Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/101e84aa-8afc-3dd5-8fc0-0c9be6d1ae64.roa
File:                     101e84aa-8afc-3dd5-8fc0-0c9be6d1ae64.roa (raw, json)
Hash identifier:          AUzPi4aWUyFQwEJxT4jYjky9/OVuzOeWxZM6ukgbXM0=
Subject key identifier:   93:B1:6E:DE:B7:49:F3:71:78:23:9C:58:EE:1C:A0:73:CB:4D:B7:84
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584957F405D57783A29914E8B200
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/101e84aa-8afc-3dd5-8fc0-0c9be6d1ae64.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     109
IP address blocks:        192.135.250.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:05:d5:77:83:a2:99:14:e8:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=f2a66968-2fc0-4905-84c5-7da5232f0442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:89:8a:a6:7e:f4:72:65:ad:1b:ae:84:52:16:
                    ac:17:32:69:15:2d:8a:41:05:46:77:93:5c:4d:3b:
                    dd:b2:86:f1:b3:d6:f7:f4:c2:d1:fa:f2:6d:10:1b:
                    47:30:0d:65:83:bf:7c:b0:65:aa:55:19:bb:38:df:
                    3a:da:98:e9:1d:28:7c:b0:fe:25:d6:97:45:f7:d3:
                    85:90:94:8f:ec:e3:f0:d8:07:44:72:d3:78:c5:be:
                    67:2b:23:35:1e:70:c5:1f:c9:c3:f6:29:af:63:4e:
                    c2:43:1d:df:fa:26:7c:a9:05:b3:8d:5f:d0:cc:ef:
                    5d:93:59:8a:7c:3d:5e:c8:67:41:3d:fe:fb:62:f9:
                    75:a5:aa:01:1a:29:8e:a9:6b:18:b3:ff:05:ab:f6:
                    df:29:70:9a:cf:d0:28:fb:54:fa:89:33:90:38:4c:
                    19:ec:75:da:a9:0a:d9:82:c7:65:26:be:9d:80:98:
                    89:e0:a3:66:54:01:ff:eb:5a:0b:41:b9:e0:7d:92:
                    d1:19:56:a8:53:ac:95:10:44:4a:83:2c:db:52:47:
                    de:3c:16:c6:c1:e2:3c:13:bc:95:c1:87:5f:78:cf:
                    a1:d7:ec:73:43:0b:fe:37:65:1a:87:66:6d:6a:5e:
                    23:08:d7:fe:24:80:85:46:84:91:4f:fe:80:5c:4c:
                    ea:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B1:6E:DE:B7:49:F3:71:78:23:9C:58:EE:1C:A0:73:CB:4D:B7:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/101e84aa-8afc-3dd5-8fc0-0c9be6d1ae64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.135.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:54:bd:e6:98:4a:c4:ad:2d:0d:7c:3d:f0:d6:6f:33:24:95:
         5e:b7:8b:49:9b:6a:ab:d9:54:38:96:c8:75:28:49:31:7f:27:
         5f:27:85:10:73:91:06:32:b1:21:31:39:78:f0:7b:a2:61:93:
         c4:d0:0e:64:c3:22:af:f3:30:ca:6e:21:7e:10:36:d0:a0:a6:
         16:4d:62:fa:f2:12:dd:87:02:f3:9f:65:f0:dc:94:e1:a4:47:
         dc:b1:bb:33:cc:c6:a6:ca:4c:fa:30:29:f1:d0:4f:9b:b8:d6:
         fd:be:b8:ce:85:f5:89:24:34:fc:71:82:de:41:40:b5:de:30:
         c7:91:2c:80:2f:5b:4a:b8:0e:95:a3:d3:9c:6d:3d:95:7f:4d:
         1f:5b:24:82:fc:9d:4f:93:07:e0:fd:13:85:eb:7d:95:3b:53:
         32:a3:63:0a:78:58:2d:38:08:2a:82:77:51:4d:a5:ac:ab:0f:
         c3:4b:9c:ab:9c:20:04:6e:70:19:61:ff:d9:9f:5c:80:78:ec:
         7c:cc:b9:f2:c4:8d:47:98:4f:86:76:20:e3:1e:1e:41:b5:3c:
         08:54:1a:25:8e:f0:9d:d3:37:0e:f4:11:24:24:e4:b7:c8:16:
         49:c6:ea:58:12:ed:f4:c4:1b:92:f7:64:75:38:eb:fc:f9:1b:
         5f:31:d4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:02 2025 by rpki-client on console.sobornost.net