Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0b326700-9d5b-34d5-947b-fd7575afb672.roa
File:                     0b326700-9d5b-34d5-947b-fd7575afb672.roa (raw, json)
Hash identifier:          rFg1kf9a95cBBXB0UUlOTlFJLpAsjNIP1pviJRbSoyU=
Subject key identifier:   90:65:49:BD:E9:EB:60:8D:65:F6:E3:B4:96:12:5C:C2:86:AB:AF:80
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858497D98B8FE95B96ADCFBB90C00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0b326700-9d5b-34d5-947b-fd7575afb672.roa
Signing time:             Fri 11 Apr 2025 12:37:35 +0000
ROA not before:           Fri 11 Apr 2025 12:37:35 +0000
ROA not after:            Thu 10 Jul 2025 12:37:35 +0000
asID:                     18779
IP address blocks:        23.230.7.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:98:b8:fe:95:b9:6a:dc:fb:b9:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 11 12:37:35 2025 GMT
            Not After : Jul 10 12:37:35 2025 GMT
        Subject: CN=d68d5dc0-68e0-41cf-b611-5b6cf1f5c455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f5:27:c3:80:42:98:6e:3a:33:33:09:9c:90:
                    fb:d3:c8:48:38:eb:38:b8:f8:fa:0c:ea:f2:c4:1a:
                    b7:06:74:b1:c8:c1:9f:f9:77:3f:86:c8:31:65:f7:
                    cf:8b:b9:52:95:43:ca:91:06:05:cb:12:5a:29:11:
                    1e:00:19:eb:09:d4:06:9b:d0:2a:46:4b:14:fa:9c:
                    72:d6:40:3e:1d:b7:92:29:00:7f:a1:9a:18:01:e3:
                    c9:20:0c:4b:40:be:d9:19:72:a7:3e:df:13:ca:65:
                    18:7d:0c:73:22:16:2a:2b:22:c8:1d:67:20:46:5b:
                    2c:43:70:1b:dc:05:5d:c4:27:76:01:c3:e4:7f:a4:
                    10:c8:f6:9f:0f:f9:dc:2c:fd:06:b4:99:76:28:8d:
                    e1:86:5c:43:4d:98:db:1e:1e:48:bb:e3:6e:9e:c0:
                    bb:05:35:5e:b2:44:3f:97:d8:84:c8:5b:31:11:8e:
                    ce:69:61:da:c8:11:f8:34:5b:e9:d4:78:05:2d:d1:
                    6d:96:31:cb:67:38:80:0a:ba:e2:29:02:33:f7:d3:
                    79:0a:53:64:89:4b:ea:61:69:86:20:14:0b:7b:df:
                    98:41:4a:bd:7b:a1:45:e5:2f:f8:67:8e:b2:e6:b5:
                    43:8d:03:9c:fa:a0:f5:a7:9f:9f:7b:dd:3c:74:2d:
                    c4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:65:49:BD:E9:EB:60:8D:65:F6:E3:B4:96:12:5C:C2:86:AB:AF:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0b326700-9d5b-34d5-947b-fd7575afb672.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:01:d3:a8:65:6f:b9:42:9b:4b:8f:ee:97:2e:17:31:48:48:
         34:fd:bd:b0:a7:78:2b:ab:89:1a:03:18:ce:07:5d:e7:c3:46:
         2f:d6:30:f6:15:76:b1:87:46:51:7b:15:eb:11:0e:26:43:27:
         23:61:9d:17:e3:1d:cf:a2:9c:96:f9:00:f2:d6:ca:60:19:27:
         88:a0:50:bd:c6:90:a9:bb:7c:b7:6f:2a:df:a5:c7:38:48:56:
         00:ec:ae:3f:14:06:05:d3:e1:8f:83:05:2e:00:47:8c:8f:b3:
         2f:3a:ef:1a:2c:b7:66:cd:c2:1d:71:44:cf:80:76:60:15:7e:
         f0:7a:9d:61:d0:51:e5:33:f5:ff:1e:03:24:45:ed:cd:b7:23:
         94:a9:8d:75:9f:7a:5e:21:bf:80:a6:54:16:ff:ba:c6:b2:17:
         93:0a:6e:b2:a8:cc:ca:ae:8c:f5:3e:7d:28:02:dd:f6:cf:c3:
         51:b1:23:e3:49:1a:5e:44:56:e2:d0:44:4e:08:fc:a9:50:8c:
         7c:15:77:80:25:35:08:a8:94:be:82:75:4d:df:ff:43:d2:3a:
         13:fb:d0:3c:16:39:23:72:39:1f:66:ca:78:80:d3:59:de:78:
         a4:aa:dc:ef:fd:8c:83:f9:a1:c6:be:16:f7:af:9b:99:1e:8a:
         80:ac:f1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:30 2025 by rpki-client on console.sobornost.net