Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0aa2eb7a-97e9-33c1-835f-2c30396f0542.roa
File:                     0aa2eb7a-97e9-33c1-835f-2c30396f0542.roa (raw, json)
Hash identifier:          DcEwK3tUvmd2Xle+Cg1pgKU1CqPYGPr/t5nKIKMqgr4=
Subject key identifier:   61:A8:A0:1F:92:7B:1D:1E:85:57:F5:59:ED:4C:8F:9F:CD:1B:BD:20
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858495ABEDF1D986E7DCFE14727D3
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0aa2eb7a-97e9-33c1-835f-2c30396f0542.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     3356
IP address blocks:        104.253.29.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:df:1d:98:6e:7d:cf:e1:47:27:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=7c3242fe-d1e4-40e9-8de0-acab23a3468e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ef:1f:02:00:58:0f:20:65:fe:c7:d1:64:b9:
                    7b:1d:9b:20:d8:13:0b:a3:fc:3f:95:62:c2:aa:7d:
                    59:f9:d9:6c:f4:5f:28:12:d7:3d:d3:88:4c:9c:ba:
                    b2:ee:64:5d:b7:5a:79:d3:f2:67:92:87:72:b2:f5:
                    6e:20:ee:ea:b4:f0:16:fd:c1:bd:87:eb:0e:2c:0a:
                    e8:37:95:35:31:c6:da:88:56:41:38:a5:fc:96:1e:
                    d0:d0:be:13:91:8f:c4:0b:fc:86:ef:81:3c:04:52:
                    3f:71:77:0d:97:f8:4e:1c:db:24:af:4b:c7:86:75:
                    f7:e4:ee:0c:79:70:6a:27:85:41:e0:a0:9b:51:07:
                    e1:c4:08:db:30:80:ba:53:35:f7:12:84:ff:48:a4:
                    c1:32:f3:45:04:8e:df:df:d3:7a:2d:2e:26:ae:5d:
                    22:ea:3c:f5:97:63:d4:f9:88:56:82:9b:f5:b6:f3:
                    8d:52:65:19:a9:49:f9:f0:0e:65:d5:c6:c0:34:bf:
                    5f:41:97:94:cf:f4:de:0e:9d:e1:c4:b9:cd:88:e2:
                    25:df:1f:4f:29:ed:06:76:2a:d0:86:3a:be:75:9b:
                    6a:f9:f6:e4:52:2d:26:01:0c:03:af:6b:ca:f7:0b:
                    2c:82:e2:c4:b8:0b:ba:60:2c:f4:2c:5a:86:59:c7:
                    22:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A8:A0:1F:92:7B:1D:1E:85:57:F5:59:ED:4C:8F:9F:CD:1B:BD:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0aa2eb7a-97e9-33c1-835f-2c30396f0542.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:0a:38:5d:76:06:5f:3b:12:ca:48:be:11:f1:be:56:de:5b:
         cf:05:23:83:90:4b:cd:6c:d5:c0:e3:55:0d:a1:9f:fe:b3:ed:
         fa:d6:78:e2:00:cc:fe:3c:a7:04:bd:cc:f9:47:2f:76:d0:42:
         60:c6:2e:f7:55:ba:f2:16:18:ae:cd:16:04:64:ed:7e:a3:27:
         27:1f:d6:6e:d1:18:4f:2f:5c:f9:65:54:4c:c8:ee:91:dd:e1:
         e5:3a:e3:cd:2c:41:6a:d4:d8:a0:fa:39:6f:08:75:17:a6:c2:
         65:69:7a:90:b9:8a:59:b1:9a:94:2e:c4:77:a0:6a:8f:62:c5:
         c3:a1:4e:eb:fe:0c:eb:8a:94:e3:bd:04:b3:6a:8d:f1:d5:d1:
         d5:96:64:12:2f:ff:ec:dc:1f:d7:c6:d0:24:a7:3d:9e:c1:7e:
         d1:62:6a:56:f3:65:00:88:88:c5:af:f1:75:80:3a:c9:43:63:
         b9:4d:ea:be:42:4c:d7:58:d9:4f:b3:f6:9e:c6:9c:9a:19:ae:
         65:c6:31:aa:d6:2d:b3:ed:d0:dd:ef:c3:b0:4c:52:0b:b8:a6:
         8a:24:bc:f6:5b:0b:03:4e:3c:c2:43:fb:d9:bd:b9:fc:60:ca:
         a9:3d:b0:2d:10:9e:f6:ef:f0:07:83:e3:75:81:59:0c:1b:c2:
         2b:a8:d1:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavt8dmG59z+FHJ9MwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk
N2MzMjQyZmUtZDFlNC00MGU5LThkZTAtYWNhYjIzYTM0NjhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoO8fAgBYDyBl/sfRZLl7HZsg2BMLo/w/lWLC
qn1Z+dls9F8oEtc904hMnLqy7mRdt1p50/JnkodysvVuIO7qtPAW/cG9h+sOLAro
N5U1McbaiFZBOKX8lh7Q0L4TkY/EC/yG74E8BFI/cXcNl/hOHNskr0vHhnX35O4M
eXBqJ4VB4KCbUQfhxAjbMIC6UzX3EoT/SKTBMvNFBI7f39N6LS4mrl0i6jz1l2PU
+YhWgpv1tvONUmUZqUn58A5l1cbANL9fQZeUz/TeDp3hxLnNiOIl3x9PKe0GdirQ
hjq+dZtq+fbkUi0mAQwDr2vK9wssguLEuAu6YCz0LFqGWcciFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGGooB+Sex0ehVf1We1Mj5/NG70gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMGFhMmViN2EtOTdlOS0z
M2MxLTgzNWYtMmMzMDM5NmYwNTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP0dMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEAKOF12Bl87EspIvhHxvlbeW88FI4OQS81s1cDjVQ2hn/6z7frWeOIA
zP48pwS9zPlHL3bQQmDGLvdVuvIWGK7NFgRk7X6jJycf1m7RGE8vXPllVEzI7pHd
4eU6480sQWrU2KD6OW8IdRemwmVpepC5ilmxmpQuxHegao9ixcOhTuv+DOuKlOO9
BLNqjfHV0dWWZBIv/+zcH9fG0CSnPZ7BftFialbzZQCIiMWv8XWAOslDY7lN6r5C
TNdY2U+z9p7GnJoZrmXGMarWLbPt0N3vw7BMUgu4pookvPZbCwNOPMJD+9m9ufxg
yqk9sC0Qnvbv8AeD43WBWQwbwiuo0Sk=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:30 2025 by rpki-client on console.sobornost.net