Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/dc7effe8-961c-38c8-9c69-4bd81693e1f9.roa
File:                     dc7effe8-961c-38c8-9c69-4bd81693e1f9.roa (raw, json)
Hash identifier:          zOE/aNoYuCO+tGWAK+EAE2mgZSnDc4vi8UvB5OetZ2c=
Subject key identifier:   8E:F1:01:57:54:10:2A:E9:6A:24:D8:AD:92:59:8B:32:CD:E8:F7:29
Certificate issuer:       /CN=2c2b1124-f433-4440-b52c-8f0b5650e2bb
Certificate serial:       010D0C9F432858498199AB5EFA407B844D985100
Authority key identifier: 5F:EE:E2:BF:7F:FE:5E:32:1F:29:95:6C:7D:EC:5D:BE:2E:21:D0:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/dc7effe8-961c-38c8-9c69-4bd81693e1f9.roa
Signing time:             Sat 12 Apr 2025 23:02:44 +0000
ROA not before:           Sat 12 Apr 2025 23:02:44 +0000
ROA not after:            Fri 11 Jul 2025 23:02:44 +0000
asID:                     13875
IP address blocks:        207.228.202.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:99:ab:5e:fa:40:7b:84:4d:98:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c2b1124-f433-4440-b52c-8f0b5650e2bb
        Validity
            Not Before: Apr 12 23:02:44 2025 GMT
            Not After : Jul 11 23:02:44 2025 GMT
        Subject: CN=a1b418f1-10f6-4630-b902-403a8547ecaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:96:4a:b8:84:7a:03:b0:78:36:85:5a:d7:02:
                    9b:a7:cf:f8:af:71:27:f2:a8:d9:a8:7e:20:44:74:
                    a7:2a:26:d4:f3:7d:9a:aa:80:02:74:4b:1a:f9:c6:
                    6f:a7:21:e4:61:6a:a4:e1:8c:e0:36:09:e7:7d:9a:
                    68:62:d2:87:7a:e2:ad:bd:00:f4:cc:b0:e5:04:aa:
                    6f:8f:4a:0a:af:35:42:5e:47:f7:e3:97:29:e2:19:
                    43:9f:ca:8f:01:d8:f9:94:d5:ce:6c:09:a2:11:82:
                    43:ca:5f:1d:09:22:2c:c4:5e:d0:15:7b:b1:3f:d6:
                    6d:22:4c:11:64:75:1a:e5:9d:f7:f9:8f:b0:c7:22:
                    ff:c6:7f:cd:de:e9:71:8c:3c:cb:0b:4e:7d:70:68:
                    80:b1:29:bc:4e:5c:33:18:ca:74:77:7e:c0:c6:53:
                    69:b1:3b:db:22:0f:94:95:37:a1:0d:e2:df:10:b8:
                    6c:b3:a3:0c:c7:66:59:b3:d8:8c:5d:73:b2:45:2b:
                    e1:67:05:87:6e:33:0b:0a:f5:8d:86:75:d0:64:ce:
                    10:91:0b:94:ab:9e:cd:8e:3c:d1:85:bd:49:fe:d9:
                    8e:d0:60:1e:9a:6a:a7:74:8b:95:6c:68:6e:f3:71:
                    a2:e9:89:1c:be:06:98:72:50:37:f8:5d:1d:49:2a:
                    9f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F1:01:57:54:10:2A:E9:6A:24:D8:AD:92:59:8B:32:CD:E8:F7:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/dc7effe8-961c-38c8-9c69-4bd81693e1f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/2c2b1124-f433-4440-b52c-8f0b5650e2bb.crl

            X509v3 Authority Key Identifier:
                keyid:5F:EE:E2:BF:7F:FE:5E:32:1F:29:95:6C:7D:EC:5D:BE:2E:21:D0:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.228.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:ef:c7:84:48:9c:d3:3b:57:45:9a:eb:d7:19:b5:12:cc:f5:
         a2:06:34:1e:c3:69:78:d5:4e:23:e0:a9:27:4e:a8:62:44:51:
         c7:b8:ea:7e:91:34:3e:03:5d:9b:92:a9:1a:d6:48:d7:f9:b7:
         cf:87:3d:fd:c7:20:71:a0:c9:57:59:18:c0:51:73:c0:46:87:
         e9:40:1d:2e:b4:30:02:9f:73:ee:64:ff:19:99:c3:2a:87:6a:
         e4:62:96:63:6d:cb:5c:42:a0:e8:ff:43:a7:02:b4:75:79:4c:
         8e:9b:af:9e:a6:fd:cd:78:2c:e9:a6:f0:3f:a7:73:4c:6b:dd:
         eb:38:d2:1f:f4:8e:51:19:7f:f8:38:7e:2b:0d:67:88:8b:1e:
         fa:a7:ee:a7:03:89:39:a8:93:64:e9:ad:4e:31:b3:34:72:27:
         17:01:0f:69:63:c6:7a:d0:25:f3:05:54:6e:03:74:0e:7f:ed:
         84:10:df:54:a2:53:c1:91:b7:3f:29:71:d3:ce:a2:17:4f:e8:
         9a:79:b4:a6:9a:93:29:16:de:2f:46:f7:be:b5:4e:c2:3f:50:
         2b:41:00:e6:9c:9f:86:a8:87:f1:ff:3f:52:81:b9:32:e7:0f:
         ec:60:57:76:fe:25:3b:d2:fa:2e:25:a9:31:a2:95:6b:74:d5:
         55:ca:26:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:20:19 2025 by rpki-client on console.sobornost.net