Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/06b87a17-da72-35cd-99c5-447ec65e01d5.roa
File:                     06b87a17-da72-35cd-99c5-447ec65e01d5.roa (raw, json)
Hash identifier:          0EizLzAirqYXM/bhOXx/dFETkTvbgaNEj6+NGPezibw=
Subject key identifier:   E7:73:28:D7:EE:54:96:E6:97:69:87:40:2D:90:D8:C4:75:58:59:AF
Certificate issuer:       /CN=67b004e8-3b23-4f9d-9325-beac85825fe1
Certificate serial:       010D0C9F43285849350E83C4DE2AA5EC27AA54A0
Authority key identifier: 40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/06b87a17-da72-35cd-99c5-447ec65e01d5.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     22224
IP address blocks:        23.187.128.0/24 maxlen: 24
                          207.174.168.0/22 maxlen: 24
                          2602:fed6::/36 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:83:c4:de:2a:a5:ec:27:aa:54:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67b004e8-3b23-4f9d-9325-beac85825fe1
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=c17b95fe-b143-446b-aacc-3e84cc6cabf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6c:b5:f0:db:51:d7:06:bc:e2:f5:98:fd:71:
                    4b:98:f9:41:36:39:f4:0d:a9:04:e2:ba:bc:be:4e:
                    b2:55:9d:a0:a8:a8:37:c8:8c:72:9a:65:7b:d6:09:
                    24:99:50:95:df:3a:af:58:53:16:b5:55:4e:4d:b2:
                    0f:a5:25:95:2c:7b:2c:59:8d:66:94:15:d5:94:82:
                    65:37:28:d9:4e:6f:33:a7:91:15:c3:f1:d7:74:c4:
                    4f:4a:01:09:bf:df:1d:8b:71:13:de:01:ab:76:63:
                    72:4d:8f:af:06:49:ff:1f:8b:59:77:ae:8e:2f:cf:
                    dc:fe:98:c0:60:28:4f:a7:02:69:cf:8e:c4:e8:a4:
                    72:cf:56:a0:90:00:2c:9e:e7:51:40:bb:f3:e6:29:
                    73:72:a0:2e:43:21:c3:ec:94:96:c8:b5:e8:17:0e:
                    ac:09:1b:2a:fb:ad:b3:1b:51:47:78:7a:64:a8:35:
                    d8:be:3e:ba:be:5a:fb:d3:b1:f8:15:f6:df:a0:85:
                    d9:2f:71:21:64:c2:9f:96:4d:23:c9:bb:09:c9:ac:
                    d7:cd:c2:16:57:12:3b:9d:41:8e:8f:f0:80:e2:33:
                    f8:09:ef:af:1c:c4:d4:44:46:53:84:97:54:9c:02:
                    a1:9e:dc:e5:44:dc:d1:31:f5:e2:91:22:3a:3c:30:
                    69:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:73:28:D7:EE:54:96:E6:97:69:87:40:2D:90:D8:C4:75:58:59:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/06b87a17-da72-35cd-99c5-447ec65e01d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.crl

            X509v3 Authority Key Identifier:
                keyid:40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.128.0/24
                  207.174.168.0/22
                IPv6:
                  2602:fed6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:51:c4:ae:8f:5a:a9:57:84:25:97:dc:a7:87:db:26:a9:45:
         89:1b:3c:3b:48:bb:0a:d1:dd:8d:7a:dc:28:25:1a:78:b6:e7:
         3d:6d:77:cb:4e:00:66:49:8d:09:8f:73:dd:0d:15:59:44:22:
         e2:89:e3:96:e6:ca:65:38:ea:83:00:4f:7b:27:64:1d:59:ed:
         0b:df:19:99:97:fe:03:08:ff:96:a2:1c:29:b6:8e:f5:e2:af:
         c3:32:12:f1:2e:74:a9:d1:e7:7f:11:f2:70:60:c1:cd:49:51:
         f3:70:58:68:ca:43:20:00:a1:5d:c5:bb:13:62:39:a6:88:af:
         d2:7c:a5:94:0e:56:77:65:bb:9b:2e:55:dc:53:4b:7b:14:3a:
         c3:06:e1:84:fd:4e:c2:13:66:55:33:8c:f8:1f:94:55:d0:13:
         06:ed:ee:0e:55:15:ca:e5:48:84:03:1c:fb:65:3e:5d:5a:40:
         bc:f1:5c:4c:cd:b5:d6:78:11:4b:0e:30:8e:e0:8c:58:89:a6:
         dd:fa:3c:98:db:a8:3b:54:69:84:1f:67:50:a9:c6:a2:fc:b1:
         ab:ce:39:79:a8:7d:c9:90:71:78:07:0c:ad:2f:be:1b:2c:e6:
         42:d8:02:8f:09:2f:8b:a9:d9:24:00:7a:38:5d:49:2c:cb:6c:
         5a:19:d6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:12 2025 by rpki-client on console.sobornost.net