Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/21c5494e-80d1-3a90-a084-9d0784b69f27.roa
File:                     21c5494e-80d1-3a90-a084-9d0784b69f27.roa (raw, json)
Hash identifier:          pOGZvFzKlDImLGYfZSroFjgMKHu3rq/4L5EXYZxMNZY=
Subject key identifier:   91:99:F2:C0:1F:20:5A:8A:96:07:A2:AC:6B:5C:36:9E:22:40:CE:32
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858496E4981799BFF3B258BA42680
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/21c5494e-80d1-3a90-a084-9d0784b69f27.roa
Signing time:             Sun 06 Apr 2025 01:00:47 +0000
ROA not before:           Sun 06 Apr 2025 01:00:47 +0000
ROA not after:            Sat 05 Jul 2025 01:00:47 +0000
asID:                     214238
IP address blocks:        23.230.78.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6e:49:81:79:9b:ff:3b:25:8b:a4:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr  6 01:00:47 2025 GMT
            Not After : Jul  5 01:00:47 2025 GMT
        Subject: CN=7a8ba494-b078-45ff-9bab-be1ed9efd3bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:84:2d:59:df:43:ef:cb:93:ef:24:25:42:24:
                    07:b9:82:2c:8b:71:14:0f:e8:74:c2:13:90:f2:d7:
                    c1:1e:a4:71:a5:04:21:5b:34:5e:06:3b:52:08:e2:
                    8e:f4:26:a6:83:80:74:63:b2:04:0e:c6:3f:59:2f:
                    83:e3:4e:76:db:04:3c:27:93:39:0d:72:a1:78:0f:
                    30:d2:c9:5a:d7:c1:47:a2:da:4c:10:f5:0f:0b:6a:
                    34:45:97:1c:4e:85:41:ae:06:ec:92:d9:d0:10:81:
                    a5:01:25:37:b6:b3:b5:20:1f:85:d4:59:9d:40:1d:
                    9b:a9:ee:92:79:66:38:3d:df:98:d4:24:60:7b:94:
                    b7:ca:05:2b:c1:fb:3a:53:20:71:ab:b8:b9:f7:6f:
                    ed:e3:54:c3:9d:1c:e1:e6:7f:3d:dc:89:08:b3:1c:
                    78:d9:42:fb:9b:5a:d2:e8:4e:3c:f3:f6:7c:0c:d1:
                    12:d1:f3:c1:a6:d5:df:11:ca:68:fa:8c:3f:da:f8:
                    46:2f:75:4e:9f:a8:de:cd:31:a8:3c:07:4d:40:80:
                    27:cd:85:57:ea:5b:9b:04:0e:d5:6b:8d:22:9d:4d:
                    70:43:2d:fe:78:cc:d3:96:ec:06:d0:90:92:b1:d2:
                    d2:be:61:a6:20:bc:01:c6:9c:e4:1e:dd:70:f6:eb:
                    6b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:99:F2:C0:1F:20:5A:8A:96:07:A2:AC:6B:5C:36:9E:22:40:CE:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/21c5494e-80d1-3a90-a084-9d0784b69f27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:26:fe:e0:a9:87:b1:2a:54:f1:85:84:8b:97:0a:91:13:d5:
         ca:31:e0:85:6f:9c:7c:46:2a:d3:57:06:ee:0b:bb:53:8b:8c:
         bf:9d:fa:fc:12:b0:c8:4f:11:ba:8e:62:cb:16:c4:a1:a6:95:
         3f:da:a3:cd:ae:b5:36:6d:a2:ef:f0:37:60:13:17:4c:3d:ee:
         f8:a1:90:ad:1a:b3:a2:07:36:71:37:4f:2d:21:83:66:37:00:
         e4:64:27:ee:97:32:ef:d6:eb:96:a2:73:04:85:8e:81:8a:88:
         f8:bf:7f:5a:77:cb:bb:23:bd:0e:78:c9:6f:0d:29:d7:52:9e:
         fa:bd:68:27:fb:09:df:1a:57:7c:37:87:75:16:30:10:71:39:
         65:ea:e4:62:e7:19:67:c5:88:c9:7d:92:bb:eb:01:91:9c:02:
         73:9a:36:d7:da:55:f0:ff:b0:37:3b:f0:59:5d:eb:c4:0e:ac:
         c0:63:6b:21:a9:06:e3:03:cf:00:30:24:5c:72:90:e9:20:11:
         1e:7c:b1:f3:4a:c5:4c:9b:8b:76:a0:ca:75:64:57:1c:ce:70:
         7b:16:97:81:4e:16:3f:9c:7e:6e:61:71:3f:9f:7e:5b:20:1f:
         af:0f:bc:f0:fd:5d:0a:95:36:e6:9e:97:93:6c:b0:43:26:27:
         e1:5c:13:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:32 2025 by rpki-client on console.sobornost.net