Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/973d0c52-3316-33ed-9e24-c8a98da079c4.roa
File:                     973d0c52-3316-33ed-9e24-c8a98da079c4.roa (raw, json)
Hash identifier:          yHpDHn1LntERFBoV1/wN9Z2qxUNUjSlJfcj/AwSaNUY=
Subject key identifier:   2E:98:27:56:1F:10:15:70:32:E5:63:7C:C7:BA:4C:DF:35:38:0D:20
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858496A026863761670C7C891F360
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/973d0c52-3316-33ed-9e24-c8a98da079c4.roa
Signing time:             Fri 04 Apr 2025 12:14:22 +0000
ROA not before:           Fri 04 Apr 2025 12:14:22 +0000
ROA not after:            Thu 03 Jul 2025 12:14:22 +0000
asID:                     44133
IP address blocks:        104.253.185.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:02:68:63:76:16:70:c7:c8:91:f3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr  4 12:14:22 2025 GMT
            Not After : Jul  3 12:14:22 2025 GMT
        Subject: CN=f612328a-ff56-474f-8e12-1fc769422157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d1:42:d0:0a:99:71:2b:8e:77:74:75:78:31:
                    b9:13:28:9f:46:f5:75:dc:ee:c2:2b:4c:2c:e9:7d:
                    a1:e0:51:4d:9b:13:90:c6:db:a0:3b:07:46:ab:17:
                    70:a4:82:03:88:d2:46:61:56:4b:4f:dc:ee:b2:b9:
                    b9:68:62:50:98:e1:b9:ef:66:20:e2:e6:7c:0f:f8:
                    9b:41:d6:7b:d2:a3:29:a0:f4:e5:37:cc:49:48:a9:
                    57:92:e1:53:0b:e0:b6:91:93:6a:de:dd:27:e0:28:
                    2c:fa:3f:db:95:3d:e3:23:08:ac:f3:35:85:0b:7e:
                    f1:8d:1b:95:30:d4:89:9c:65:86:54:a3:b9:90:d0:
                    7e:bd:6a:07:5b:e9:31:97:07:34:de:1f:d9:dd:e0:
                    12:27:d0:17:ae:a5:da:1c:23:f2:3c:78:5e:aa:8b:
                    bf:f2:8b:d5:1f:66:d5:93:8a:e1:fa:e4:73:17:67:
                    f0:56:e4:8e:ab:1b:35:c8:56:a3:1d:a6:2c:64:08:
                    af:3d:ba:71:0b:23:18:6d:59:48:f1:ea:7a:94:ec:
                    a5:72:35:22:53:05:b0:d0:c5:4f:50:e5:41:6e:30:
                    41:e0:61:2c:01:3e:c5:3a:db:29:83:44:77:40:15:
                    90:55:6f:fa:73:9d:89:b3:de:55:80:d7:3b:13:30:
                    85:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:98:27:56:1F:10:15:70:32:E5:63:7C:C7:BA:4C:DF:35:38:0D:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/973d0c52-3316-33ed-9e24-c8a98da079c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:7d:d7:ae:e2:03:8e:72:a8:61:83:44:ff:95:e5:6c:50:ab:
         d4:61:ad:ac:14:97:5a:6c:3c:d9:5d:97:02:7c:7a:ae:89:84:
         74:5d:88:3d:94:e9:a2:6a:dd:b0:0d:76:4e:54:ef:a0:fa:78:
         a6:a1:17:6f:16:94:be:21:8c:0e:ac:c0:d9:1a:d3:f5:e4:21:
         cb:01:18:08:7b:9a:63:52:a5:f7:fd:c5:d3:87:f8:26:25:79:
         93:1e:d3:c3:9f:de:59:3e:d3:87:d6:d8:0a:a4:9f:a6:f4:47:
         43:e9:bb:af:37:14:f8:67:4a:46:5f:ef:f0:4c:3f:15:79:f1:
         d9:d0:41:cf:66:57:33:24:a6:6e:36:ba:bc:2e:3d:64:7a:44:
         21:df:85:c1:c7:f4:95:b9:e1:ca:9c:27:22:08:2e:60:c3:4e:
         32:78:0e:d8:ae:2d:ea:1c:cd:23:b3:83:75:08:49:08:e1:ee:
         ff:e6:6c:a8:91:d4:57:47:ce:6c:ff:00:62:4f:98:37:5d:55:
         12:65:0c:6c:ee:45:2e:54:12:c9:2c:dc:ac:ce:e8:9e:78:39:
         28:cf:a7:c3:1a:f4:43:0c:b2:21:d0:83:82:94:c4:58:25:d7:
         66:fb:b6:ab:a1:41:ea:ee:02:31:2a:24:37:eb:cf:ee:87:04:
         cf:9d:e3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:36 2025 by rpki-client on console.sobornost.net