Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/654e0f5b-e038-3b34-aaa5-52c37a071906.roa
File:                     654e0f5b-e038-3b34-aaa5-52c37a071906.roa (raw, json)
Hash identifier:          jSjq7JUlBMf74tGjMutNmi/7dahbVJj/N4kbv9bY/LQ=
Subject key identifier:   38:3D:5D:EB:D7:CE:F9:43:19:86:86:80:AE:28:E2:12:F8:BF:86:48
Certificate issuer:       /CN=796bba95-b159-4867-a648-a9ff88973be1
Certificate serial:       010D0C9F4328584949FE984552C6AD0F45795B00
Authority key identifier: B6:EB:25:F4:B7:AB:73:FB:89:E9:A8:1B:DD:22:28:DA:A7:7B:5C:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/654e0f5b-e038-3b34-aaa5-52c37a071906.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     21874
IP address blocks:        205.156.183.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:98:45:52:c6:ad:0f:45:79:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=796bba95-b159-4867-a648-a9ff88973be1
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=e8795597-0a39-468f-8c7a-411338b1612d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ae:7a:5c:ad:96:6d:c9:2d:ca:83:8d:12:f0:
                    2c:d7:13:28:96:6d:c5:4f:dc:71:8e:19:30:d6:8b:
                    46:ef:ae:05:65:1d:cf:70:0c:a3:0e:2b:0f:a5:47:
                    da:c1:fd:eb:b3:c4:83:41:e2:03:a2:16:23:f2:32:
                    2a:9b:de:79:86:42:87:19:74:60:9e:83:32:f5:fd:
                    94:90:b6:d5:10:1a:c3:21:42:31:36:13:34:b9:35:
                    8d:78:96:be:39:c7:02:65:0b:81:54:50:b4:75:3e:
                    bc:86:05:a5:e1:6c:12:04:87:93:c5:1b:87:d9:e8:
                    7b:bc:a6:b1:34:c0:b9:c0:cd:12:2d:b7:50:79:30:
                    d7:a1:ae:ee:77:eb:fd:9d:96:e6:ca:67:aa:39:28:
                    82:35:8a:13:a7:98:33:f2:93:4a:43:f5:4c:f7:fc:
                    30:e4:64:0e:f0:5a:80:01:1d:92:c6:64:56:f1:8a:
                    d4:f0:71:c6:a2:ad:8d:5f:f0:6e:b7:b2:9d:ca:27:
                    5f:06:78:31:9c:35:35:43:0f:14:3b:6b:0c:1f:7f:
                    1e:23:9d:01:88:38:e1:e4:f8:28:b0:81:24:bd:7a:
                    f1:b5:d3:15:14:3e:d0:a8:8c:9b:8d:ba:9e:ad:93:
                    0c:57:b9:1b:20:14:a3:88:1f:88:91:90:8f:9b:17:
                    5f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3D:5D:EB:D7:CE:F9:43:19:86:86:80:AE:28:E2:12:F8:BF:86:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/654e0f5b-e038-3b34-aaa5-52c37a071906.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/796bba95-b159-4867-a648-a9ff88973be1.crl

            X509v3 Authority Key Identifier:
                keyid:B6:EB:25:F4:B7:AB:73:FB:89:E9:A8:1B:DD:22:28:DA:A7:7B:5C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.156.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:a3:ba:5e:7c:c0:1c:98:fe:10:17:b2:6e:36:84:50:d6:66:
         16:10:1a:e1:fe:ee:ff:97:d3:bd:64:40:d6:d9:a1:e0:2c:be:
         86:a4:f8:93:38:6f:40:1d:57:22:c3:75:f2:a6:0e:f2:8a:d0:
         18:38:e3:34:be:c5:56:8e:56:6d:d6:06:80:c2:de:00:7b:9f:
         f8:a5:bc:90:b9:c0:31:b9:52:08:e3:d2:87:12:9b:f5:dc:e5:
         76:76:bd:50:a3:2d:23:5a:e2:3e:04:1a:4d:6d:d5:b4:60:69:
         24:d3:c6:11:f9:5b:68:30:8e:88:f1:62:40:4b:dd:19:13:72:
         d0:43:76:bb:f5:9b:b3:7e:ce:79:47:15:87:cb:7f:a6:80:88:
         21:3f:ee:02:fa:7b:70:05:71:d9:8a:97:18:15:e8:4f:2f:92:
         0a:06:90:0e:33:99:2d:11:54:15:51:91:0a:09:cf:76:4e:2a:
         85:bd:dd:f3:20:f8:30:60:08:6b:e6:fb:9b:76:44:53:82:3d:
         c4:78:27:07:a6:cc:0d:f2:da:61:2e:b7:34:05:20:8b:58:0e:
         d7:b6:6a:e6:13:53:bd:0e:e1:cd:a4:b3:2b:30:c5:9c:16:4a:
         72:22:74:96:41:77:0e:fe:d1:00:3a:cd:c5:fe:94:0f:ad:2a:
         9b:b0:38:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:28 2025 by rpki-client on console.sobornost.net