Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/9c3e3edc-3909-344f-8448-01bc508f03d9.roa
File:                     9c3e3edc-3909-344f-8448-01bc508f03d9.roa (raw, json)
Hash identifier:          N+kito9r3hkm+U1jPK8pjYniAyW71TlorF1L3WIFwPw=
Subject key identifier:   35:4B:75:7B:27:5C:F8:FA:93:27:A5:62:DF:EF:17:9C:25:BB:A4:7D
Certificate issuer:       /CN=311e0039-6b7c-42f2-a76e-395b51d9ec97
Certificate serial:       010D0C9F4328584957F4175F2480FEE2DD98C800
Authority key identifier: 9A:90:99:7A:47:4A:98:A4:A1:24:89:41:55:90:BE:7C:B7:54:35:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/9c3e3edc-3909-344f-8448-01bc508f03d9.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     400414
IP address blocks:        23.140.152.0/24 maxlen: 24
                          130.51.124.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:17:5f:24:80:fe:e2:dd:98:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=311e0039-6b7c-42f2-a76e-395b51d9ec97
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=d6a8cec3-f4e7-428c-8851-2b633030c6c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a1:b6:72:07:c1:a0:e6:0a:51:9f:76:6f:92:
                    86:74:e7:f5:64:e2:d2:9e:08:dc:28:ae:57:82:14:
                    f3:cb:67:69:bb:95:17:b7:66:f3:17:1e:2e:bd:b0:
                    21:41:8d:4c:e4:85:be:79:55:be:d8:53:fe:ce:31:
                    0e:c8:ba:d6:5a:24:f4:b1:f9:c7:cb:3d:de:8c:ac:
                    9b:1e:54:fe:41:a1:69:58:34:b6:fa:8f:f3:85:50:
                    c8:13:5c:cd:d5:8f:9a:1c:bb:1e:f2:79:e1:73:bd:
                    64:99:69:e9:79:1a:28:b8:28:94:54:07:a2:8a:96:
                    7c:83:36:5c:66:30:4a:2b:e5:ab:00:73:b5:81:26:
                    2b:9c:c6:68:b3:4f:15:cb:99:2b:a2:0f:26:fd:fd:
                    b5:a6:e9:de:b1:00:38:9f:dc:46:79:93:5d:88:e8:
                    39:31:9f:1a:f3:af:97:7b:5a:55:77:aa:92:2a:0d:
                    f5:28:28:35:60:3e:56:00:03:ed:4e:a1:21:9b:54:
                    30:ea:4d:8d:ac:9b:50:33:97:37:6e:c1:a0:92:77:
                    44:3b:e9:60:36:ac:b9:fe:40:01:a2:76:7a:e0:85:
                    04:4c:9b:7e:6f:4c:fc:e1:72:9e:af:6a:d8:b0:c2:
                    c3:45:2c:9c:c5:33:e1:1d:17:a1:05:b5:ca:01:59:
                    ab:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4B:75:7B:27:5C:F8:FA:93:27:A5:62:DF:EF:17:9C:25:BB:A4:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/9c3e3edc-3909-344f-8448-01bc508f03d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.crl

            X509v3 Authority Key Identifier:
                keyid:9A:90:99:7A:47:4A:98:A4:A1:24:89:41:55:90:BE:7C:B7:54:35:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.152.0/24
                  130.51.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:6e:56:e2:e0:c1:08:6f:72:54:5c:34:94:55:c6:08:3e:56:
         95:5f:54:86:85:9c:5c:d8:43:07:04:95:ef:c0:20:27:c0:a9:
         94:74:8e:c4:fb:ed:29:2e:74:68:3e:ab:81:a1:bd:df:83:e8:
         04:ae:ff:21:5e:e8:4c:b7:64:9d:a4:ef:d2:33:85:09:19:8e:
         34:b8:c0:ea:9b:40:14:ba:d8:ce:52:96:7c:94:b4:28:e6:43:
         26:2c:73:f5:37:cc:8d:bb:ad:6f:7a:8b:35:14:f5:3b:49:82:
         ec:ff:69:e9:f4:b5:a5:f5:6f:80:42:d0:ee:86:4f:ac:91:79:
         74:de:87:23:64:49:74:f1:a1:ca:76:30:d8:cf:06:de:29:65:
         8a:47:30:99:c3:2b:87:5a:1d:b4:f3:bc:2e:a1:65:e6:78:11:
         2a:69:23:e8:06:67:3b:3a:d1:d4:13:12:56:bb:5a:48:c7:a7:
         f4:ab:27:10:3e:3a:f3:39:71:52:b2:67:f8:ce:53:67:88:64:
         7e:71:81:13:63:0d:d6:13:89:be:5f:6e:94:63:2a:bb:32:38:
         49:aa:80:3d:d8:6f:5a:56:91:11:4a:6f:6e:f5:df:95:c5:5f:
         ec:74:02:fb:4f:62:b8:14:9e:f2:d4:a8:c0:90:74:92:ac:6b:
         95:a4:0f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:29 2025 by rpki-client on console.sobornost.net