99:95:2c:b0:4f:23:cc:
         c6:25:2c:aa:1f:2c:e9:05:31:1a:46:a4:50:4c:17:8c:07:bc:
         dd:2d:68:4b:7c:8d:8e:cc:58:f5:d0:03:f5:4b:e5:22:45:da:
         fb:72:5f:56:7c:4d:1f:d9:ac:0f:e5:28:aa:de:38:c1:32:a1:
         18:80:b9:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3nOqrT70DpCrxwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk
Y2RlOGM2NzktNDVmNC00MzcxLTlkYzQtZjJkMWRkMDk5NGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32niG2ln/MLeO5d4mw6mHr3w+JPekvTkfbSd
yOjMfze/9ET1BqyVUFCXQPMUPZQC1tMn8tv8dpRr+NECi1WXuTN9tWsCla9yLoqq
VFij2c6N3GlR2hAUUt/cLNm6vj1Af56PwhGFWUANW1HR3LtTThAY5Dm3ZqoalwV4
WKixaNVq0jG7mXfcmYz2xN0u5aIvYhgN4OApiFF0y8dNybViHhldCIiXw1d4JArb
+ZDZFfLfQhHQgDn91xoULRvnyP/Ltn5TdaP3D51I7KbKvVVuv1gO14hQG7cWe9GY
IXgO/6eTTrFg483TVOJk6gzaD+5Tvr6pCzRfBCWb1F1s+0EnFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKgVYmOxkIV3th6qEiDjGU4jV6jdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTM2MDliODEtNzU0OS0z
MzBhLWEwNTItYmNhM2JkNGQ5ZThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPq1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHC/RnEUGckyE18xRFw1Y1e8Gf5RRC5+EjvYmYl4LABCjDo1Dhpo05Mi
1BU6hwRrFyCHMOC9elYO/vjJxTauSfn4wMJLdB7K8Cdi3F8upQz3wDsNcIsjfIQ8
/+/dmlpPp+LpKAoZiq5VqtXmAgrO183h4vx1HQZztJlX2mSUq2AIl25S1E5hQP9+
+B4fH6gdyvrG9arRX/dLIyVaBfj0jNt92Dh0lRSXEzfrW1+uAjLEQCPqrYuOD3ZP
NXgeDLQqmZUssE8jzMYlLKofLOkFMRpGpFBMF4wHvN0taEt8jY7MWPXQA/VL5SJF
2vtyX1Z8TR/ZrA/lKKreOMEyoRiAuXo=
-----END CERTIFICATE-----
Generated at Wed Apr 16 03:27:23 2025 by rpki-client on console.sobornost.net