Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/6f8e9d54-f577-32db-9a19-005c71e16d5b.roa
File:                     6f8e9d54-f577-32db-9a19-005c71e16d5b.roa (raw, json)
Hash identifier:          iH5JGObG11o1HIGP8SZ6M9jEnZwiY5/I8qg8G0xUyvU=
Subject key identifier:   C1:A3:7C:7E:5A:4B:6E:9A:CE:D1:06:AE:7F:79:1D:AC:79:0C:F7:0F
Certificate issuer:       /CN=c86c353d-2ae4-4a28-8df7-0a906b7c6963
Certificate serial:       010D0C9F432858495EEEEA2350D9D6CFE5E6A380
Authority key identifier: E3:D9:E1:82:0A:F3:9C:25:6C:EB:1B:B0:32:69:BE:7F:24:FD:7E:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/6f8e9d54-f577-32db-9a19-005c71e16d5b.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     46262
IP address blocks:        204.11.129.0/24 maxlen: 24
                          204.11.130.0/23 maxlen: 24
                          204.11.134.0/24 maxlen: 24
                          204.15.24.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:ea:23:50:d9:d6:cf:e5:e6:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c86c353d-2ae4-4a28-8df7-0a906b7c6963
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=dec5aa45-404c-4d97-87c9-f7102cc59879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:77:43:67:f4:c2:92:b7:ce:61:12:b1:72:ab:
                    fe:95:33:d9:1e:31:b0:dd:22:65:d7:5a:d3:57:bf:
                    10:3e:a4:56:5f:58:28:f1:99:2e:6c:15:c1:78:07:
                    36:b8:7f:3b:20:ba:19:be:6f:74:1a:db:fd:11:28:
                    8f:ca:e4:1d:12:c8:7d:48:00:36:f0:32:da:31:c8:
                    e3:cf:e3:62:c2:1c:09:2e:b7:f1:60:b2:20:7e:17:
                    8b:5f:5a:3c:be:c5:ed:10:9e:8b:12:d2:da:82:1a:
                    8d:84:7b:15:7d:ee:fd:c7:87:51:b1:e2:7a:60:1f:
                    e1:8e:74:2d:b2:eb:f7:3d:6c:cc:ed:a1:47:d9:bc:
                    13:ab:74:a0:35:01:29:3c:9f:d9:38:02:ae:fe:d9:
                    e5:23:ae:95:b4:e5:af:83:1c:68:7e:27:19:6d:4f:
                    95:39:73:58:fd:07:e0:ff:5e:fa:b4:66:41:df:ae:
                    f5:53:02:47:35:e6:d3:92:48:01:e4:92:26:e5:38:
                    ef:d7:e5:14:ad:14:7f:07:e9:3d:21:22:b4:03:f4:
                    df:54:2f:ea:60:5e:d8:4b:9c:36:15:80:5e:6b:77:
                    89:0e:e6:0f:c3:9d:7d:40:d9:a8:5e:46:01:ea:56:
                    2e:f7:2c:3b:c2:9d:37:cc:71:0c:c9:ef:c5:0b:28:
                    87:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A3:7C:7E:5A:4B:6E:9A:CE:D1:06:AE:7F:79:1D:AC:79:0C:F7:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/6f8e9d54-f577-32db-9a19-005c71e16d5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/c86c353d-2ae4-4a28-8df7-0a906b7c6963.crl

            X509v3 Authority Key Identifier:
                keyid:E3:D9:E1:82:0A:F3:9C:25:6C:EB:1B:B0:32:69:BE:7F:24:FD:7E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.11.129.0-204.11.131.255
                  204.11.134.0/24
                  204.15.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:b0:af:ef:ee:c3:a5:a3:3a:5d:db:dd:a5:dd:63:06:96:f6:
         aa:4d:b2:ac:28:60:09:65:5d:92:ac:4c:c1:75:ba:dd:d4:35:
         1d:0c:c0:7c:92:40:17:04:2a:e1:98:94:5d:a3:32:f7:a6:9e:
         72:2c:46:de:b0:fd:5c:05:51:61:29:0a:9a:3f:f3:44:39:ac:
         77:76:85:70:e1:e8:54:66:36:e8:4b:96:09:65:6f:e3:f5:1e:
         84:bf:95:90:6e:47:92:f3:58:d6:36:09:bb:53:48:76:51:a3:
         9c:14:b1:9c:cf:ca:d8:b7:d9:bb:e3:04:c1:7a:0c:19:14:f7:
         ff:ee:2c:70:c6:1c:07:8f:6c:7f:1c:34:7e:e4:70:eb:08:e2:
         fb:0e:5e:6a:4c:a8:ac:26:f6:31:41:69:60:69:77:28:dd:58:
         5a:03:c4:58:8c:7f:ea:78:f2:00:3d:a1:a0:4f:b5:2b:97:ca:
         94:3e:fe:e8:bf:cd:65:92:f4:4c:0c:3d:1a:5f:f0:93:44:55:
         e0:ef:da:c3:36:45:9c:03:af:7a:57:25:b2:e7:26:b3:d7:7f:
         21:66:4f:06:1a:c3:19:2e:8c:e5:6c:25:09:e5:ca:e1:7f:09:
         d2:3a:ba:53:2c:8e:3e:15:23:76:2f:4f:9f:14:51:3b:48:83:
         68:55:d8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:28 2025 by rpki-client on console.sobornost.net