Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ed6b206-848a-41c7-8e44-d095394ff9fe/a354f317-b819-336c-83f3-034c17167478.roa
File:                     a354f317-b819-336c-83f3-034c17167478.roa (raw, json)
Hash identifier:          9CGLdzzwsc57u1zmW27UPweoHt6wZLsucVZfBLJMzVA=
Subject key identifier:   05:28:0D:B8:20:CE:E8:46:51:97:EE:CA:2C:65:6C:C9:57:70:79:FA
Certificate issuer:       /CN=8ed6b206-848a-41c7-8e44-d095394ff9fe
Certificate serial:       010D0C9F432858495EEEEF81006FEAE9768B2EC0
Authority key identifier: 53:04:C9:27:03:E2:6D:C7:C3:AC:47:17:00:EC:10:34:D7:72:5D:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ed6b206-848a-41c7-8e44-d095394ff9fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ed6b206-848a-41c7-8e44-d095394ff9fe/a354f317-b819-336c-83f3-034c17167478.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     33617
IP address blocks:        23.185.40.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:ef:81:00:6f:ea:e9:76:8b:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed6b206-848a-41c7-8e44-d095394ff9fe
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=1a402d7d-9237-4459-a557-e106062d8244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9b:58:f6:61:62:c4:80:09:74:18:e0:49:24:
                    50:9a:08:f3:c2:e7:8f:79:e0:93:95:3b:c0:df:58:
                    d6:88:dc:40:6e:cc:c4:18:ee:af:8a:09:9d:ee:ba:
                    b8:dd:4f:78:0c:2a:96:9c:af:4d:e2:7f:77:e7:b0:
                    fd:a4:e4:cc:b9:9e:f2:e7:7b:1f:60:3e:78:90:0a:
                    55:9d:04:fd:5c:dc:fc:02:5d:93:15:a5:73:07:24:
                    11:ed:7b:61:c0:7b:61:04:ad:b8:12:ff:aa:ce:f0:
                    37:84:91:51:04:15:6c:d1:c5:a4:30:6d:2c:6a:d5:
                    b4:8c:37:df:42:64:20:0b:d4:44:69:5a:3f:5a:81:
                    fb:f1:cc:b1:48:14:3f:8b:95:51:e2:9d:08:3e:46:
                    ec:b6:5d:8d:e6:5b:43:49:c8:bd:d5:5b:b9:95:38:
                    b1:d4:f8:11:b0:31:ac:51:a5:f3:37:ff:7d:c8:4e:
                    1e:2c:c1:32:a6:5f:11:08:ed:5e:4f:77:98:ca:f0:
                    24:39:94:7e:76:fa:75:30:c9:1f:ec:bf:9a:7a:4a:
                    36:77:46:03:3f:69:34:50:c6:1e:2a:21:0c:39:ee:
                    a4:6f:bf:9f:fc:34:2b:3e:6c:fd:79:48:d6:0e:cb:
                    a3:37:58:ea:14:d8:51:27:68:62:94:e6:02:33:f8:
                    43:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:28:0D:B8:20:CE:E8:46:51:97:EE:CA:2C:65:6C:C9:57:70:79:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ed6b206-848a-41c7-8e44-d095394ff9fe/a354f317-b819-336c-83f3-034c17167478.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ed6b206-848a-41c7-8e44-d095394ff9fe/8ed6b206-848a-41c7-8e44-d095394ff9fe.crl

            X509v3 Authority Key Identifier:
                keyid:53:04:C9:27:03:E2:6D:C7:C3:AC:47:17:00:EC:10:34:D7:72:5D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ed6b206-848a-41c7-8e44-d095394ff9fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:2a:11:18:14:48:fe:80:33:fb:e9:30:3a:66:db:bb:f1:07:
         74:f0:e1:ca:30:8d:e7:df:44:a7:9a:3e:16:0f:37:6a:10:19:
         00:59:e3:47:29:f1:5e:81:f9:5b:93:eb:8b:8b:dd:ef:33:8f:
         d6:a6:01:31:26:b2:b0:d5:e0:a4:60:e6:bc:32:1a:4a:d1:03:
         0d:1f:43:90:dd:96:54:a1:37:ff:8c:89:d5:8f:2a:ff:71:82:
         97:fb:7f:65:54:be:d9:8f:bb:c2:d7:7f:39:36:ab:86:09:e7:
         68:4c:0b:1e:31:30:49:a6:8a:5d:67:24:2a:a4:e6:09:9c:99:
         13:ec:23:3d:ee:bd:2f:29:8e:aa:05:e0:7d:aa:8d:68:9e:f6:
         92:d8:6e:c7:bd:e8:04:83:2a:e1:7c:77:4e:08:cb:7b:ae:92:
         2a:72:dc:8d:d2:4c:34:3b:34:c1:49:1e:a6:73:e7:c3:ff:66:
         f7:14:d9:52:69:44:75:d8:84:68:98:c8:46:7c:53:8f:dc:0d:
         69:06:82:f3:8a:3f:f6:bf:28:f6:54:fe:dc:7f:b9:d6:95:33:
         f0:5c:22:10:0f:a6:a4:d1:39:31:b4:28:1a:45:01:41:42:a1:
         f2:87:7e:a3:2d:1e:86:b7:06:f9:7c:45:f9:2a:24:55:ae:b3:
         8a:10:f1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:20:19 2025 by rpki-client on console.sobornost.net