Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/650ad08a-c326-3a86-bff4-37d5090627dc.roa
File:                     650ad08a-c326-3a86-bff4-37d5090627dc.roa (raw, json)
Hash identifier:          Fk1vg2nJKv+APGtn4knAVGgyOLkjJ4hIrbicKPPsa10=
Subject key identifier:   DE:E9:A9:19:F8:BD:31:BD:0F:3D:26:24:31:F0:61:26:54:90:2D:84
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F432858496FAF145FD9FB95DC1C986900
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/650ad08a-c326-3a86-bff4-37d5090627dc.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     400619
IP address blocks:        107.151.244.0/22 maxlen: 24
                          198.44.170.0/24 maxlen: 24
                          198.44.176.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:af:14:5f:d9:fb:95:dc:1c:98:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=9fc1d053-65fe-4ede-80d8-14b6692d5980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4c:d0:ce:51:bc:9f:67:03:c8:04:99:6b:f1:
                    bc:9b:0a:7c:cd:fe:98:62:9f:b6:bd:5a:2c:b4:a3:
                    4a:a1:35:bc:25:61:4d:59:cb:11:b6:28:c1:60:bf:
                    82:3b:0b:c8:be:53:43:e7:17:c0:fb:a5:b2:6b:c9:
                    69:b9:a9:48:1f:70:bc:3b:db:8b:1b:73:77:2c:b0:
                    c0:e3:40:b6:e1:0a:a6:31:34:14:79:48:c8:fc:76:
                    3f:e4:6a:f3:e2:1f:6c:6a:be:b2:5f:03:da:8c:59:
                    fd:78:ad:66:ef:62:0d:c3:ab:5f:46:d0:22:05:16:
                    1b:68:b5:8e:5b:58:19:35:3d:f7:1d:68:cd:65:e4:
                    10:b4:49:89:7a:fa:2f:63:3e:49:e9:23:b6:b6:b2:
                    12:b0:31:e7:bb:ea:6c:a0:ff:6a:e4:04:b8:ce:20:
                    ab:f2:0c:f7:42:3e:f7:d4:6d:00:01:02:40:77:80:
                    bb:8f:49:ac:b5:3c:cf:90:f5:50:10:a2:fa:ba:67:
                    a5:63:0d:cb:c6:35:71:49:d2:d2:39:8d:78:f2:ac:
                    8a:16:da:19:b3:71:94:8c:98:a0:3a:b2:fc:64:0f:
                    44:e0:71:3d:fe:6b:a8:78:06:fd:0f:b3:69:ad:01:
                    b3:22:95:cc:5e:7e:a5:b7:26:fe:9a:97:e8:1d:5b:
                    c5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E9:A9:19:F8:BD:31:BD:0F:3D:26:24:31:F0:61:26:54:90:2D:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/650ad08a-c326-3a86-bff4-37d5090627dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.244.0/22
                  198.44.170.0/24
                  198.44.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:0a:6b:91:1b:b2:1e:09:a4:41:70:d5:cc:ac:b0:b3:bd:01:
         23:a5:fc:ad:bc:05:3d:af:c2:f7:f5:20:f2:4e:2d:61:ab:35:
         a7:f5:fa:c2:e0:ef:cc:6f:06:9a:69:89:dd:a7:9b:24:1d:fc:
         b0:ce:a1:8b:79:fd:40:7a:16:b0:bd:fa:73:c5:fd:8e:3f:2c:
         81:e0:f0:e6:47:c5:09:ab:b2:43:e9:a7:26:1f:88:47:54:47:
         1c:f4:9f:df:4c:9a:60:77:94:15:a1:8a:7a:bd:04:c2:4d:44:
         ef:46:b2:89:b5:ea:ba:9a:18:7c:27:44:96:0a:58:6b:48:ca:
         22:a7:b8:12:7a:e7:12:84:f2:8c:5f:0c:79:a7:46:e8:a6:96:
         f7:f3:3d:c5:cb:13:e5:a5:ff:d1:07:e5:d5:bd:70:21:03:94:
         24:4f:6d:15:9b:52:9c:55:62:a2:72:49:0d:c0:e9:46:f9:69:
         48:5b:db:ac:90:bd:0f:07:c0:ac:cf:ef:81:b4:12:b7:6f:58:
         11:3c:17:2f:4a:43:8a:d1:51:8e:b6:7a:d3:eb:29:e4:09:67:
         fb:43:bd:e9:0d:cd:9e:4e:f0:c0:46:90:e9:c3:39:d0:c5:19:
         70:70:45:92:43:31:b0:a7:5a:cb:ac:04:f8:a6:3c:19:7b:27:
         a2:11:4e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:14 2025 by rpki-client on console.sobornost.net