Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0745385a-2762-3c9c-bb2b-b9dd0b8ae662.roa
File:                     0745385a-2762-3c9c-bb2b-b9dd0b8ae662.roa (raw, json)
Hash identifier:          Rutx2dfzf54JqzcW+91eM+Ayozu4FF5PoXvHlrWT4F0=
Subject key identifier:   A4:33:4C:3E:2D:ED:5C:AB:F8:43:BD:4B:C0:32:90:D0:13:65:73:85
Certificate issuer:       /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial:       010D0C9F43285849780F0FC3D3B0069691DD3980
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0745385a-2762-3c9c-bb2b-b9dd0b8ae662.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     13536
IP address blocks:        207.136.247.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:0f:c3:d3:b0:06:96:91:dd:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=8cf0a9b5-46ae-4829-ab6c-fe873f7d97cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:00:ce:c4:61:25:af:f4:f3:a9:c0:c5:cc:cd:
                    68:f0:b1:2c:3d:42:33:ab:95:87:3a:ac:9f:91:ed:
                    d2:a6:6a:65:a1:07:1c:2f:31:47:f0:64:2a:2f:3e:
                    a7:31:b7:e4:55:ac:55:bc:24:78:b2:de:cd:0a:50:
                    35:b1:60:9d:e1:50:8f:62:41:bf:30:cf:fa:ef:96:
                    35:e7:8b:4e:2f:da:6f:c0:3c:f9:c9:bc:65:f7:9a:
                    9b:b4:57:b3:50:79:fd:55:f2:fb:e8:93:99:55:db:
                    9f:78:fd:86:26:11:19:89:1e:28:33:29:0e:bc:d9:
                    ba:b3:10:be:be:10:a4:d2:25:54:79:4a:a6:db:f5:
                    62:34:6f:3a:cf:0e:56:55:a1:96:92:e8:33:d6:7d:
                    59:46:c5:1c:59:28:67:22:75:cb:6b:e6:c2:ff:41:
                    35:2f:d4:1e:93:11:02:c5:71:56:bf:29:9a:cc:6d:
                    3b:ca:9a:76:51:4e:d3:a3:cd:a2:ac:35:ec:2f:a9:
                    57:37:09:ef:cf:31:98:50:0a:b6:bb:3b:26:92:58:
                    23:00:0b:98:a0:38:13:6f:40:93:de:a5:a4:28:2d:
                    25:a6:17:e8:bb:c0:b3:3e:ff:5c:93:95:03:50:17:
                    05:a7:e0:fa:f5:25:a6:e3:d0:2a:59:47:3a:a6:52:
                    a0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:33:4C:3E:2D:ED:5C:AB:F8:43:BD:4B:C0:32:90:D0:13:65:73:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0745385a-2762-3c9c-bb2b-b9dd0b8ae662.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.136.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:0a:e8:5b:8a:9f:5d:36:fd:28:92:e6:ca:49:3a:64:92:c0:
         07:f1:da:96:05:09:e2:da:de:7c:a5:81:06:85:96:a5:9d:3a:
         da:1b:5b:90:a7:0b:81:07:1c:22:37:3b:29:54:26:8b:0f:51:
         e7:31:65:58:ac:45:2a:66:ac:a9:e5:8d:f9:e2:97:3a:3f:1f:
         a6:bb:3e:53:68:12:05:b6:ec:a5:52:66:bf:18:56:57:dd:05:
         d8:c4:4a:f4:a5:c0:ff:ee:fc:9d:54:92:62:c1:a0:2f:67:19:
         b8:30:b4:bd:28:f5:75:45:09:33:b2:16:75:ad:7b:df:57:44:
         db:dc:8d:26:42:4a:49:26:1e:4d:63:f0:f9:82:d5:fb:29:a8:
         b7:18:3a:cc:54:06:62:17:6b:30:94:6c:11:ec:c0:49:c0:bf:
         af:1e:a5:e5:03:4a:d7:ac:9e:62:fd:03:47:a6:cc:12:01:79:
         6b:5c:b7:4c:3d:47:0c:0a:ca:83:ff:f0:d5:90:60:55:6b:32:
         54:58:66:6f:f3:ea:be:3e:77:3c:ef:46:86:67:d5:de:79:57:
         64:8b:a4:a5:f2:39:55:ce:38:6f:b9:b3:0c:6b:c0:91:ec:a8:
         c7:8d:a1:46:b3:74:54:47:99:01:29:57:d7:02:8d:53:91:28:
         38:9c:f5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:13 2025 by rpki-client on console.sobornost.net