Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c1232190-0bd0-36a5-ac1c-65529011a608.roa
File:                     c1232190-0bd0-36a5-ac1c-65529011a608.roa (raw, json)
Hash identifier:          fwhF0zOXIVCd1Ndm0e8N5je2vjgv2kw73y5pBthFGB0=
Subject key identifier:   83:74:48:73:F6:55:5D:BF:0C:19:DF:52:43:2D:61:5F:D1:FA:E5:48
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F432858497544602833642532CA9DD740
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c1232190-0bd0-36a5-ac1c-65529011a608.roa
Signing time:             Tue 08 Apr 2025 13:00:59 +0000
ROA not before:           Tue 08 Apr 2025 13:00:59 +0000
ROA not after:            Mon 07 Jul 2025 13:00:59 +0000
asID:                     63386
IP address blocks:        98.142.34.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:44:60:28:33:64:25:32:ca:9d:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Apr  8 13:00:59 2025 GMT
            Not After : Jul  7 13:00:59 2025 GMT
        Subject: CN=7f2a2627-14bb-4239-8ff1-1b2cbe497541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2c:2c:a1:16:18:f5:c6:ea:4e:ed:7b:b7:bb:
                    98:44:0c:d4:0d:6a:f8:9b:49:0c:43:0f:f8:fb:e7:
                    6d:36:7a:c1:67:43:fe:96:29:5c:e5:c6:a3:3c:32:
                    67:e8:55:bd:95:cd:84:cf:e4:cf:41:ed:41:f6:bc:
                    2a:91:75:93:94:84:1c:7d:ee:a9:ac:01:eb:9d:80:
                    87:b4:15:43:a6:f4:cd:8e:10:06:59:5d:73:db:a5:
                    3a:3e:ea:9f:19:f1:bb:f3:32:d6:8c:65:de:2e:2f:
                    18:c6:3a:16:a0:4b:77:ee:e0:cb:a4:9c:32:19:7f:
                    ad:59:ca:4e:d3:63:cb:fb:82:1f:38:08:ac:9e:4d:
                    11:a2:c1:25:30:6d:a7:53:1e:36:ef:ae:4f:a1:51:
                    1a:47:6c:93:ed:4c:ba:bf:84:4d:3f:6b:5a:8e:fe:
                    ae:05:54:54:f3:58:5b:8f:e7:2a:fa:e5:ba:e7:41:
                    2d:60:23:c3:84:6b:3f:06:1a:7c:56:ac:0a:ad:ed:
                    c7:c3:1e:5f:34:01:f1:15:a7:aa:7b:81:8e:59:2b:
                    85:21:2b:bb:54:df:a6:22:bb:e9:e0:fe:58:21:1f:
                    e9:b2:03:17:cb:19:3a:f1:6e:dc:db:5f:91:d8:2e:
                    ff:fa:a8:48:ed:81:3e:dc:2f:30:fe:8b:cb:6f:fa:
                    23:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:74:48:73:F6:55:5D:BF:0C:19:DF:52:43:2D:61:5F:D1:FA:E5:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c1232190-0bd0-36a5-ac1c-65529011a608.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:c8:ba:8d:12:44:53:34:e9:60:bd:5c:32:ec:5e:58:dd:c5:
         15:8d:57:61:ae:dd:7d:27:d9:e5:c9:8b:ba:27:21:7c:9e:03:
         6c:fa:8d:a4:47:b6:57:2b:db:a0:1a:08:98:2b:a9:14:99:7f:
         58:88:fe:0e:af:48:6e:11:b7:45:ba:f7:fa:fa:08:95:34:f5:
         25:f1:a9:dc:19:a9:2c:2e:e1:58:f0:1e:31:27:71:5c:b1:c5:
         67:4c:64:21:2f:49:74:19:5c:a8:bc:87:72:cd:11:54:ee:2a:
         93:ff:fa:66:cb:4c:0d:cc:b2:1b:1b:e9:15:53:b7:93:88:b1:
         83:9e:0c:9b:2d:96:13:04:b0:50:18:22:97:cd:ce:fd:ea:e4:
         08:09:40:4c:da:b3:e4:3d:80:b7:ea:72:08:e9:26:39:5b:5b:
         9f:69:c3:f8:bb:c2:ad:d7:b7:e4:86:85:7b:34:f8:f1:6b:ce:
         92:03:77:7b:5f:50:13:2f:33:00:28:c0:72:81:82:a9:7a:93:
         e8:cb:01:f2:68:e5:a0:e6:64:66:58:f0:a7:9e:57:99:7c:b6:
         59:c2:80:fd:9d:09:d4:0f:24:22:ef:d5:79:f1:7e:ef:05:47:
         7b:5d:86:ee:43:60:fd:0b:d4:9a:65:76:9c:c9:ae:f8:dd:40:
         5d:ed:53:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:12 2025 by rpki-client on console.sobornost.net