Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/e58d6e26-d0a6-3f1c-b189-27f76650ee13.roa
File:                     e58d6e26-d0a6-3f1c-b189-27f76650ee13.roa (raw, json)
Hash identifier:          szZHJIa0Hcw8EahmHOkXOt4ebGkKPSq7WE3F93okbJQ=
Subject key identifier:   D2:F9:36:93:5B:2D:D7:20:04:B5:1B:64:DE:11:5D:AA:5A:37:80:D1
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F432858496A19AE441460F21414BE0B00
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/e58d6e26-d0a6-3f1c-b189-27f76650ee13.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     109
IP address blocks:        192.133.192.0/19 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:ae:44:14:60:f2:14:14:be:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=b049d90d-7467-43c3-8a19-9678203a3b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3f:02:08:32:7c:8d:ff:ca:fa:ea:9d:1c:03:
                    0e:f8:aa:27:64:d0:e8:06:47:ad:f4:41:c3:35:23:
                    74:6f:9c:e1:73:53:07:de:6d:30:c9:66:47:2b:11:
                    08:a2:51:a6:62:ca:a3:48:87:cd:95:67:7e:af:f3:
                    8f:fc:1a:5a:cf:31:3c:78:99:22:71:51:41:26:c6:
                    8c:c0:f1:c2:89:f7:e1:27:eb:a8:7d:37:c9:53:04:
                    35:04:b7:19:1c:cc:25:1e:a8:1c:aa:17:35:94:74:
                    3f:f5:1c:3c:18:69:83:58:c4:9c:87:22:d0:4f:c9:
                    7d:7a:81:7e:6f:a1:3c:a7:4e:7e:49:d1:c6:45:bd:
                    bb:8d:e7:64:f6:98:a3:0a:a8:59:42:f2:19:8f:92:
                    94:db:b7:f7:8c:9a:c9:4d:05:62:68:ca:e2:f4:22:
                    78:60:a7:0e:b9:2d:40:dc:9c:ea:37:f7:71:a5:7d:
                    cc:7e:f2:39:0f:c8:32:18:89:b7:10:c6:e1:33:ba:
                    29:38:89:16:e4:a1:30:02:a3:f2:b8:5a:0d:68:4a:
                    55:45:65:ce:fb:73:2e:a2:3a:95:58:57:05:43:a5:
                    02:9c:5b:48:38:50:f2:64:1b:68:cf:51:91:1a:fb:
                    22:91:88:98:3d:ca:ee:4f:cf:ed:aa:10:04:f9:c1:
                    9e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F9:36:93:5B:2D:D7:20:04:B5:1B:64:DE:11:5D:AA:5A:37:80:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/e58d6e26-d0a6-3f1c-b189-27f76650ee13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.133.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:21:f8:48:93:db:5d:61:2d:54:54:14:25:b1:ec:34:f2:db:
         68:64:d0:36:3c:65:2d:83:7c:06:24:d1:bc:01:e1:30:cd:19:
         00:10:d9:3e:92:db:b4:80:9b:4f:ce:09:7f:5c:c6:46:6a:b9:
         cd:aa:de:57:c2:c0:01:39:c9:05:6a:d1:7e:4a:96:0d:70:cd:
         02:91:5d:99:c6:23:60:c3:e8:7e:9f:64:16:06:ee:5b:9a:5a:
         94:e1:46:5e:b4:de:51:04:8a:92:92:b6:ff:fe:f6:f6:65:c9:
         c0:41:ca:fb:0a:1d:0e:8b:30:51:d4:f6:cd:57:6b:0e:ae:87:
         2a:1f:0d:ef:67:47:e9:d1:01:58:87:9c:f2:ae:bb:49:70:53:
         73:bd:0c:3e:65:d0:11:8a:c9:2a:c6:33:97:2f:37:3d:3a:1d:
         97:95:9e:72:62:4c:bf:85:34:bd:c1:f1:8f:9e:2a:3d:d0:67:
         f3:41:00:55:a4:26:97:46:59:6e:bc:32:32:d2:a9:0c:81:2a:
         9a:35:d4:b7:d1:3d:2b:fb:e9:96:76:0e:bc:d4:73:bd:d8:0a:
         c1:3c:c2:af:f8:90:fe:6d:e9:10:29:b3:12:76:6c:ee:be:49:
         8c:17:d0:12:06:cd:67:0d:b4:af:7b:1e:09:5b:90:27:e7:6f:
         c3:f1:c6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:03 2025 by rpki-client on console.sobornost.net