Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/a5d505ed-30ad-3e75-b9b6-13d664161125.roa
File:                     a5d505ed-30ad-3e75-b9b6-13d664161125.roa (raw, json)
Hash identifier:          vR+vEaUopGLL97JynbQbpb0Gu9yn/A3KvoTFAFPEg54=
Subject key identifier:   CE:F1:9D:D3:B6:23:C8:7A:E5:FF:B6:9C:39:0E:7C:C5:AB:22:5F:CB
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F432858496A19AA51933A90E3DF296E80
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/a5d505ed-30ad-3e75-b9b6-13d664161125.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     109
IP address blocks:        64.100.0.0/14 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:aa:51:93:3a:90:e3:df:29:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=83b3a1b5-461d-4e35-9daa-9f0020e408be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8e:56:70:3b:8a:51:0c:d2:c5:3c:7a:af:e3:
                    9f:d3:ab:a4:02:f9:6c:0f:44:af:61:08:6e:e9:68:
                    8c:1b:bc:76:38:de:7a:86:99:67:8b:05:55:c1:50:
                    cb:df:0b:a4:c5:86:d5:b5:d9:f6:70:e9:b7:cb:99:
                    c5:62:ab:b2:14:4c:8e:96:57:c7:8a:27:2c:9f:b9:
                    31:fa:d6:0e:4f:b5:01:15:ff:85:02:9d:81:31:11:
                    5d:2c:06:76:27:a5:d8:33:7c:91:81:1a:ce:8b:3f:
                    36:23:f5:cb:ed:20:c9:ba:9f:1d:e8:e6:ed:de:d5:
                    25:c0:a0:f1:e8:6f:e0:a3:de:cc:95:fc:7d:23:71:
                    4f:e4:31:24:e1:a9:60:5c:0a:07:a3:7f:20:8e:7d:
                    fd:94:54:cf:2a:a0:6e:39:2f:e8:cf:bd:66:7e:9f:
                    3d:9c:d5:65:60:18:43:e9:19:e3:45:ac:a5:6c:b1:
                    f2:c9:bc:61:e8:26:51:ea:9a:e3:98:67:47:3b:d9:
                    43:4f:87:14:af:89:99:b9:d6:e0:70:d7:6d:e5:f3:
                    69:89:9c:90:59:cb:3f:4f:e3:8a:13:b6:fa:d2:29:
                    6e:e2:16:67:05:3e:ec:1c:11:c3:9a:2c:8d:dc:f5:
                    17:af:bd:8b:e1:85:ee:87:dc:90:c4:dd:d6:2c:5f:
                    c8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F1:9D:D3:B6:23:C8:7A:E5:FF:B6:9C:39:0E:7C:C5:AB:22:5F:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/a5d505ed-30ad-3e75-b9b6-13d664161125.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.100.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:95:d5:67:01:f8:27:4a:ec:32:1d:c5:2d:06:52:18:ad:4b:
         f4:5a:d2:6d:3d:e9:af:9e:36:b0:69:fe:6e:f7:12:93:5c:ba:
         3e:41:f0:e6:44:73:83:c5:7d:0e:ab:9b:c2:07:0e:e0:53:c9:
         4e:82:3d:53:8a:9b:8c:16:82:80:a6:91:dc:39:5a:f6:92:9d:
         c1:a1:f0:88:1b:c4:ef:70:54:a4:fe:92:2b:28:34:79:dd:50:
         f0:c5:1e:38:4d:f1:70:e7:68:23:af:6c:57:77:f9:1a:3b:e1:
         0a:fb:cf:6d:bd:9c:eb:9a:ab:30:66:9f:de:2d:11:6f:81:ec:
         02:e5:eb:53:95:96:74:c7:12:b2:61:40:44:b7:6c:d9:bd:94:
         9d:66:c4:3f:5c:b1:44:e0:ae:a7:b0:08:99:82:1f:20:06:6a:
         09:5f:62:67:17:39:35:e4:2f:97:27:81:97:e8:71:4e:ef:a4:
         d7:ba:db:fe:29:0f:11:b7:ae:29:53:e0:2a:00:17:e3:21:70:
         4b:31:95:54:bf:fc:16:68:f8:21:fd:b5:cb:fb:5a:66:58:b4:
         2c:5f:7a:cc:e6:06:13:a8:76:18:d2:fc:f7:a7:21:ac:d0:df:
         bf:c7:95:87:5a:7c:20:8a:98:0f:3b:cd:da:44:55:f1:52:86:
         c7:b0:52:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:03 2025 by rpki-client on console.sobornost.net