Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ffbc32ea-31a9-38f5-8150-ad7c8a044ac7.roa
File:                     ffbc32ea-31a9-38f5-8150-ad7c8a044ac7.roa (raw, json)
Hash identifier:          pLamzm7IEAO8hasEqrs89e5MeCJXKJXSo9SbXCmeZDg=
Subject key identifier:   21:C8:63:9D:7E:41:59:B8:07:AA:EA:98:64:89:4F:BB:5C:6D:C3:C3
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F43285848FD56C087FB90EC18D0445A40
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ffbc32ea-31a9-38f5-8150-ad7c8a044ac7.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     53508
IP address blocks:        24.89.49.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:c0:87:fb:90:ec:18:d0:44:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=0131f9eb-1afc-42ee-982a-dbfcd5cefdcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c9:25:ef:ea:88:15:30:f4:59:d0:ad:d2:18:
                    c5:87:f8:15:89:f8:1f:1f:90:ba:39:59:f2:d8:73:
                    06:af:0d:95:72:18:b3:7e:f5:ed:d8:08:c0:d7:c3:
                    5a:de:f3:79:fa:8b:ad:05:80:35:98:5f:3f:f5:7e:
                    93:58:4e:8f:c0:8d:3a:b9:68:b2:6d:51:8d:16:ac:
                    e9:5d:82:29:b2:3e:bc:d4:d2:7c:1f:00:2d:6c:1e:
                    d3:e4:2f:f8:b9:c2:a9:b9:04:51:e7:fe:63:8c:46:
                    e6:e8:8c:07:34:8e:22:e0:b8:00:6e:19:29:cf:87:
                    1c:8e:39:31:c0:4a:89:2e:89:9a:0f:5b:08:2d:13:
                    7e:9e:5e:b5:5d:40:8d:e2:26:a1:ac:41:d2:c2:9c:
                    0d:94:e9:ec:f4:2b:eb:bd:79:67:9c:9c:c2:cd:22:
                    17:df:05:ba:79:ce:04:17:b0:01:6f:e3:21:e4:d8:
                    c6:1a:c9:ef:dc:05:18:ff:4e:53:6f:9c:81:78:96:
                    c9:b3:20:23:72:d2:d1:e0:70:56:0e:cc:28:c4:2f:
                    8d:24:d1:47:42:ec:b3:48:14:65:c3:07:9a:d3:60:
                    ba:49:e7:b2:4a:71:c3:71:25:3a:4d:1c:4f:3c:ff:
                    f8:0c:a2:b9:98:a1:4a:4b:7c:88:41:7b:a1:28:f8:
                    7f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C8:63:9D:7E:41:59:B8:07:AA:EA:98:64:89:4F:BB:5C:6D:C3:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/ffbc32ea-31a9-38f5-8150-ad7c8a044ac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.89.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:b3:8d:a8:50:1a:85:61:3c:9d:45:6d:aa:fd:86:99:04:f7:
         79:d7:b5:8a:f4:7b:33:66:9e:89:85:b2:a9:b1:a2:15:9b:9b:
         b5:de:5b:c4:86:8c:a3:2d:6e:4d:8b:23:3e:d2:a9:cb:1a:b5:
         3f:a3:12:c9:79:ea:74:7c:98:34:49:72:5a:89:d4:d6:2a:30:
         82:f2:0a:49:b7:6b:82:fb:9f:3b:42:84:9f:07:aa:8e:12:7c:
         a7:29:1f:6c:01:66:4e:12:48:8e:18:c0:0b:f2:02:8f:bd:2b:
         98:16:b6:ae:e9:73:18:7e:43:17:d7:1b:ec:4b:c6:b4:21:18:
         81:c9:a8:05:21:c0:71:01:31:a3:0d:a7:31:1a:f3:3e:20:15:
         a4:9c:10:c3:f8:ea:8c:f8:d6:05:04:d6:ec:6a:56:85:05:c6:
         70:9c:9b:dd:dd:66:10:b9:18:2f:08:db:9d:d6:bc:09:14:0d:
         5b:22:4b:fb:2d:66:18:15:6e:40:3e:9d:6d:a2:61:25:c3:ac:
         d8:bf:18:3d:27:04:d8:d2:e0:a0:81:0d:e1:d4:82:c7:cc:ed:
         0f:fd:28:bc:2a:ad:fb:47:ed:61:79:27:13:d2:94:26:4c:cc:
         34:f3:0a:64:bf:dc:15:7a:b5:3d:f4:d1:e9:04:56:81:27:f3:
         26:4a:8a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:04 2025 by rpki-client on console.sobornost.net