Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/eee29780-d621-38a5-88f3-66f2279c1220.roa
File:                     eee29780-d621-38a5-88f3-66f2279c1220.roa (raw, json)
Hash identifier:          62oMv+16pHlusfxoircJJ+R2QRuy7IWAxxjQdEO6SoY=
Subject key identifier:   3F:7C:4E:F6:6D:38:76:50:E5:BB:4B:A0:A6:47:2C:C6:28:04:0C:85
Certificate issuer:       /CN=a2b83ae7-52b6-45b4-92c9-c12f7bb009f4
Certificate serial:       010D0C9F432858498339F06DE34F8215F69C8C84
Authority key identifier: 19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/eee29780-d621-38a5-88f3-66f2279c1220.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16509
IP address blocks:        104.249.160.0/24 maxlen: 24
                          104.249.161.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:f0:6d:e3:4f:82:15:f6:9c:8c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2b83ae7-52b6-45b4-92c9-c12f7bb009f4
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=7e986761-813f-45d6-a0f3-2e6601ee8941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2e:d4:1f:55:be:6d:33:4d:ed:74:1b:e8:7e:
                    2e:ae:36:b0:b5:35:39:66:35:50:e7:d5:92:1b:3a:
                    2d:60:91:81:9d:b9:a3:3c:9b:bc:e9:1a:52:ea:0b:
                    81:04:00:35:b8:eb:f4:52:95:60:0a:8d:88:93:50:
                    4d:3f:53:f6:13:6e:ff:f7:8b:9c:e3:89:d9:94:22:
                    93:d3:a5:f6:9d:e7:e2:f7:a5:44:7e:6e:8b:a2:24:
                    9d:77:d5:ab:3f:9c:ad:9f:66:11:89:51:90:27:20:
                    82:7c:09:23:8c:e2:7b:60:e5:30:aa:d4:8d:44:15:
                    0b:58:03:b0:37:68:57:89:17:ae:7a:ed:51:b1:ce:
                    d7:dc:78:30:af:27:a3:6e:da:3c:e1:a0:39:8b:13:
                    fa:14:08:bd:5d:93:8c:d0:2f:43:aa:73:64:65:a6:
                    d6:89:fd:7e:46:60:7b:98:75:f0:36:f1:91:29:a9:
                    dd:c7:d8:1a:a8:d2:9c:43:ce:c1:3d:3e:a4:49:1b:
                    bf:2c:fb:53:3c:5d:b0:80:76:33:67:f7:00:dc:be:
                    95:73:be:ae:76:fd:45:22:61:28:5e:a1:45:a7:c1:
                    47:72:6c:65:bc:5e:eb:ee:c9:95:05:21:ba:fa:e5:
                    34:6c:38:a1:83:50:bf:35:c5:c3:99:cf:8a:5d:1d:
                    ff:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7C:4E:F6:6D:38:76:50:E5:BB:4B:A0:A6:47:2C:C6:28:04:0C:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/eee29780-d621-38a5-88f3-66f2279c1220.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.crl

            X509v3 Authority Key Identifier:
                keyid:19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.249.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:78:0d:75:e1:20:3e:fe:80:ca:0d:83:90:0a:9a:9b:1c:e8:
         60:2d:46:ae:14:fd:e5:e6:b9:89:a4:77:40:4c:8f:8f:05:57:
         7c:6f:d2:6f:0b:51:66:fe:1a:57:5d:6a:66:3d:fa:43:d6:fd:
         67:ad:f8:c6:db:b9:54:1b:94:b7:63:96:aa:0a:a8:b2:e9:9c:
         0d:a8:e6:31:60:62:0c:90:fb:26:c3:50:d2:45:1e:55:b9:5a:
         dd:8a:d5:66:77:84:44:e9:93:0e:cc:35:3d:f6:0d:59:91:f5:
         d6:3e:a2:17:3e:ca:1a:0d:e6:67:51:ab:ba:cf:02:c6:58:b3:
         35:b3:bc:02:f0:90:d3:34:f4:da:fe:28:07:00:6f:06:c1:69:
         cc:04:4d:41:21:3e:8b:35:bd:3f:40:66:73:f7:4f:9c:2e:1c:
         76:60:1c:53:31:44:da:8d:47:2a:10:dd:92:78:37:e1:fa:e4:
         d4:10:35:a8:fa:0b:3a:2d:2b:9f:7c:b7:d8:0a:28:d5:59:42:
         c2:af:9f:75:4c:07:70:e5:ee:ff:92:85:64:23:04:1d:93:60:
         e5:ee:b4:57:ff:36:d0:54:17:50:9a:e7:7a:a1:60:f7:ed:b0:
         b5:ab:65:05:52:0f:97:9e:78:e6:55:ae:a1:33:f8:31:8b:62:
         94:71:34:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:13 2025 by rpki-client on console.sobornost.net