Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/acf10d95-d331-3615-8cb6-ef75756ed4f5.roa
File:                     acf10d95-d331-3615-8cb6-ef75756ed4f5.roa (raw, json)
Hash identifier:          uWwr49neFbppeZgU8kdCkKMszKODVydnGZizHg5OoWU=
Subject key identifier:   FB:BD:AE:3B:D3:13:DF:82:C2:04:82:E6:05:62:A6:FE:DE:2D:B7:6C
Certificate issuer:       /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial:       010D0C9F432858497F09A5CF484B68B840F62080
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/acf10d95-d331-3615-8cb6-ef75756ed4f5.roa
Signing time:             Sat 12 Apr 2025 01:00:48 +0000
ROA not before:           Sat 12 Apr 2025 01:00:48 +0000
ROA not after:            Fri 11 Jul 2025 01:00:48 +0000
asID:                     45327
IP address blocks:        162.98.44.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7f:09:a5:cf:48:4b:68:b8:40:f6:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
        Validity
            Not Before: Apr 12 01:00:48 2025 GMT
            Not After : Jul 11 01:00:48 2025 GMT
        Subject: CN=d74141c6-8a14-4940-9179-87df96acf32f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bf:27:7a:0b:6d:49:b8:aa:0d:a5:2f:35:09:
                    e1:e8:60:68:46:30:6c:03:6f:dc:d7:ff:59:37:85:
                    1b:9a:c0:e4:cf:63:9a:03:86:91:c6:fd:d7:8e:7c:
                    59:ab:2b:86:4a:1e:85:56:de:c6:1d:bf:fc:c0:03:
                    42:74:3a:17:34:d0:3d:d7:82:f6:74:c3:f0:02:6f:
                    5c:c6:0f:f2:04:20:fb:3d:23:15:4a:09:a3:5e:17:
                    86:ce:1b:70:4a:76:76:be:fb:13:f7:93:75:01:16:
                    50:4a:e7:14:e5:ef:e7:fa:0c:84:37:e8:6f:4c:e8:
                    47:7e:42:28:c5:87:3a:25:be:f7:ba:56:87:94:97:
                    c9:5b:3f:57:42:fd:9b:8d:13:ad:fc:56:cf:01:1d:
                    ec:0b:4a:99:2c:5c:30:ca:7b:45:5f:12:c5:f1:1b:
                    b9:e8:f4:80:38:db:d5:88:e7:1c:f2:da:1c:b1:67:
                    41:ad:40:00:d7:84:b7:f3:cf:05:de:1f:66:c2:2a:
                    cf:2b:1a:1d:fd:73:6d:a0:72:21:a4:37:75:d8:24:
                    ca:a1:ad:08:6a:08:a5:b5:5c:e0:b5:13:a9:ae:3b:
                    b1:37:f4:94:7e:8a:b9:3a:10:1f:c7:9f:62:45:5a:
                    b9:08:50:85:6b:af:06:f1:a4:8c:a6:12:5b:64:d8:
                    0c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BD:AE:3B:D3:13:DF:82:C2:04:82:E6:05:62:A6:FE:DE:2D:B7:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/acf10d95-d331-3615-8cb6-ef75756ed4f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl

            X509v3 Authority Key Identifier:
                keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.98.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:2e:10:c6:5b:be:9d:b5:3d:15:ba:ba:03:87:ef:b2:53:a3:
         b9:62:f4:fc:21:a2:f6:da:0e:ea:27:c0:65:da:c1:3f:49:3d:
         56:bb:96:69:d3:35:3b:8b:fa:5c:86:95:91:c4:4f:a5:9e:d7:
         b9:39:3c:d4:77:bf:5f:c0:b5:f9:6d:3f:99:bb:d1:8f:2b:a8:
         74:35:94:cf:33:c6:92:61:55:17:ee:12:c4:6d:9a:b2:79:9e:
         aa:bf:d2:b6:29:45:3e:08:6d:20:7d:45:ef:1a:bb:98:59:1d:
         63:12:9a:b3:a0:66:e1:00:e5:eb:81:ca:63:70:14:1a:e2:38:
         d1:58:bb:81:da:4a:ff:01:a4:8d:97:f3:ed:b1:55:d7:cd:43:
         b1:56:19:de:87:b2:76:41:10:27:d3:c7:c4:6a:77:2a:99:41:
         b9:a3:13:21:23:44:ad:a2:87:1e:87:bf:b2:08:91:9f:c3:8a:
         89:e7:34:2c:7f:28:11:fb:b0:76:ea:4e:d0:5f:82:a1:96:11:
         b9:a1:ba:1d:93:ec:6c:f6:51:78:a9:2c:b4:f1:38:ab:bf:55:
         02:89:54:7e:3f:f0:a9:db:17:0d:ad:dc:8f:b5:a5:7d:9e:1a:
         27:a2:49:a7:1d:89:20:c0:61:14:7d:da:63:6f:87:8f:0a:08:
         87:2c:ce:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:59 2025 by rpki-client on console.sobornost.net