Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/2d4d8cd7-4a16-3a5d-ae79-82a919086d58.roa
File:                     2d4d8cd7-4a16-3a5d-ae79-82a919086d58.roa (raw, json)
Hash identifier:          qWJQCk4ucqyZjJB/2uWzNthYsK2jTDfOr/U3Sjzv0fs=
Subject key identifier:   8C:E8:F2:85:6D:1E:15:13:86:74:39:3B:C1:D7:B0:70:E4:40:04:9F
Certificate issuer:       /CN=17436076-857b-4889-82e9-22151c59a4b1
Certificate serial:       010D0C9F43285849806F289939AA1A6E91057C80
Authority key identifier: 47:0A:FA:56:B9:09:C9:A7:EE:6D:7E:FE:BA:23:0C:CB:80:18:1D:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/2d4d8cd7-4a16-3a5d-ae79-82a919086d58.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     46644
IP address blocks:        170.39.228.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:28:99:39:aa:1a:6e:91:05:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17436076-857b-4889-82e9-22151c59a4b1
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=f208ffc8-1567-49b4-88d9-9811eb64e95c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:23:08:98:92:bf:c5:e5:61:da:6b:50:8e:f6:
                    0d:39:27:ac:62:f9:ca:7e:10:98:c8:43:ec:f0:ae:
                    e5:fe:3f:b2:f4:86:c8:f8:1d:b9:71:4e:8d:70:ac:
                    81:e6:a8:8f:78:da:91:42:2d:ae:b3:34:53:1e:ed:
                    66:a7:74:22:aa:db:d2:76:7a:6c:87:26:d1:6e:07:
                    f2:68:27:18:c3:1b:7c:b6:ed:d0:7e:b2:38:ed:d7:
                    50:c2:36:84:06:c9:f2:2a:99:4f:9a:04:c9:c5:53:
                    9a:40:52:87:51:9d:de:ac:cf:92:f8:f0:11:17:ee:
                    55:c7:99:e6:c1:41:b9:e6:c9:1a:2e:ab:7a:16:a7:
                    c8:aa:ab:d0:97:6f:1a:2b:80:fd:e3:f0:9a:98:46:
                    89:0a:f0:4a:05:5d:81:58:30:3f:58:e2:ef:0e:4c:
                    ea:1d:41:0d:4c:44:0a:80:17:33:12:06:4f:c9:dd:
                    23:54:6b:76:2c:08:f7:3d:81:ab:3b:87:7f:43:12:
                    92:47:50:06:4a:8d:c1:3a:ba:f8:b2:ef:48:8a:f6:
                    d3:e7:47:c2:90:9a:b4:b0:16:cc:78:6c:02:f8:a7:
                    07:13:fc:ac:d4:de:1b:78:90:e3:82:26:59:f9:e0:
                    b1:e0:1f:bb:fc:8b:e4:ee:a2:bb:75:c1:11:b2:ac:
                    d7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E8:F2:85:6D:1E:15:13:86:74:39:3B:C1:D7:B0:70:E4:40:04:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/2d4d8cd7-4a16-3a5d-ae79-82a919086d58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/17436076-857b-4889-82e9-22151c59a4b1.crl

            X509v3 Authority Key Identifier:
                keyid:47:0A:FA:56:B9:09:C9:A7:EE:6D:7E:FE:BA:23:0C:CB:80:18:1D:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:74:ff:78:0e:32:dc:f5:85:cc:f4:fb:e0:41:4e:97:b7:fa:
         d5:aa:14:7f:a1:a2:0a:a1:80:13:7e:67:60:54:90:2f:42:df:
         ae:7b:86:f1:97:a9:38:b3:27:59:b8:5d:5d:73:5f:19:01:88:
         e7:b7:e1:e3:8d:f2:95:0f:ff:5f:ca:33:0e:45:c3:67:48:ea:
         5e:f1:71:37:7e:31:f9:49:2a:1c:f0:96:c3:c2:a4:5d:24:d1:
         c2:7e:c0:2b:3e:c2:1d:c2:dc:64:f1:77:a9:ef:31:8b:c0:c9:
         b0:3e:34:1c:82:be:38:a1:4d:48:a1:88:cb:e7:b3:a6:89:b0:
         d7:1f:29:5a:82:8a:27:6b:da:83:ad:91:0c:21:1c:6c:8e:da:
         87:c2:12:39:77:4b:49:44:81:1c:d6:16:d8:76:7f:b7:20:ed:
         b8:fb:ee:4b:eb:f2:7c:a0:36:1a:f4:15:bb:19:98:d5:00:c5:
         25:ed:36:76:a9:ba:4d:f3:0c:7c:a7:e6:e3:1b:2b:4c:30:f8:
         83:a8:44:35:c3:99:f9:05:57:61:b0:36:c5:35:40:9c:3b:8a:
         bf:95:8a:97:06:ef:70:ed:99:d8:e1:0c:29:c9:77:67:a1:4b:
         16:95:b6:f8:bf:f0:01:85:46:f8:bc:32:4f:b8:4e:7a:ff:35:
         8e:8e:be:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:12 2025 by rpki-client on console.sobornost.net