Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/fb0f33a8-7862-3f4c-a6bc-490b9d39a7fa.roa
File:                     fb0f33a8-7862-3f4c-a6bc-490b9d39a7fa.roa (raw, json)
Hash identifier:          vNvr+AqY1v2G0+5eYNMuw/d1Ujhre1iiBz/YvoeKC48=
Subject key identifier:   DB:5A:A0:1F:6F:36:CA:A7:08:56:64:B0:7E:13:7B:A3:D1:EA:C8:75
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584971143078065E370F41E1C280
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/fb0f33a8-7862-3f4c-a6bc-490b9d39a7fa.roa
Signing time:             Mon 07 Apr 2025 01:00:47 +0000
ROA not before:           Mon 07 Apr 2025 01:00:47 +0000
ROA not after:            Sun 06 Jul 2025 01:00:47 +0000
asID:                     395075
IP address blocks:        216.137.166.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:71:14:30:78:06:5e:37:0f:41:e1:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Apr  7 01:00:47 2025 GMT
            Not After : Jul  6 01:00:47 2025 GMT
        Subject: CN=f2c3081f-9313-43ba-ad5b-85b2a5f5554b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b9:78:aa:b6:12:7a:03:e4:a3:ab:d6:98:1c:
                    1a:20:4a:d6:f4:a4:38:8e:f8:9e:59:99:e2:db:c2:
                    e8:8a:c8:5f:fb:42:24:53:6b:04:60:9e:01:4f:b1:
                    5e:b6:4e:93:a8:62:08:ee:e0:ea:23:1c:17:79:7c:
                    47:45:c4:49:38:22:d8:ca:66:37:9e:49:9c:10:a9:
                    9e:77:32:0f:cc:a8:cd:98:de:c6:a2:85:7e:67:f2:
                    5f:4d:57:7b:7d:1f:e1:d2:02:76:2e:07:1d:4e:42:
                    63:4f:9f:41:8f:f7:bc:ef:f3:d0:b9:da:4f:6d:50:
                    e6:15:47:7b:af:9c:50:c8:2a:bf:df:da:98:c7:08:
                    d5:ac:4d:d4:51:86:98:74:90:c8:96:a4:17:f1:fe:
                    c0:9c:fc:a5:b7:35:3b:19:e9:d3:dd:15:b0:14:ae:
                    1a:52:ec:93:c6:0a:07:bc:3b:3a:37:73:d0:4b:72:
                    92:e5:d0:d9:bf:48:59:69:bc:05:d4:11:9e:24:49:
                    74:d5:0d:b8:2a:75:ae:d3:b6:5f:b5:d6:b6:73:fa:
                    af:f8:28:e4:fc:31:70:ec:75:6f:3b:eb:d7:18:e9:
                    1f:8a:28:04:a6:d6:bd:08:7a:e7:62:ee:9c:1f:07:
                    d6:3a:15:95:c6:6a:c8:41:f2:91:9d:5d:6e:82:bd:
                    ed:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:5A:A0:1F:6F:36:CA:A7:08:56:64:B0:7E:13:7B:A3:D1:EA:C8:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/fb0f33a8-7862-3f4c-a6bc-490b9d39a7fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:9c:a7:8d:33:d8:36:ba:2c:92:d2:4f:91:95:f0:81:73:b2:
         ff:05:db:f0:52:f9:15:1d:2f:52:80:20:b7:b1:fb:f1:8e:db:
         bb:3c:8d:10:e2:e2:42:47:9b:64:48:6f:ca:d0:12:b5:e0:28:
         72:a7:68:23:92:cc:8c:30:2c:9d:a8:b2:c3:69:87:e2:8a:c5:
         84:82:6f:6d:c1:3f:80:fe:30:32:30:96:38:94:ab:b4:48:f7:
         c4:72:6c:bf:c3:e4:b0:b1:a9:4a:ad:7c:18:b7:17:57:cc:1b:
         49:55:07:ef:39:c4:78:fd:97:22:00:2d:d2:2a:7e:9f:e0:14:
         13:3e:ee:e8:77:ac:5d:b4:c5:fe:f3:d9:78:1b:51:de:96:06:
         a5:60:3c:56:e5:6a:0d:55:98:20:ca:25:89:4b:91:a4:03:5b:
         79:b4:eb:05:4d:f4:29:3a:7e:e2:69:2b:0b:b7:c4:5c:a3:4f:
         9e:3b:55:ad:3f:c6:54:46:3f:1f:da:3b:41:62:64:62:f3:67:
         5c:5b:9b:7b:52:90:ac:87:3f:fe:6a:27:0c:60:7a:0f:36:6a:
         7a:f6:31:bf:67:0d:c3:f4:2c:fc:f4:62:b1:9f:5e:15:a5:01:
         a7:d3:7d:31:b8:88:cd:74:48:1e:30:36:ba:15:3e:74:98:85:
         24:61:b2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:29 2025 by rpki-client on console.sobornost.net