Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/993a34a4-9ea6-393c-88df-cbbc50aabb28.roa
File:                     993a34a4-9ea6-393c-88df-cbbc50aabb28.roa (raw, json)
Hash identifier:          eRHmodF16QTOzJsYimnRUB9k8qeVOnO9xAPGofJtHds=
Subject key identifier:   CC:A6:C8:19:24:47:D8:85:4E:23:9B:E0:4A:C3:05:75:FD:BE:B3:D6
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F432858497974365175469FDAA325A740
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/993a34a4-9ea6-393c-88df-cbbc50aabb28.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     62563
IP address blocks:        186.190.210.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:36:51:75:46:9f:da:a3:25:a7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=6f6a36a5-2f44-4e4e-9332-cc6bc854827a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5a:0c:50:db:e0:40:ed:f8:42:4e:1d:9a:38:
                    87:16:c4:9a:dd:3a:d4:8a:fb:a2:17:cc:79:e4:17:
                    51:6a:42:5c:93:13:01:c8:3d:50:69:3b:9c:48:cf:
                    a7:96:17:ba:e1:f6:c4:9b:d1:5e:46:06:13:9d:e0:
                    6d:20:f6:ee:e8:ab:37:a7:57:2a:9e:d4:52:39:e2:
                    cd:83:5e:5b:bd:8a:04:ca:d7:91:02:59:c7:e4:77:
                    49:7b:f6:de:c5:e7:06:4b:94:3a:6a:b7:f3:bb:97:
                    0a:47:71:33:e3:12:36:45:6c:f9:3c:fa:c1:f4:7e:
                    de:5f:08:f7:92:35:f9:b4:08:62:f2:8e:98:bf:57:
                    33:88:78:df:14:80:e1:71:88:cb:1f:20:68:21:64:
                    c8:ce:7b:26:e4:d6:77:37:dc:d5:08:10:13:7c:fd:
                    4e:0e:a3:f8:51:f1:34:e7:ec:8d:93:a8:d2:ff:96:
                    b4:cd:6c:41:0b:98:4a:58:51:c3:55:d3:1e:b2:8d:
                    21:5d:67:2d:f6:14:8c:0a:b9:58:34:89:32:8f:95:
                    a4:72:3c:ca:03:9b:42:19:32:00:11:cb:07:4d:1a:
                    5e:50:55:e6:bb:f0:be:a5:9e:26:11:20:60:fa:20:
                    e9:ce:74:6b:0a:19:eb:1f:a7:90:fa:81:1f:f1:ef:
                    0e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A6:C8:19:24:47:D8:85:4E:23:9B:E0:4A:C3:05:75:FD:BE:B3:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/993a34a4-9ea6-393c-88df-cbbc50aabb28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.190.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:57:ca:49:38:7f:33:49:03:72:30:c7:b7:00:73:4f:10:d2:
         e1:ac:89:29:11:88:e5:7c:31:e6:3e:a1:29:0a:a6:2e:38:20:
         6e:58:ee:8e:4f:aa:28:d5:75:ec:f7:47:65:dc:4f:56:4d:99:
         bf:cf:fe:94:4d:88:f6:4d:cf:c8:ed:73:dc:a4:00:4d:a6:39:
         0e:6c:90:35:73:c0:e5:fe:7a:05:f1:40:99:b7:e6:cf:25:9d:
         2f:40:4d:c3:f9:ff:e2:37:af:76:57:17:c0:cf:23:b2:b7:ec:
         1e:58:18:ba:43:6f:35:a3:91:5f:52:35:ec:91:d9:58:15:fb:
         ac:3d:92:92:50:2e:99:95:3b:61:a5:5b:07:85:19:b0:e5:67:
         94:ab:46:9c:89:f9:d3:a0:c9:1b:64:bf:6f:7a:f1:b1:36:ce:
         04:5b:83:1c:14:9d:93:9b:1d:ef:e6:c1:ca:99:b1:ae:73:01:
         05:26:f1:47:95:6a:cf:fb:22:15:ad:f9:e0:9b:94:8c:ba:76:
         cc:85:55:ff:6f:2f:04:ad:55:b6:f2:77:d9:0b:53:04:a1:48:
         dd:d3:b9:af:c8:6d:50:88:41:93:5c:06:5c:53:19:96:0c:a3:
         8b:b9:69:44:bd:7c:0d:f5:4f:b9:5d:6f:f9:f1:c1:f1:55:3b:
         e0:e7:21:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:03 2025 by rpki-client on console.sobornost.net