Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7be9da32-1610-3c6f-bd63-a4f622d7cd49.roa
File:                     7be9da32-1610-3c6f-bd63-a4f622d7cd49.roa (raw, json)
Hash identifier:          hV9iVkvPHFf8Wl1K/JfHncXgRHfKKOFbH8bhyLjdnY4=
Subject key identifier:   B2:22:49:D7:83:1E:9B:83:F1:F7:F0:05:75:89:68:B8:5C:4E:C1:3B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858496A19932F1A504E9DE0C3DD90
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7be9da32-1610-3c6f-bd63-a4f622d7cd49.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     8881
IP address blocks:        104.253.111.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:93:2f:1a:50:4e:9d:e0:c3:dd:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=cd846f73-52cc-43bd-9114-9d6a51e3335a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:06:9c:d0:8a:d6:67:73:9b:4b:cb:77:87:ff:
                    28:d9:27:65:6c:21:01:d9:e9:74:08:55:5c:30:fe:
                    7b:64:b1:67:1a:7c:9b:7c:b6:1a:d6:69:16:e9:c6:
                    8e:c1:9d:a2:ec:d1:49:c4:f6:63:e4:0d:a4:24:c8:
                    68:b2:76:44:a4:23:af:93:5d:cf:04:f1:30:56:12:
                    f1:fe:b7:d3:7f:46:bc:98:16:04:d8:4b:c7:0d:40:
                    f1:65:10:f0:cd:bb:53:c0:b0:89:6f:c0:8b:14:bf:
                    01:24:79:1a:5a:5c:96:5e:25:a0:91:05:31:5e:59:
                    7e:bb:b8:05:b1:b6:23:de:9e:2c:4c:b4:db:95:27:
                    b1:01:ee:88:75:88:4f:ed:53:7f:72:b4:84:70:51:
                    6e:c1:b0:31:36:e2:9d:37:f1:b4:4e:90:c4:ba:38:
                    1e:24:61:84:47:48:b9:04:d7:79:a2:34:52:98:d4:
                    ff:96:ff:7c:03:c0:84:52:08:35:66:5e:0a:8e:e7:
                    6c:ff:a1:dc:b1:5a:33:75:b5:19:65:f6:ea:62:e1:
                    a1:1f:3b:79:ae:fd:24:f6:5f:01:66:f5:3d:86:5a:
                    ad:94:0f:43:e6:13:ce:c9:60:16:0b:90:a6:b7:a5:
                    d7:6c:69:d3:23:39:7c:4c:64:0f:9c:86:d2:ae:3a:
                    00:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:22:49:D7:83:1E:9B:83:F1:F7:F0:05:75:89:68:B8:5C:4E:C1:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7be9da32-1610-3c6f-bd63-a4f622d7cd49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:74:6b:2e:b0:5a:f9:e6:14:a5:ca:9d:76:f5:d1:1a:48:1f:
         14:cc:58:48:86:f3:c3:4c:a6:ab:f0:82:cf:eb:2a:c6:ac:f0:
         bb:79:31:28:4a:eb:d6:ec:c7:6b:83:f5:a0:07:50:a4:c6:9e:
         7b:5c:ec:a3:4d:95:62:ef:c7:45:fa:1b:8b:94:c1:ec:81:73:
         4e:27:de:4d:e8:c3:89:ae:f0:60:bb:79:e5:fe:b1:55:60:04:
         9a:09:d5:2c:c1:5f:69:73:ac:91:27:bb:30:83:39:65:bd:4b:
         61:05:92:45:6b:de:08:7e:d6:24:cb:c6:1c:7f:dd:69:3b:21:
         d2:40:d4:71:61:32:fd:cb:2e:bf:4e:24:17:7e:85:00:0e:a7:
         88:fe:4f:35:91:a3:65:e5:f3:9e:7e:ce:0e:1a:eb:ca:52:f4:
         2a:c3:3d:16:b5:c4:5c:0b:5c:63:36:a9:51:92:b4:06:ca:fd:
         51:37:80:aa:68:13:49:bf:a3:57:a9:81:d2:05:ec:25:f7:93:
         97:be:07:26:74:25:44:ed:f6:c2:e8:50:e9:56:3f:f2:fe:dc:
         ad:c7:44:ed:7f:50:01:cf:37:b5:ab:b4:3c:cb:12:ff:ac:bd:
         e1:24:9e:1e:81:15:71:41:b6:2a:02:f1:40:aa:15:08:ee:0f:
         d8:fa:47:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:35 2025 by rpki-client on console.sobornost.net