Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/053ba3ca-d0ed-3228-b2aa-a21615abd21d.roa
File:                     053ba3ca-d0ed-3228-b2aa-a21615abd21d.roa (raw, json)
Hash identifier:          mAFaiA5qkcOuWNvY7ueemvv09YzTnvCIJzy+h2kRY/M=
Subject key identifier:   A4:2C:A9:D2:5D:CF:33:4B:D0:43:45:3A:00:DD:02:01:31:B4:8E:C9
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584960541461DB461E6D1D5D9D80
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/053ba3ca-d0ed-3228-b2aa-a21615abd21d.roa
Signing time:             Tue 01 Apr 2025 01:00:47 +0000
ROA not before:           Tue 01 Apr 2025 01:00:47 +0000
ROA not after:            Mon 30 Jun 2025 01:00:47 +0000
asID:                     22652
IP address blocks:        184.95.203.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:60:54:14:61:db:46:1e:6d:1d:5d:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Apr  1 01:00:47 2025 GMT
            Not After : Jun 30 01:00:47 2025 GMT
        Subject: CN=f7dae294-5a36-4afc-8c85-369d29220bec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ec:50:f9:71:12:37:60:79:bb:db:4a:59:43:
                    ac:38:89:c7:69:b4:ed:fd:02:e5:b9:47:f2:98:49:
                    2e:b7:4c:45:79:f7:c1:84:3d:74:4e:63:6c:6f:93:
                    5d:c4:98:7c:a0:fd:1b:1b:91:7c:11:0f:f3:06:89:
                    5b:8a:11:e5:83:86:9f:ee:1f:60:fd:d9:af:6c:52:
                    fc:24:2b:5b:ed:07:e0:65:76:61:72:a8:68:23:ab:
                    13:0c:57:90:f1:32:a6:53:83:85:36:0b:58:99:35:
                    f8:b2:36:86:c6:b5:74:01:4c:fe:cb:70:e3:4e:06:
                    96:6a:14:0c:52:21:e0:e8:d2:80:0b:36:51:f3:22:
                    31:43:21:3f:c8:21:d5:04:09:4b:33:10:31:79:36:
                    90:f3:7d:b1:3d:3c:c0:e7:39:2b:f8:21:11:f8:bd:
                    5d:ea:c8:01:9a:52:c3:0f:85:5e:e0:1a:64:42:82:
                    83:d2:6a:fa:ef:e8:b7:5c:86:fd:4f:40:5c:45:93:
                    a5:c2:e2:6b:e4:13:86:99:9f:bb:83:e4:52:9a:f6:
                    0d:74:a6:16:47:ca:6c:58:80:6a:56:9a:1e:71:25:
                    ea:e2:21:53:c5:48:89:76:b0:ba:15:c0:67:d2:6e:
                    3a:81:b6:15:89:ee:67:41:4a:f9:97:4e:fa:68:1b:
                    11:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:2C:A9:D2:5D:CF:33:4B:D0:43:45:3A:00:DD:02:01:31:B4:8E:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/053ba3ca-d0ed-3228-b2aa-a21615abd21d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.95.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:ec:8a:01:a7:5f:ad:27:ba:fe:17:9f:38:22:3e:d7:53:e9:
         11:f2:59:52:e9:80:e0:69:2b:47:58:48:bf:1b:44:ee:36:b3:
         57:68:e2:06:af:46:33:d3:91:76:c1:42:b0:7b:2c:2f:4a:d0:
         4c:ea:b7:d3:74:74:c0:e5:29:9c:fd:bb:0b:e6:00:bb:a7:66:
         53:43:02:9b:30:82:bb:d1:95:e9:ec:d3:60:3e:ee:86:41:1b:
         39:ee:2c:cf:33:92:57:47:d9:2a:81:73:ed:6c:ca:fa:5f:59:
         9f:20:13:e2:f4:58:82:5c:0d:f4:80:91:b6:5d:04:4b:d8:b4:
         a6:e8:d5:f9:f6:2b:d5:a5:24:9f:76:05:36:08:d7:ff:5b:c7:
         73:01:13:f5:6f:b1:10:ed:fe:2a:ca:db:2a:a5:31:66:3b:e2:
         b6:5c:67:4a:23:45:35:2e:e9:72:20:30:1c:e8:e1:f3:d6:09:
         19:c9:ff:1b:e2:43:f1:d8:2a:7d:78:dc:89:c6:22:0a:b7:21:
         8d:51:3a:21:29:f7:06:98:ee:0f:c4:0d:15:de:98:dd:77:5e:
         61:e5:b5:02:96:1b:f9:1e:7f:29:63:2a:eb:ca:5a:41:4b:0e:
         96:68:b2:d3:bd:1e:05:79:85:ae:34:73:85:0c:b0:df:ec:06:
         67:14:c7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:29 2025 by rpki-client on console.sobornost.net