Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/19c10ed0-3d90-31d7-a223-18fcecf36e82.roa
File:                     19c10ed0-3d90-31d7-a223-18fcecf36e82.roa (raw, json)
Hash identifier:          junO9Js9+Ef+N8YjDVLsItYWUcP47CutkC6fwGyDANw=
Subject key identifier:   A2:3F:C3:F1:AF:51:E7:B1:F7:0E:B9:0A:A2:18:B7:F2:18:F7:03:BD
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584980E79E5A70B0B2D2A64DD100
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/19c10ed0-3d90-31d7-a223-18fcecf36e82.roa
Signing time:             Sat 12 Apr 2025 17:03:59 +0000
ROA not before:           Sat 12 Apr 2025 17:03:59 +0000
ROA not after:            Fri 11 Jul 2025 17:03:59 +0000
asID:                     18779
IP address blocks:        142.252.218.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:e7:9e:5a:70:b0:b2:d2:a6:4d:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 12 17:03:59 2025 GMT
            Not After : Jul 11 17:03:59 2025 GMT
        Subject: CN=7f047a62-c872-4f64-a96c-22e10127a49f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2e:ca:3e:a3:49:ee:49:a7:d7:5a:45:ea:32:
                    18:f2:58:d4:8b:02:da:c4:e8:71:87:82:15:4b:e1:
                    7b:b1:fd:16:f6:ce:be:4f:a1:85:d4:09:9c:cd:78:
                    38:03:2c:e6:c3:53:9f:0a:b1:fb:d1:5d:b5:55:0e:
                    9c:cb:c9:bd:a3:8e:29:08:85:4d:52:42:f2:5b:08:
                    48:51:0e:5e:04:5f:50:a3:7f:b9:67:01:a4:38:a4:
                    90:79:22:3d:97:fa:90:c8:e6:14:0d:1f:a6:cb:0a:
                    83:ff:8a:dd:86:3b:48:90:b3:27:4b:19:2c:c8:13:
                    2b:c2:77:2d:69:3a:55:bc:8d:c2:41:cf:86:9f:87:
                    14:03:5c:dc:1f:98:a7:41:be:6a:1e:3d:70:24:be:
                    68:86:9c:42:e3:bf:0c:1d:46:25:f2:15:42:57:10:
                    ac:71:d1:55:90:30:b2:38:d0:9d:4c:62:58:f1:6e:
                    a0:1a:fe:f2:ba:de:c1:10:98:97:be:d2:fd:ac:36:
                    a7:a8:94:45:7f:93:41:ca:46:a2:b5:c0:9b:d1:fd:
                    9f:ee:37:83:18:34:00:f3:ea:f3:05:c0:6b:36:4b:
                    d1:38:8c:cb:e6:18:96:d6:d6:58:37:f7:e3:05:79:
                    be:74:6b:e6:27:f8:15:ac:87:f4:2c:b3:1a:4d:19:
                    bb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3F:C3:F1:AF:51:E7:B1:F7:0E:B9:0A:A2:18:B7:F2:18:F7:03:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/19c10ed0-3d90-31d7-a223-18fcecf36e82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:80:a9:7f:83:fc:36:8d:33:d2:85:ec:aa:94:be:20:95:d0:
         b6:b4:7b:28:07:0d:a6:02:dd:6e:c4:99:3e:cf:ca:da:63:2a:
         d8:ee:72:f7:88:34:4d:14:75:f7:81:58:be:13:23:57:23:f8:
         ec:f8:4a:04:2b:9b:63:82:b9:97:f7:a5:ff:39:a9:7e:c4:a0:
         3f:d8:d6:91:10:d3:3d:a1:81:03:6c:77:e8:73:f6:36:3f:9c:
         f9:4f:fd:e1:24:97:2a:76:d3:2d:3b:03:7c:4d:17:86:ff:0e:
         1c:01:10:9f:46:ad:ac:ee:75:5e:ff:ab:7f:84:fe:a5:6c:3c:
         bb:6f:e7:c9:83:be:4c:72:96:a6:28:57:70:1b:2d:89:fd:5e:
         a1:25:b7:ef:e4:89:3b:b6:89:a4:3b:ec:e1:e5:19:bb:86:91:
         cc:5a:88:72:3c:83:49:39:30:ba:29:85:96:0d:9c:26:36:3d:
         b0:c4:e7:8a:b7:93:dc:71:b1:fe:64:0e:a4:43:21:26:ba:f2:
         9a:dc:57:e9:d0:64:eb:19:7f:93:a4:e8:00:bc:31:05:fe:04:
         09:2f:73:7f:a2:20:a7:8c:cd:db:57:89:00:5d:04:e7:f8:4d:
         45:ea:6c:8f:df:4f:b5:3b:87:ee:49:94:f4:5e:67:2b:54:34:
         91:f3:cb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:31 2025 by rpki-client on console.sobornost.net