Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/6d2eb9a6-524c-319e-9edb-ce08b07899ec.roa
File:                     6d2eb9a6-524c-319e-9edb-ce08b07899ec.roa (raw, json)
Hash identifier:          ou257jWGTXroVOSJIaUJG/9IEolkg/onn1ZBJhFqvRs=
Subject key identifier:   DB:E7:BC:0B:A5:43:0D:15:18:2A:A6:BA:98:F3:3B:26:2E:E5:60:FD
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F43285848FD56CB21B9DD559B39C78AC0
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/6d2eb9a6-524c-319e-9edb-ce08b07899ec.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     53508
IP address blocks:        142.79.96.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:cb:21:b9:dd:55:9b:39:c7:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=824100a6-4519-41d6-aa11-a1502d02e8d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:45:89:78:31:ca:69:db:b7:d0:78:db:af:ea:
                    c6:85:9a:7e:27:4b:03:e2:61:12:a8:bb:de:b7:08:
                    78:02:26:41:3a:2c:60:76:ce:85:78:c4:b6:56:5a:
                    40:4d:30:ab:f8:4f:15:fe:e7:c1:b9:c2:88:86:88:
                    a2:6b:08:62:54:6b:e3:5f:ed:b9:9e:38:f0:78:71:
                    35:f0:75:5e:d7:e0:ea:1b:b5:ee:ef:d8:6e:45:9b:
                    0f:de:01:4a:da:7c:19:c7:e6:8f:cb:29:30:65:6e:
                    ad:dd:91:5a:90:e6:7f:13:de:85:83:f7:9c:2c:a3:
                    17:a6:4c:f2:45:73:96:89:52:7d:4f:f1:2f:ce:43:
                    0f:49:24:38:13:77:4b:1f:8e:94:3d:a4:b2:c5:43:
                    d5:54:4d:49:ae:78:10:70:fa:8c:2e:d1:24:94:c1:
                    f9:e7:92:80:15:fd:a8:4d:e5:05:cd:aa:85:23:4e:
                    00:da:cc:b3:9e:e9:f9:5b:a7:96:6a:54:89:f4:16:
                    26:88:c7:0f:72:ad:2c:fd:df:3e:30:51:0f:c0:ab:
                    05:01:de:f9:c8:28:30:da:b7:33:1b:4d:99:39:78:
                    2a:d0:a6:5c:34:7a:58:16:5c:78:18:56:b4:b0:01:
                    ac:ea:b9:ff:63:7e:b2:76:51:73:2d:02:81:c6:e3:
                    6a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E7:BC:0B:A5:43:0D:15:18:2A:A6:BA:98:F3:3B:26:2E:E5:60:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/6d2eb9a6-524c-319e-9edb-ce08b07899ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.79.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:aa:90:ea:43:9e:c1:8c:d3:b4:5f:1a:7b:90:64:76:12:bd:
         1a:21:d0:aa:8a:5c:78:af:1c:b7:e7:0a:98:b4:0c:7e:1a:08:
         80:f3:d5:0f:e5:16:25:2b:10:c8:c5:54:00:86:9c:63:a7:a9:
         05:87:f2:b7:e8:aa:e9:65:e6:f2:01:d5:3b:78:5a:a3:51:6e:
         25:12:b3:3d:7c:07:c6:00:7d:50:b3:9f:de:80:e5:03:26:58:
         35:8b:8d:67:c8:63:52:a5:61:1f:1c:75:da:fe:ca:5c:3e:d1:
         72:48:02:9a:85:ba:1c:ef:a9:07:b7:5d:11:1a:a6:b4:ca:6c:
         6d:b4:63:e2:50:47:45:ed:7a:db:6a:46:e3:01:14:df:3c:73:
         6d:be:81:34:60:0f:2e:d7:c7:e5:12:c9:0b:10:51:75:bb:85:
         f5:85:eb:77:63:2c:18:1a:55:45:31:b9:73:4d:b6:96:49:a0:
         aa:87:74:78:80:ec:1f:b9:13:6b:7a:58:7f:9c:db:3d:f7:44:
         fd:d0:5a:d8:4e:f3:fa:83:10:d2:6b:c8:b0:68:24:36:e6:76:
         80:2f:5a:c8:43:21:f8:b0:75:40:07:d8:7e:f8:a3:ae:f5:4b:
         4b:2a:dd:4b:59:1c:5c:0f:4c:80:f5:ab:86:f6:d4:9d:c0:ba:
         0c:cb:92:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:04 2025 by rpki-client on console.sobornost.net