Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b9c80596-8219-3a15-b785-719270d57853.roa
File:                     b9c80596-8219-3a15-b785-719270d57853.roa (raw, json)
Hash identifier:          nyEYFQhXJ6QgoatXnxDcrAJjRbHd6diGuLrmYJLtLUQ=
Subject key identifier:   94:95:31:A9:20:B3:DF:9E:A2:D7:2C:B2:3F:FF:8F:B8:38:49:29:6B
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F43285849711430B91845659E8AC80080
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b9c80596-8219-3a15-b785-719270d57853.roa
Signing time:             Mon 07 Apr 2025 01:00:47 +0000
ROA not before:           Mon 07 Apr 2025 01:00:47 +0000
ROA not after:            Sun 06 Jul 2025 01:00:47 +0000
asID:                     23473
IP address blocks:        68.234.146.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:71:14:30:b9:18:45:65:9e:8a:c8:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Apr  7 01:00:47 2025 GMT
            Not After : Jul  6 01:00:47 2025 GMT
        Subject: CN=ce5ab898-3441-4fb8-98ff-599ab96435aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:04:03:eb:f7:66:6b:7f:aa:e3:4f:ea:69:0a:
                    73:d6:71:1b:dc:65:20:14:01:99:47:a9:16:ab:83:
                    b8:51:7b:30:99:77:15:55:58:08:c1:87:e3:97:7f:
                    4f:27:f0:e0:4c:fc:e9:66:3c:6f:e6:5e:5c:42:47:
                    e9:71:b8:43:ec:88:23:b2:9f:88:ae:6d:78:a8:ec:
                    6d:16:3e:d7:1a:d3:31:2a:0e:44:a2:99:c7:19:df:
                    fe:92:c4:83:ef:10:d2:e1:dc:f5:e1:10:31:e8:28:
                    55:6f:03:57:5d:a9:f0:e1:d3:37:85:de:ab:8a:6c:
                    1c:a8:d4:4b:df:cf:78:ae:4f:4e:f8:fc:bb:7c:01:
                    a2:63:2a:d7:bd:e1:70:cb:3b:9f:47:58:90:56:32:
                    45:28:c7:33:a8:8c:3c:91:c0:73:33:aa:e7:c6:53:
                    7d:2f:bc:82:8d:51:a1:b8:2d:9b:49:8a:be:d3:53:
                    84:61:65:47:c0:3f:c9:2c:df:d0:51:cb:fd:b2:85:
                    24:ed:5b:26:e6:a5:e5:18:b9:0b:09:0b:9c:91:d7:
                    9d:b2:ec:cd:c0:6c:69:9a:7e:10:bb:f2:56:83:d7:
                    e4:d9:ed:70:1d:98:b2:29:f8:6e:5a:e0:0f:8b:2e:
                    c6:01:32:a7:06:b8:e1:f9:1e:d4:d0:19:e4:65:c3:
                    e8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:95:31:A9:20:B3:DF:9E:A2:D7:2C:B2:3F:FF:8F:B8:38:49:29:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b9c80596-8219-3a15-b785-719270d57853.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:6c:8f:6a:a8:d3:c1:46:1c:65:08:fe:95:ed:ab:b9:e4:ed:
         ac:17:04:c5:c3:f3:47:77:8c:7a:43:b2:f5:7d:8f:3e:56:a2:
         bc:92:14:07:8c:11:3e:92:fc:6a:49:9d:2e:15:d5:51:35:08:
         47:34:49:ac:c3:2c:cf:82:93:56:02:f4:b7:34:7a:51:07:8c:
         e1:ff:26:3c:cc:3f:eb:39:24:e9:bb:ac:e7:69:65:ad:c4:f2:
         8b:25:06:3c:19:cb:ae:81:a7:9f:4f:89:56:cb:23:05:06:90:
         3f:60:2a:6b:dd:74:11:af:f6:37:1f:28:7f:d5:93:c4:03:63:
         34:dc:82:c4:02:98:93:e0:b8:d8:47:07:66:96:04:72:24:e6:
         1d:6e:98:9a:ee:32:c0:5d:34:79:30:9d:9e:9e:ca:5f:9d:d8:
         0a:27:7a:44:a7:46:ab:65:f5:6b:bd:bf:55:25:27:f5:3e:d1:
         4e:31:95:ca:45:53:5e:66:fc:94:59:24:72:e9:03:fc:25:a6:
         0e:1f:8f:68:f7:c4:c8:7d:fd:0a:55:81:da:e5:97:75:ad:fd:
         b5:db:6e:28:42:fc:61:de:66:34:3e:89:b0:4c:f2:cf:bb:ad:
         55:a6:92:7c:5d:78:55:d0:a1:55:4c:b0:4f:38:4f:0d:f7:3c:
         00:b7:49:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:03 2025 by rpki-client on console.sobornost.net