Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a123c985-027d-392b-b1ac-c64e5601c454.roa
File:                     a123c985-027d-392b-b1ac-c64e5601c454.roa (raw, json)
Hash identifier:          LqxMim6OBfepEToWapKQDCvzG6zH37YZcrZwuD7wjmc=
Subject key identifier:   B8:D0:E7:5F:62:4A:C9:78:8E:56:4A:86:F0:0A:02:91:C8:2E:14:89
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F432858497AD9BBC0FF7B1ED8B7418A00
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a123c985-027d-392b-b1ac-c64e5601c454.roa
Signing time:             Thu 10 Apr 2025 13:00:59 +0000
ROA not before:           Thu 10 Apr 2025 13:00:59 +0000
ROA not after:            Wed 09 Jul 2025 13:00:59 +0000
asID:                     33236
IP address blocks:        69.1.112.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7a:d9:bb:c0:ff:7b:1e:d8:b7:41:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Apr 10 13:00:59 2025 GMT
            Not After : Jul  9 13:00:59 2025 GMT
        Subject: CN=1d1fd896-12b6-4941-b15a-2e6b81036460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7c:33:dd:1c:40:f0:e8:64:94:aa:a8:51:2f:
                    fc:cf:05:50:23:c2:ad:15:93:63:3c:13:e5:68:68:
                    4c:5d:35:03:b9:ad:ac:cf:74:9a:b1:00:38:33:92:
                    19:b2:c2:31:ce:93:8f:50:5f:2e:8d:4a:bf:af:a5:
                    c2:61:8d:9d:69:38:f4:ec:9e:f2:97:82:46:37:cb:
                    90:e5:4a:ce:98:16:98:86:33:23:38:12:16:61:2e:
                    ba:6e:38:d5:d7:4a:a8:00:a2:2e:26:2a:15:ba:cb:
                    b8:25:e1:3a:31:cf:2c:50:41:93:56:85:79:78:64:
                    1c:4a:66:fa:01:6a:88:aa:42:17:f0:d2:7d:10:82:
                    c2:fa:5f:2b:0e:d7:b7:4e:cd:e1:32:7f:52:83:91:
                    80:c2:20:b0:fe:0c:63:9d:14:80:21:b5:ea:f4:91:
                    eb:4f:49:ec:8c:3c:21:b9:ae:6a:51:43:de:0d:56:
                    6a:98:2b:c6:d7:b0:33:ee:ab:05:bd:a6:0c:ae:21:
                    26:39:d8:4a:f3:15:8a:6e:a7:63:a7:be:28:de:60:
                    2d:cb:19:de:9e:29:74:e2:ae:23:20:0f:ba:51:42:
                    30:2b:d5:ee:b5:28:d5:dd:9f:ed:13:ed:63:6b:7d:
                    ad:31:27:21:00:7d:5f:c5:62:55:c1:73:5a:66:0f:
                    02:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D0:E7:5F:62:4A:C9:78:8E:56:4A:86:F0:0A:02:91:C8:2E:14:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a123c985-027d-392b-b1ac-c64e5601c454.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.1.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:4a:01:53:1e:3d:fb:21:a4:2c:91:eb:dd:17:34:ff:26:7e:
         f5:a1:5a:e9:4a:d8:c3:2c:af:58:e5:94:c7:d7:56:db:09:0c:
         64:28:81:a3:6d:3f:1e:db:bd:80:78:c0:97:e1:ce:40:79:10:
         d8:20:d7:ee:c8:87:3d:c8:ca:0b:6d:a6:26:ed:08:e3:19:83:
         06:12:1b:21:d3:e7:dd:2d:9d:2a:44:96:ba:5f:a6:d3:c6:8a:
         27:ca:62:57:62:0d:b0:d9:c1:ae:20:2b:bb:2e:54:a9:83:0b:
         e1:49:b3:be:5b:c0:23:b9:ac:0c:a6:da:67:0c:cb:f0:17:0f:
         f3:79:6a:ee:39:c6:67:de:97:3a:4f:d3:0a:8e:ea:7d:c8:45:
         67:e9:a7:00:96:4f:01:d3:11:ee:ed:7a:22:d2:c9:b7:44:84:
         8f:af:f9:66:a1:6d:ce:bf:88:da:33:74:2d:a9:29:67:22:a0:
         3a:38:e2:16:fe:bd:8a:48:49:6e:a7:81:32:3f:39:fb:38:87:
         72:3a:2f:df:e3:54:ac:44:6f:ce:59:d4:0a:81:20:74:b4:c7:
         a6:fd:48:d0:a2:24:8c:67:f6:d6:d0:32:e8:69:50:c4:6b:69:
         b1:bb:3e:cd:ac:66:0e:08:f4:aa:16:fc:4a:e8:52:94:4b:d8:
         76:cc:49:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:12 2025 by rpki-client on console.sobornost.net