Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/778e9493-fc72-3972-b578-15cd2f03a377.roa
File:                     778e9493-fc72-3972-b578-15cd2f03a377.roa (raw, json)
Hash identifier:          gU0wyt0nzyEQmlEH8v9fCRZAssDL54KHCVvQ+e1Gua4=
Subject key identifier:   21:9B:52:57:66:19:38:49:A1:60:7A:C4:31:42:A2:38:00:49:4E:AA
Certificate issuer:       /CN=03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11
Certificate serial:       010D0C9F4328584950F96A8F8D2EDEFF49A54C80
Authority key identifier: AE:5B:99:4D:B3:F6:B8:9D:A1:51:94:7E:C1:DF:E6:90:10:A5:CB:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/778e9493-fc72-3972-b578-15cd2f03a377.roa
Signing time:             Wed 26 Mar 2025 13:00:53 +0000
ROA not before:           Wed 26 Mar 2025 13:00:53 +0000
ROA not after:            Tue 24 Jun 2025 13:00:53 +0000
asID:                     54816
IP address blocks:        158.51.56.0/22 maxlen: 24
                          192.30.192.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:50:f9:6a:8f:8d:2e:de:ff:49:a5:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11
        Validity
            Not Before: Mar 26 13:00:53 2025 GMT
            Not After : Jun 24 13:00:53 2025 GMT
        Subject: CN=5fa09c1a-350c-447f-94f6-ff38f65a0897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9f:d6:c7:32:06:c3:3b:e4:62:d2:0e:f5:55:
                    d9:3a:f7:9c:c0:6b:0e:60:8a:83:1f:a8:01:44:11:
                    37:71:43:e1:5d:31:88:00:df:97:b8:f6:7e:c0:97:
                    4f:5b:7b:5b:96:b9:11:c8:10:3c:1a:18:6d:64:fe:
                    16:73:5e:d9:67:63:06:97:e7:c8:4e:7e:db:9d:e5:
                    e9:4a:2e:96:2e:48:29:88:0b:b2:f9:2e:ee:ad:06:
                    0f:98:94:6f:f7:6d:81:84:be:74:99:01:fa:8b:db:
                    01:8c:95:c3:b9:87:8f:b9:5e:27:7f:b8:81:18:d4:
                    88:ec:d9:76:5b:18:8f:b7:d9:e6:60:59:0a:b0:4d:
                    de:a2:59:b0:c8:e0:f4:f6:b3:cb:67:58:98:55:63:
                    69:aa:86:7e:48:1f:57:c5:3d:ce:b5:2c:b7:fe:86:
                    75:c5:e2:9e:66:28:49:4a:9a:b8:ff:0b:61:77:bd:
                    e7:5c:81:88:e7:ff:6a:dd:1d:0a:cb:56:14:fb:bf:
                    ef:6a:2e:6f:2c:16:3b:e1:30:fc:99:a5:b9:6f:23:
                    07:6b:57:c1:aa:be:2a:4d:83:bd:6e:95:e2:5e:78:
                    7e:f9:85:8c:e8:3f:0d:38:6e:90:3c:55:85:d7:9c:
                    e5:2c:b3:d2:0b:2e:a8:3e:e7:f8:a8:97:ea:99:9c:
                    9e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:9B:52:57:66:19:38:49:A1:60:7A:C4:31:42:A2:38:00:49:4E:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/778e9493-fc72-3972-b578-15cd2f03a377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.crl

            X509v3 Authority Key Identifier:
                keyid:AE:5B:99:4D:B3:F6:B8:9D:A1:51:94:7E:C1:DF:E6:90:10:A5:CB:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.56.0/22
                  192.30.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:f6:b9:f1:e1:19:a7:6e:54:61:68:5d:0c:dc:11:e0:a7:bb:
         8f:a3:db:5e:6f:15:c1:fc:a7:a2:61:fb:de:d2:2e:9c:f1:35:
         6f:ac:67:93:44:5e:1b:e1:2f:3e:e9:fd:61:f9:35:06:ad:96:
         1d:49:94:86:11:14:d0:29:80:06:f3:d4:71:d6:62:1b:b7:f4:
         b5:80:95:1d:3a:77:05:0a:75:a0:91:32:f5:2c:bc:97:e1:0b:
         75:40:fd:ca:30:49:0a:82:b9:ef:0e:03:3b:aa:7e:86:bd:e8:
         40:e0:10:ca:5b:91:d7:ef:fc:6a:c0:18:db:04:3a:14:e2:b7:
         0d:e6:d4:c5:5e:0b:e4:53:6e:8a:79:b7:49:d7:b7:3b:42:b1:
         f3:1d:b8:ff:c6:ed:90:db:2e:11:c9:92:5a:6a:68:99:3d:6e:
         ec:17:9b:52:24:d5:ec:f1:50:44:4f:60:9a:96:50:41:f4:17:
         f6:44:36:e7:92:c3:75:ce:87:e5:46:d6:9b:a8:ca:5b:09:5b:
         49:0e:36:4f:aa:b7:82:fd:a7:8f:99:16:27:a4:84:6e:66:0a:
         f2:08:c0:16:f1:ff:24:d3:82:86:28:28:5f:50:63:cb:4d:b9:
         bd:93:ad:a6:b7:18:f4:55:90:0d:86:7c:0b:44:ff:65:11:87:
         0e:c4:25:af
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElQ+WqPjS7e/0mlTIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDNmMDVlYTItZWE1Yi00ZTJiLWFiOWYtYzk1YjQ1OTBl
YTExMB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk
NWZhMDljMWEtMzUwYy00NDdmLTk0ZjYtZmYzOGY2NWEwODk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJ/WxzIGwzvkYtIO9VXZOvecwGsOYIqDH6gB
RBE3cUPhXTGIAN+XuPZ+wJdPW3tblrkRyBA8GhhtZP4Wc17ZZ2MGl+fITn7bneXp
Si6WLkgpiAuy+S7urQYPmJRv922BhL50mQH6i9sBjJXDuYePuV4nf7iBGNSI7Nl2
WxiPt9nmYFkKsE3eolmwyOD09rPLZ1iYVWNpqoZ+SB9XxT3OtSy3/oZ1xeKeZihJ
Spq4/wthd73nXIGI5/9q3R0Ky1YU+7/vai5vLBY74TD8maW5byMHa1fBqr4qTYO9
bpXiXnh++YWM6D8NOG6QPFWF15zlLLPSCy6oPuf4qJfqmZyefQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFCGbUldmGThJoWB6xDFCojgASU6qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wM2Yw
NWVhMi1lYTViLTRlMmItYWI5Zi1jOTViNDU5MGVhMTEvNzc4ZTk0OTMtZmM3Mi0z
OTcyLWI1NzgtMTVjZDJmMDNhMzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDNmMDVlYTItZWE1Yi00ZTJiLWFi
OWYtYzk1YjQ1OTBlYTExLzAzZjA1ZWEyLWVhNWItNGUyYi1hYjlmLWM5NWI0NTkw
ZWExMS5jcmwwHwYDVR0jBBgwFoAUrluZTbP2uJ2hUZR+wd/mkBCly6kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8wM2YwNWVhMi1lYTViLTRlMmItYWI5Zi1jOTVi
NDU5MGVhMTEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCnjM4AwQD
wB7AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADL2ufHhGaduVGFoXQzcEeCnu4+j215vFcH8p6Jh+97SLpzx
NW+sZ5NEXhvhLz7p/WH5NQatlh1JlIYRFNApgAbz1HHWYhu39LWAlR06dwUKdaCR
MvUsvJfhC3VA/cowSQqCue8OAzuqfoa96EDgEMpbkdfv/GrAGNsEOhTitw3m1MVe
C+RTbop5t0nXtztCsfMduP/G7ZDbLhHJklpqaJk9buwXm1Ik1ezxUERPYJqWUEH0
F/ZENueSw3XOh+VG1puoylsJW0kONk+qt4L9p4+ZFiekhG5mCvIIwBbx/yTTgoYo
KF9QY8tNub2Traa3GPRVkA2GfAtE/2URhw7EJa8=
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:02 2025 by rpki-client on console.sobornost.net