Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/49260f33-7d65-367b-b573-991af03e2eeb.roa
File:                     49260f33-7d65-367b-b573-991af03e2eeb.roa (raw, json)
Hash identifier:          hNeVFtZF8yaJIhsYYSx88C2PB6IVwIr8+wfmoi84NdA=
Subject key identifier:   CD:A0:53:E4:C3:86:51:9C:7F:4E:0E:AA:2B:F6:CA:77:88:53:A5:AE
Certificate issuer:       /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Certificate serial:       010D0C9F432858497B5C6CAF5C522A7D845733C0
Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/49260f33-7d65-367b-b573-991af03e2eeb.roa
Signing time:             Thu 10 Apr 2025 17:24:29 +0000
ROA not before:           Thu 10 Apr 2025 17:24:29 +0000
ROA not after:            Wed 09 Jul 2025 17:24:29 +0000
asID:                     398210
IP address blocks:        207.211.252.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7b:5c:6c:af:5c:52:2a:7d:84:57:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
        Validity
            Not Before: Apr 10 17:24:29 2025 GMT
            Not After : Jul  9 17:24:29 2025 GMT
        Subject: CN=8c96e787-bf2a-46d7-8037-86a2ebde2162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:88:71:20:a8:21:b7:45:b6:4a:13:c0:96:d0:
                    52:1c:6b:ac:49:66:10:22:49:4d:f8:8d:df:d8:d1:
                    0a:90:58:4a:3c:6e:e0:cf:44:d7:27:95:a2:b9:f3:
                    3e:be:14:dd:de:61:6a:f4:06:a3:a2:04:54:79:f1:
                    d9:eb:4e:a0:e8:6e:e2:eb:90:13:86:17:c8:84:f6:
                    bc:bb:9e:6a:8b:c5:f5:af:e4:2a:52:57:fd:11:07:
                    1f:5a:45:5e:5f:63:20:1e:89:fa:a2:02:d6:87:bc:
                    46:49:a9:37:8f:e0:5e:20:e4:54:46:43:2d:8e:12:
                    bf:12:64:f3:92:b3:82:38:a4:91:8d:83:46:5d:fa:
                    b9:ec:4e:c5:e4:d3:c7:67:e8:e8:af:39:95:00:96:
                    b2:4d:0a:75:60:51:27:2d:a3:c9:30:42:71:2b:7d:
                    dd:49:2e:b7:f0:4d:e6:ef:9d:9f:95:9b:d1:cc:c5:
                    89:9d:28:a2:73:b4:95:05:d8:7a:93:3c:45:ef:71:
                    b0:83:97:3a:33:79:0a:56:a9:56:f4:5e:69:19:df:
                    83:06:18:c2:d5:09:28:cb:ca:10:fe:7d:1e:44:7c:
                    e6:12:8b:47:ba:aa:55:1d:7e:a4:ee:e7:8f:b5:c5:
                    81:1b:b9:99:8f:b1:b2:01:8e:a4:63:b8:15:48:49:
                    9c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A0:53:E4:C3:86:51:9C:7F:4E:0E:AA:2B:F6:CA:77:88:53:A5:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/49260f33-7d65-367b-b573-991af03e2eeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl

            X509v3 Authority Key Identifier:
                keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.211.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:61:31:2e:1b:4e:39:6d:ca:56:80:73:49:97:17:56:4d:16:
         37:df:eb:53:ec:da:2c:6b:68:26:24:7a:1e:cf:7c:9f:f1:1e:
         3e:6e:e5:5d:54:1e:f1:66:ab:f2:8c:5d:f6:45:15:5b:5b:a7:
         c3:5b:a0:57:de:41:a5:09:c0:b9:c3:38:ef:53:d8:59:bb:3e:
         ec:a8:a2:8b:8a:71:3c:71:8e:9d:f5:df:bb:a6:42:99:6a:0c:
         ad:23:bc:af:03:50:b9:3a:46:78:fc:5f:0b:25:78:39:fb:f4:
         7d:ee:ee:82:9a:7b:1d:89:9d:5a:a5:a0:54:1a:9e:cd:c3:99:
         55:e2:a6:49:94:20:9b:f6:f6:ab:d6:b4:f6:66:73:04:41:7f:
         7e:cd:fc:3c:e7:3d:2f:88:dd:d2:f1:60:d4:53:bc:b0:1e:45:
         32:4a:13:37:56:fc:ad:77:68:dd:a1:57:a5:e4:56:f4:d8:65:
         84:b3:40:eb:a4:d9:86:07:4a:39:d5:f6:6f:b9:0a:ca:c1:f0:
         2a:4d:1f:42:35:50:cf:81:56:a4:fa:0b:fb:54:70:f3:71:c0:
         ec:54:65:fe:ac:7b:48:57:db:1b:d5:72:09:1b:cb:12:ac:18:
         e9:4d:1c:93:55:5d:5e:18:3c:d4:ac:6c:b7:25:d4:62:78:b8:
         d2:cf:56:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:13 2025 by rpki-client on console.sobornost.net