Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0815fff5-25c2-3180-827e-b1fecdcf5669.roa
File:                     0815fff5-25c2-3180-827e-b1fecdcf5669.roa (raw, json)
Hash identifier:          8SWXuGEBI38R2PX6xKlkq9xbQwaxiZtsC5HatFDkNd8=
Subject key identifier:   4D:63:ED:64:36:8C:0D:D8:E8:78:8D:DE:38:BD:BD:63:18:05:D1:CB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584981D44CBF053B42FA95B01880
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0815fff5-25c2-3180-827e-b1fecdcf5669.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     400536
IP address blocks:        172.120.156.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:4c:bf:05:3b:42:fa:95:b0:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=92f2f40e-c725-4b52-874d-d134bd3d037c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:05:90:40:2d:70:de:bd:65:8c:5b:0b:0a:c6:
                    57:2f:19:b5:ea:61:f9:63:17:aa:3d:4a:3d:1c:da:
                    6f:2b:ff:cc:e0:64:bb:df:d8:c0:7f:52:53:94:28:
                    1f:9e:ce:ba:a0:1e:5e:4d:f5:1a:81:a7:91:57:f7:
                    63:06:db:a7:6b:45:e3:0b:29:3c:6e:25:df:25:b3:
                    66:b9:b0:b6:78:1d:91:7b:52:7c:94:53:f1:85:36:
                    45:e6:81:cc:14:6f:6e:14:21:93:bc:c9:36:92:5a:
                    03:d9:e1:9a:3d:f2:67:af:78:b6:46:6d:34:12:9f:
                    4a:ef:2c:ec:bf:e4:b3:ea:f2:53:5d:4c:50:a4:85:
                    3f:92:5d:be:ce:dd:29:5f:47:a6:29:dc:42:d3:fa:
                    de:4d:3d:60:2a:b9:67:ba:fe:15:59:77:8d:bb:17:
                    1d:f5:51:e6:cc:59:19:b1:20:6a:62:6e:f1:57:9f:
                    a2:03:b1:ef:71:9f:77:50:f5:60:45:64:c6:e7:18:
                    4a:48:ae:ef:6e:57:14:01:55:fa:da:27:f3:e0:57:
                    14:cb:dc:fe:95:eb:cf:03:c7:da:26:13:53:9a:fd:
                    a9:c8:b0:04:63:7e:84:cf:f3:d1:09:16:2d:6a:85:
                    66:9d:d3:8c:a4:48:79:fd:c6:38:35:c5:9d:0a:99:
                    84:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:63:ED:64:36:8C:0D:D8:E8:78:8D:DE:38:BD:BD:63:18:05:D1:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0815fff5-25c2-3180-827e-b1fecdcf5669.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:38:de:1a:5b:22:1b:1f:66:6c:ef:b2:6a:9a:bd:b4:49:0d:
         38:d1:8b:a1:90:26:17:32:92:6c:a9:44:f3:69:8b:cb:6d:38:
         06:0f:2a:51:b6:c7:ba:7d:e4:a8:82:6d:f4:4f:da:7c:a2:7c:
         9a:35:67:66:71:56:9b:6e:eb:e6:5e:35:60:0b:ea:31:fa:0d:
         43:31:79:e1:d7:df:11:76:39:5a:50:40:37:92:f1:4f:41:20:
         35:7e:ad:8b:ad:e9:8b:4c:43:77:6a:0a:42:c2:5b:49:ef:2c:
         9e:5b:2f:94:81:22:be:c4:e4:33:c8:ce:1c:18:fa:f1:99:4a:
         51:03:1d:54:ad:d5:6e:9d:48:16:cc:4a:3a:56:b7:40:57:eb:
         d9:c0:49:e5:3b:eb:1b:f9:62:04:3e:5b:13:3f:69:7b:b3:16:
         e9:c0:eb:e4:c4:01:5d:0a:1a:45:66:25:72:59:06:d1:cc:99:
         ee:40:c6:15:ce:92:8a:3f:a6:ee:d9:e4:dd:72:b9:c5:35:3c:
         14:ef:d0:6a:c2:b1:4a:08:3e:89:ac:5e:e1:8f:f6:a9:b0:fd:
         08:e6:71:6e:61:9a:aa:56:5e:31:3d:84:e4:c9:f2:75:17:91:
         4b:a0:7b:f3:cf:b3:b0:64:5d:93:8d:c6:43:ab:76:38:68:49:
         cb:e6:f5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:30 2025 by rpki-client on console.sobornost.net