Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/cc28015c-38d8-37cf-9d4f-9fb06e88fc2d.roa
File:                     cc28015c-38d8-37cf-9d4f-9fb06e88fc2d.roa (raw, json)
Hash identifier:          D+lG84SIYX401KRPdlowgAPoVyl4YSSjxfrR1es2b/s=
Subject key identifier:   CD:F7:C2:CA:CD:CF:C5:C0:24:56:7D:B6:FE:A5:A4:27:4E:D0:20:D8
Certificate issuer:       /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial:       010D0C9F432858495ABECDE28A6C2603FD81C8C0
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/cc28015c-38d8-37cf-9d4f-9fb06e88fc2d.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     9084
IP address blocks:        154.1.174.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:cd:e2:8a:6c:26:03:fd:81:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=82016255-8001-4d92-8b7f-ec4c70f0707e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:54:ee:63:4e:3f:98:69:a1:c8:30:b1:64:f1:
                    e7:2f:52:9c:3a:53:8d:18:94:ab:32:a7:18:65:95:
                    e5:8d:dd:84:24:f9:03:4c:4b:64:4b:9e:56:6e:a1:
                    9a:32:b8:8a:e3:fd:c7:90:fe:bd:54:1a:2b:aa:db:
                    a6:ad:7c:3c:59:76:b4:25:9f:06:94:ef:de:67:c8:
                    4e:29:3f:f7:9b:7a:2e:ad:61:71:37:26:91:0b:c1:
                    c3:08:d4:a9:23:e3:95:aa:63:c8:c7:6b:24:ad:86:
                    e8:4c:cc:4f:7a:59:c8:fb:31:26:25:66:5a:c2:f3:
                    83:ea:df:e3:20:77:11:b1:b6:8d:d7:38:32:b6:25:
                    72:d7:33:ea:54:8d:23:e1:7e:2d:3a:b9:7d:4f:17:
                    0c:2e:5d:3a:68:58:a5:3b:bd:5e:73:4c:79:9c:ea:
                    79:57:51:c6:a0:9b:cc:fe:9d:c8:c7:01:9e:ee:8a:
                    a9:79:94:92:36:3b:27:11:76:4e:36:65:06:28:ba:
                    51:fb:dc:eb:5a:60:ca:82:ef:a2:20:f0:3f:d1:5d:
                    75:d2:e4:9d:38:8d:fb:df:a7:3c:b9:cb:1c:65:88:
                    11:76:28:1e:27:76:2e:37:3d:3c:b6:64:c1:e1:b9:
                    66:d9:79:b9:a6:7b:8f:e3:19:d3:f7:fb:e9:25:d7:
                    29:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F7:C2:CA:CD:CF:C5:C0:24:56:7D:B6:FE:A5:A4:27:4E:D0:20:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/cc28015c-38d8-37cf-9d4f-9fb06e88fc2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl

            X509v3 Authority Key Identifier:
                keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.1.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:2d:31:5a:74:e0:0e:15:90:bb:a2:ef:0f:80:a2:2e:2b:1f:
         5a:e3:a9:83:ac:ce:86:c9:21:2c:c8:c4:5b:a2:7a:df:bd:75:
         b2:a2:7d:ad:5e:7f:36:29:be:80:6f:30:a7:dc:8f:45:11:ee:
         5b:df:1d:16:9d:09:3b:4e:2c:99:e0:b6:40:f2:0a:ba:a3:be:
         05:5c:88:51:92:b6:5d:7d:a6:89:2d:7a:bf:58:b0:44:d6:8a:
         57:73:38:00:48:8b:f5:e5:d9:7b:ce:ad:2d:b8:4a:26:d9:8e:
         b6:69:bd:c0:32:e5:c7:be:26:39:c1:8b:ab:b2:88:62:33:b6:
         87:37:a5:9c:8a:98:70:85:32:e3:1f:84:84:9c:bf:6a:0a:f3:
         f7:2a:6a:1f:9b:e3:1c:d1:73:00:70:28:a1:be:ef:b0:70:cb:
         e1:02:4c:e7:5b:40:d9:d4:b3:8c:12:fc:14:5f:a0:c3:96:71:
         56:d2:b2:ba:6c:56:bd:c3:86:ee:7f:f8:ac:f8:87:46:66:21:
         7d:03:43:f9:3a:6d:3b:b6:d2:42:cf:fb:51:b2:26:01:3a:1a:
         88:63:95:6b:42:41:d6:9d:85:a3:35:94:d7:f7:bb:6b:cb:74:
         24:9e:17:41:47:dc:00:c9:b4:7d:a1:30:98:54:2b:98:e9:da:
         33:32:71:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:59 2025 by rpki-client on console.sobornost.net