Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/3c878f33-fb18-34ff-8aee-b2c6b4d44e9e.roa
File:                     3c878f33-fb18-34ff-8aee-b2c6b4d44e9e.roa (raw, json)
Hash identifier:          GOPkwcLHuoFIqlfVcgduSEmHnXttL9EbubVLGGvX9es=
Subject key identifier:   96:40:C6:2F:51:40:9E:0E:E8:E9:93:29:E4:3B:84:2D:08:1A:88:E7
Certificate issuer:       /CN=b5f49734-696b-4966-8db9-1388a58a153f
Certificate serial:       010D0C9F43285849203C18EB7D34E4A830928E00
Authority key identifier: 0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/3c878f33-fb18-34ff-8aee-b2c6b4d44e9e.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     210
IP address blocks:        140.197.0.0/16 maxlen: 24
                          205.118.0.0/15 maxlen: 24
                          205.120.0.0/13 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:18:eb:7d:34:e4:a8:30:92:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f49734-696b-4966-8db9-1388a58a153f
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=ecc3ac61-1553-44cf-aad7-9ae629883175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:11:0e:3e:3a:72:ee:25:b5:d0:31:5a:4c:7b:
                    01:46:e1:b2:29:72:4f:8f:5d:af:8f:51:7b:3a:a4:
                    98:ef:41:31:75:bc:1e:d7:79:1b:66:41:9b:da:d8:
                    79:5f:fd:7e:74:d3:c7:76:20:26:b0:b8:e0:8c:fb:
                    1b:dd:02:ee:83:60:bd:b6:6e:ff:21:67:d2:2a:2d:
                    3b:c3:6c:d1:d7:19:40:df:67:34:f0:ae:a1:a7:9c:
                    92:bd:57:0c:b8:2b:3d:04:5d:60:28:a5:9a:3c:30:
                    42:d5:c1:86:50:a9:aa:62:9f:17:6e:70:07:00:d5:
                    c6:96:a0:cc:96:62:79:dd:b7:0a:5f:a5:5a:2a:47:
                    e2:20:ff:86:81:05:4c:c2:9c:d3:b4:56:16:bb:d0:
                    5d:20:e9:45:49:33:c8:13:9d:af:15:1a:b5:c2:0a:
                    db:e7:25:dd:58:9e:70:49:75:1d:ca:05:09:98:49:
                    64:05:0f:df:ca:80:ab:ff:2f:b9:3c:3c:74:bf:0d:
                    01:1f:d8:6f:4b:66:d0:6c:6c:49:ab:09:90:a8:6c:
                    6f:70:cd:66:6f:e7:65:36:10:50:db:90:18:d8:15:
                    bd:cf:4f:df:bf:47:d3:08:87:cc:1d:b3:02:39:6f:
                    d9:a3:89:b2:1a:68:e7:67:86:5b:76:98:05:15:dd:
                    a0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:40:C6:2F:51:40:9E:0E:E8:E9:93:29:E4:3B:84:2D:08:1A:88:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/3c878f33-fb18-34ff-8aee-b2c6b4d44e9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl

            X509v3 Authority Key Identifier:
                keyid:0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.197.0.0/16
                  205.118.0.0-205.127.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:e0:b5:33:3d:3c:6c:12:a9:eb:ac:62:31:8c:b8:03:39:a1:
         eb:7a:ee:48:a3:bd:ea:5f:4e:d2:f3:17:d0:85:45:a3:14:a7:
         85:2b:77:1b:2b:36:34:96:75:d1:a8:11:05:97:e0:fe:72:d8:
         29:b5:c0:f4:d0:35:70:79:fb:ef:76:96:7f:3b:63:68:2b:9e:
         08:31:e5:2c:9a:d2:c2:bc:d7:a3:21:8e:f9:ec:f9:ce:d0:ad:
         0b:ed:0b:6e:b8:12:eb:56:4d:26:23:a0:20:15:41:d8:7e:e9:
         3f:ac:f8:8f:2a:d2:14:d7:fc:ef:16:92:d2:b3:82:62:1c:c2:
         ae:d6:03:23:ea:e3:9f:db:c3:5e:fa:ef:28:bc:d2:e4:d4:93:
         1a:0b:08:77:a5:a0:a6:35:7e:72:88:d0:55:82:0e:74:e8:27:
         9f:e5:6c:be:fa:19:92:a8:8a:8d:ce:4b:e3:7c:91:66:db:11:
         59:8c:e6:4d:b0:45:ab:7f:88:88:e7:3e:af:66:f5:73:5c:7a:
         90:84:7e:84:6d:61:95:e6:26:69:db:b7:d5:78:70:68:23:3c:
         c9:4c:52:2e:9d:fd:4e:ea:70:b9:83:a3:f5:4e:4c:7e:a7:57:
         67:e1:54:7d:8c:56:7a:30:4e:69:c0:a0:c1:1e:6c:18:6a:67:
         92:1c:eb:f0
-----BEGIN CERTIFICATE-----
MIIGTjCCBTagAwIBAgIUAQ0Mn0MoWEkgPBjrfTTkqDCSjgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjVmNDk3MzQtNjk2Yi00OTY2LThkYjktMTM4OGE1OGEx
NTNmMB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk
ZWNjM2FjNjEtMTU1My00NGNmLWFhZDctOWFlNjI5ODgzMTc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBEOPjpy7iW10DFaTHsBRuGyKXJPj12vj1F7
OqSY70Exdbwe13kbZkGb2th5X/1+dNPHdiAmsLjgjPsb3QLug2C9tm7/IWfSKi07
w2zR1xlA32c08K6hp5ySvVcMuCs9BF1gKKWaPDBC1cGGUKmqYp8XbnAHANXGlqDM
lmJ53bcKX6VaKkfiIP+GgQVMwpzTtFYWu9BdIOlFSTPIE52vFRq1wgrb5yXdWJ5w
SXUdygUJmElkBQ/fyoCr/y+5PDx0vw0BH9hvS2bQbGxJqwmQqGxvcM1mb+dlNhBQ
25AY2BW9z0/fv0fTCIfMHbMCOW/Zo4myGmjnZ4ZbdpgFFd2gIwIDAQABo4IDYDCC
A1wwHQYDVR0OBBYEFJZAxi9RQJ4O6OmTKeQ7hC0IGojnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iNWY0
OTczNC02OTZiLTQ5NjYtOGRiOS0xMzg4YTU4YTE1M2YvM2M4NzhmMzMtZmIxOC0z
NGZmLThhZWUtYjJjNmI0ZDQ0ZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjVmNDk3MzQtNjk2Yi00OTY2LThk
YjktMTM4OGE1OGExNTNmL2I1ZjQ5NzM0LTY5NmItNDk2Ni04ZGI5LTEzODhhNThh
MTUzZi5jcmwwHwYDVR0jBBgwFoAUDLJv/j0nJzPwwGkOySwup4UtWSUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iNWY0OTczNC02OTZiLTQ5NjYtOGRiOS0xMzg4
YTU4YTE1M2YuY2VyMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAATARAwMAjMUwCgMD
Ac12AwMHzQAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB
FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN
BgkqhkiG9w0BAQsFAAOCAQEApeC1Mz08bBKp66xiMYy4Azmh63ruSKO96l9O0vMX
0IVFoxSnhSt3Gys2NJZ10agRBZfg/nLYKbXA9NA1cHn773aWfztjaCueCDHlLJrS
wrzXoyGO+ez5ztCtC+0LbrgS61ZNJiOgIBVB2H7pP6z4jyrSFNf87xaS0rOCYhzC
rtYDI+rjn9vDXvrvKLzS5NSTGgsId6WgpjV+cojQVYIOdOgnn+VsvvoZkqiKjc5L
43yRZtsRWYzmTbBFq3+IiOc+r2b1c1x6kIR+hG1hleYmadu31XhwaCM8yUxSLp39
TupwuYOj9U5MfqdXZ+FUfYxWejBOacCgwR5sGGpnkhzr8A==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:30 2025 by rpki-client on console.sobornost.net