Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/1394d0ce-5fb2-38f2-9900-16d12286165f.roa
File:                     1394d0ce-5fb2-38f2-9900-16d12286165f.roa (raw, json)
Hash identifier:          yaixaR1UyIppdIy/Q4XP7n5BjyEqcCA6RgsIZFdLaE0=
Subject key identifier:   CC:5F:92:04:BC:E0:77:62:5B:5B:A2:C2:D3:EC:7A:6D:AB:B8:85:53
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F432858495D896647AA12EC64A1252380
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/1394d0ce-5fb2-38f2-9900-16d12286165f.roa
Signing time:             Mon 31 Mar 2025 01:00:47 +0000
ROA not before:           Mon 31 Mar 2025 01:00:47 +0000
ROA not after:            Sun 29 Jun 2025 01:00:47 +0000
asID:                     22652
IP address blocks:        68.67.58.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5d:89:66:47:aa:12:ec:64:a1:25:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Mar 31 01:00:47 2025 GMT
            Not After : Jun 29 01:00:47 2025 GMT
        Subject: CN=449e90c7-600e-4e26-b1d2-c961113483e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ab:23:04:2f:b4:d6:09:37:5f:e2:00:ea:3f:
                    01:cd:79:73:13:a8:f9:95:5f:74:a8:ff:cd:dc:ab:
                    cf:dd:e6:bb:93:7f:a4:10:1b:c4:09:f1:89:f8:e1:
                    48:c5:57:ef:73:5f:d4:b2:ea:9e:63:f3:8e:6f:05:
                    c7:20:de:20:cc:35:58:8a:34:fe:4e:09:24:f7:b5:
                    f4:26:6c:be:4e:ad:97:87:21:bc:a7:fc:e6:70:a2:
                    60:09:d5:3a:65:82:ab:ee:a7:8f:7f:fc:8f:bc:f9:
                    91:69:71:a1:2e:a1:e5:fb:66:3a:9d:89:27:2f:96:
                    77:0b:be:8f:0c:91:e7:c6:83:76:ad:2a:6a:65:c4:
                    7a:08:4f:00:13:54:03:86:35:b1:0c:6b:4a:5f:1c:
                    40:52:e4:5d:ce:9d:fa:15:f1:32:52:fa:8d:64:c8:
                    9b:0c:0b:aa:86:3b:58:b3:18:51:d9:3f:ab:ed:3e:
                    b7:a9:7d:7c:23:a5:7f:e3:a3:b6:25:9a:4e:f0:0a:
                    cf:b5:74:ab:cf:0b:08:e3:6b:4f:83:f3:18:5c:d6:
                    86:30:77:e3:f0:d9:08:62:05:c4:9c:6b:e5:5b:ee:
                    95:b5:a5:4e:47:ce:fc:36:6b:d8:9d:fc:47:31:ed:
                    cc:77:ff:ca:9b:f8:47:65:2d:aa:33:2a:f9:a1:11:
                    51:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5F:92:04:BC:E0:77:62:5B:5B:A2:C2:D3:EC:7A:6D:AB:B8:85:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/1394d0ce-5fb2-38f2-9900-16d12286165f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:fc:5b:a7:00:a4:9f:93:e1:a8:15:ef:cd:63:67:e8:31:1b:
         dc:80:6c:a1:3e:16:cc:79:93:bc:50:ac:2f:ec:f6:b4:8d:69:
         76:be:91:4b:0b:0e:76:6f:5c:49:d0:ec:e9:08:5d:d4:85:59:
         f5:2e:e1:4c:d9:18:8d:5c:4d:87:4a:2a:97:0d:ff:67:89:62:
         e6:d8:4c:7c:64:7b:6a:e1:a6:2a:78:e9:90:98:48:80:50:7e:
         95:86:51:27:91:f4:22:a3:8a:b8:30:58:ca:8d:1c:be:b2:24:
         75:d1:8c:65:3a:7a:69:e1:04:79:89:56:47:49:97:cd:d4:71:
         4c:02:0e:ad:85:21:7e:f5:60:81:fa:91:8d:45:11:e8:1d:83:
         9d:c8:a1:57:42:4c:d6:ce:da:a2:0f:d0:8d:c2:f4:c5:f0:fc:
         26:e0:fd:de:94:74:58:7d:26:ea:6c:34:42:07:d9:72:e7:f9:
         57:5c:21:e3:72:e1:4d:0f:53:f7:5c:9c:3f:28:ff:31:f8:2b:
         61:13:de:b7:cb:96:ba:aa:b8:70:64:39:73:16:39:92:07:0b:
         9a:99:75:0b:aa:ff:f3:df:40:33:08:a0:e3:ea:ea:82:c5:48:
         fc:ff:6c:a4:90:37:4e:3d:d9:76:59:60:ca:9d:77:b8:49:a2:
         5d:46:04:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:29 2025 by rpki-client on console.sobornost.net