Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2f64ae0f-f6e0-364e-b9db-c9d7ed1f3d23.roa
File:                     2f64ae0f-f6e0-364e-b9db-c9d7ed1f3d23.roa (raw, json)
Hash identifier:          CtQqz4hgo+T7heZtzC0w4oPpMwOXg8gMU3UK7cpTK9k=
Subject key identifier:   0B:A1:0C:C7:09:0E:FE:5C:E2:80:FC:9F:45:7E:0F:87:FF:24:89:1B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848EF790629E05B8118C84BA980
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2f64ae0f-f6e0-364e-b9db-c9d7ed1f3d23.roa
Signing time:             Wed 19 Feb 2025 14:48:56 +0000
ROA not before:           Wed 19 Feb 2025 14:48:56 +0000
ROA not after:            Tue 20 May 2025 13:48:56 +0000
asID:                     18779
IP address blocks:        45.38.34.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:79:06:29:e0:5b:81:18:c8:4b:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 19 14:48:56 2025 GMT
            Not After : May 20 13:48:56 2025 GMT
        Subject: CN=74118da7-2eb4-4515-adf9-0536922f6aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d8:2a:2b:bf:3a:9e:51:90:e5:3b:eb:d5:ce:
                    2d:67:28:70:cd:97:c3:91:80:5d:2b:68:26:04:ec:
                    3f:1c:1f:90:eb:76:99:59:55:0f:25:63:1d:46:c0:
                    96:05:4f:f5:65:c9:a4:bc:55:2c:64:7a:b1:3b:5a:
                    bb:1f:b3:1d:7a:b7:f4:65:e6:bd:37:89:08:44:22:
                    a6:5e:28:c5:3b:20:c4:1d:44:92:ba:1f:02:2f:e6:
                    36:11:d4:fa:1d:a5:a6:22:ef:47:2a:f1:d3:55:a3:
                    c8:43:df:6c:9e:81:0d:e8:48:c6:94:c3:cb:46:cc:
                    8e:69:9d:05:53:7d:b4:b1:da:48:e3:e9:5d:14:7e:
                    f1:36:7d:a5:b0:05:a0:a1:1e:f5:02:f7:0e:0c:0e:
                    d0:89:78:ce:d4:15:34:b1:a5:c3:52:89:a5:24:a9:
                    e3:d6:90:5f:c5:1c:fa:c6:ec:f8:ec:12:bc:71:2c:
                    4f:d9:e2:43:ce:18:39:c6:b6:b1:48:63:b2:85:3d:
                    fe:9e:87:40:6f:6a:a2:50:dc:04:e5:7a:66:5d:19:
                    8a:1d:3f:54:04:6f:9d:00:3e:2e:2e:3e:37:c1:ac:
                    e6:a2:1d:1d:7e:6b:9a:44:b9:0f:40:9e:8d:a8:df:
                    18:0b:6c:17:80:67:71:15:51:6e:db:66:3e:c4:69:
                    a4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A1:0C:C7:09:0E:FE:5C:E2:80:FC:9F:45:7E:0F:87:FF:24:89:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2f64ae0f-f6e0-364e-b9db-c9d7ed1f3d23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:cd:a8:1a:b5:a8:e4:68:91:12:11:f0:71:d7:ab:6b:e2:2e:
         90:db:9b:95:3c:40:00:03:c9:c1:7f:60:bb:9e:a5:66:02:9a:
         e1:b2:3c:fc:21:a6:97:9f:1f:1a:46:2e:38:f8:f9:98:fc:31:
         4c:6a:3d:26:56:61:37:23:cb:30:13:48:c2:44:64:94:5e:7a:
         43:c5:c7:c4:3b:8c:18:81:e1:49:3b:e1:15:44:ae:8d:df:75:
         3e:f1:eb:99:89:f7:58:bf:df:d1:4e:4d:3e:c6:c7:65:95:a8:
         15:70:ab:40:dd:70:aa:d4:05:89:b4:63:23:e3:96:4f:d6:45:
         f8:4a:36:ad:ee:56:0e:7c:3a:54:aa:da:14:9e:72:81:d7:23:
         73:db:d0:56:43:53:be:15:5e:f1:00:23:8b:a3:6e:2b:89:d6:
         bd:a0:3f:66:01:5a:6e:68:c6:11:7d:7d:58:41:2b:ad:cf:98:
         78:65:cd:1e:e1:76:ef:05:3f:30:43:e0:46:ff:8b:eb:f3:b1:
         60:5c:a5:4c:5d:96:94:a5:aa:79:02:3f:60:80:b1:2e:a0:5f:
         97:2f:c0:97:3b:e6:b3:82:50:69:ae:36:bd:06:2d:2c:9e:89:
         a1:ff:4b:53:e8:0c:f8:0a:ad:9f:fc:c2:6d:c6:85:bb:5a:7a:
         3a:95:a1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:32 2025 by rpki-client on console.sobornost.net