Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b0589ebc-0341-3fb6-a848-4fb0e8c3f33e.roa
File:                     b0589ebc-0341-3fb6-a848-4fb0e8c3f33e.roa (raw, json)
Hash identifier:          LNGGWg/BcWCK4wXVTbBkLNKJ0UGmS9u2+/6y/Ho9xNo=
Subject key identifier:   40:C9:E5:E5:18:75:3D:D3:20:15:54:E0:6E:45:54:B8:FC:58:65:36
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858495EEEEFDC9CC8ABADB387BA20
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b0589ebc-0341-3fb6-a848-4fb0e8c3f33e.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     149440
IP address blocks:        45.38.93.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:ef:dc:9c:c8:ab:ad:b3:87:ba:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=d1ed1585-0fb5-459f-be2a-7882212556b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:07:7c:ce:20:ad:44:7e:1d:ab:e4:bf:4f:75:
                    e3:ec:13:19:d6:41:f6:21:fd:ac:6a:58:be:a8:c8:
                    1a:2e:21:ae:cf:b5:c8:4a:8d:2d:8b:2f:5f:8f:00:
                    b1:8c:38:7a:d1:aa:5d:52:4d:da:f4:23:af:79:80:
                    c1:31:cb:16:c6:e4:ea:35:4c:1e:63:8b:b9:01:cd:
                    1c:e4:af:e6:e9:3a:8a:cb:b8:53:fb:8e:0d:57:4a:
                    8c:ba:70:16:85:83:d8:13:d5:e3:8a:90:2d:13:15:
                    c5:ad:c1:73:42:6b:6a:04:0f:2d:05:52:ae:20:d2:
                    9c:b0:f1:53:30:1f:8a:d2:b8:02:0c:4e:f4:6b:db:
                    4a:0f:32:24:b9:0b:0e:4a:ac:5c:e8:2e:76:87:dd:
                    90:a7:bb:46:9a:8a:b3:09:59:7e:f3:99:bc:15:10:
                    4e:eb:64:f9:06:9a:38:41:67:c8:22:8f:26:94:a9:
                    69:1c:f7:dd:23:8d:97:d8:d0:51:33:7f:2e:aa:ca:
                    29:23:4c:8f:e5:a0:e4:0a:21:6d:e8:28:d7:27:f0:
                    f8:eb:53:5b:18:99:03:08:0b:e1:46:71:27:99:1b:
                    b9:85:0d:60:35:54:11:60:5d:b5:ba:3e:3b:f6:dd:
                    d8:d6:2c:ec:70:68:98:52:9e:18:af:c0:fa:fd:15:
                    70:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C9:E5:E5:18:75:3D:D3:20:15:54:E0:6E:45:54:B8:FC:58:65:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b0589ebc-0341-3fb6-a848-4fb0e8c3f33e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:70:89:94:b8:ab:6b:a2:35:c2:f1:f7:2e:ca:72:46:87:72:
         e3:59:58:ad:17:a4:92:6e:48:36:2f:c3:ec:25:6d:7e:9a:01:
         0a:9a:3a:06:3a:7c:ae:0c:97:64:a7:90:72:82:da:93:58:87:
         42:9f:72:57:22:cc:bd:4d:c4:0d:e3:f7:4a:c3:66:27:d2:27:
         78:34:98:ab:a8:59:65:82:db:1d:b2:00:f6:2b:6d:68:df:de:
         7b:03:2a:1d:f0:5e:d7:84:be:09:ce:d9:86:0d:f6:c8:4c:22:
         56:98:8e:3e:e2:0e:7a:fd:ee:a9:ad:0a:1e:31:9f:ea:a1:4b:
         71:ee:8e:13:ca:e4:53:6c:fb:64:73:49:1e:b7:d6:60:cc:ee:
         99:9c:57:bb:7b:85:f6:dc:db:e7:68:42:88:a9:1d:22:fd:b4:
         31:8b:df:e2:2d:7e:27:61:23:a6:9d:50:27:9b:74:68:df:6a:
         8b:94:29:3b:49:dd:bb:f9:6f:62:e8:5d:f5:ea:dc:b7:ff:1e:
         59:d7:a4:ed:88:03:98:5a:91:d9:62:eb:5c:9b:50:86:76:48:
         d6:5e:a2:2f:93:aa:a6:94:27:6b:66:e4:20:6e:84:94:f1:84:
         c9:77:85:20:53:a8:7b:af:02:60:aa:80:50:c6:10:0c:2d:90:
         78:4a:1a:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7u/cnMirrbOHuiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk
ZDFlZDE1ODUtMGZiNS00NTlmLWJlMmEtNzg4MjIxMjU1NmIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswd8ziCtRH4dq+S/T3Xj7BMZ1kH2If2sali+
qMgaLiGuz7XISo0tiy9fjwCxjDh60apdUk3a9COveYDBMcsWxuTqNUweY4u5Ac0c
5K/m6TqKy7hT+44NV0qMunAWhYPYE9XjipAtExXFrcFzQmtqBA8tBVKuINKcsPFT
MB+K0rgCDE70a9tKDzIkuQsOSqxc6C52h92Qp7tGmoqzCVl+85m8FRBO62T5Bpo4
QWfIIo8mlKlpHPfdI42X2NBRM38uqsopI0yP5aDkCiFt6CjXJ/D461NbGJkDCAvh
RnEnmRu5hQ1gNVQRYF21uj479t3Y1izscGiYUp4Yr8D6/RVwKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEDJ5eUYdT3TIBVU4G5FVLj8WGU2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYjA1ODllYmMtMDM0MS0z
ZmI2LWE4NDgtNGZiMGU4YzNmMzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSZdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFtwiZS4q2uiNcLx9y7KckaHcuNZWK0XpJJuSDYvw+wlbX6aAQqaOgY6
fK4Ml2SnkHKC2pNYh0KfclcizL1NxA3j90rDZifSJ3g0mKuoWWWC2x2yAPYrbWjf
3nsDKh3wXteEvgnO2YYN9shMIlaYjj7iDnr97qmtCh4xn+qhS3HujhPK5FNs+2Rz
SR631mDM7pmcV7t7hfbc2+doQoipHSL9tDGL3+ItfidhI6adUCebdGjfaouUKTtJ
3bv5b2LoXfXq3Lf/HlnXpO2IA5hakdli61ybUIZ2SNZeoi+TqqaUJ2tm5CBuhJTx
hMl3hSBTqHuvAmCqgFDGEAwtkHhKGvA=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:37 2025 by rpki-client on console.sobornost.net