Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cc332367-edc8-3a0c-a539-71196ae96da7.roa
File:                     cc332367-edc8-3a0c-a539-71196ae96da7.roa (raw, json)
Hash identifier:          Z/tlyAbfBqxctV+mEyQJt20Dw9DXhyLXKOVjVO2q5as=
Subject key identifier:   E2:74:EE:FC:15:3B:86:73:AD:CC:BE:69:C6:14:A2:FB:6D:30:27:60
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858496E49847FBCA4EBC875DFF940
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cc332367-edc8-3a0c-a539-71196ae96da7.roa
Signing time:             Sun 06 Apr 2025 01:00:47 +0000
ROA not before:           Sun 06 Apr 2025 01:00:47 +0000
ROA not after:            Sat 05 Jul 2025 01:00:47 +0000
asID:                     214238
IP address blocks:        104.164.153.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6e:49:84:7f:bc:a4:eb:c8:75:df:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr  6 01:00:47 2025 GMT
            Not After : Jul  5 01:00:47 2025 GMT
        Subject: CN=5ca122c2-3bb6-43e8-9dc7-7954a67fd57d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0d:06:a5:bf:c3:6d:07:5c:d9:29:78:2d:71:
                    ef:12:2e:05:f3:2b:3c:63:fa:69:d2:4e:70:2b:f0:
                    ec:e5:bb:33:f6:c9:5e:9b:15:c7:dc:99:11:ac:7a:
                    fb:cd:03:df:aa:7c:18:eb:5b:18:34:98:7e:0d:ea:
                    71:84:73:e4:a2:99:96:6a:a0:87:35:83:57:06:c2:
                    19:4d:f2:d0:3a:fb:0c:9b:b7:78:41:20:f7:13:ce:
                    0b:1b:e0:8c:ea:68:dd:cd:98:cc:6a:9a:b2:81:25:
                    fe:a4:f0:c5:26:56:8d:ed:c0:27:e2:06:0d:98:4e:
                    3b:52:c8:7d:2d:66:e5:63:a7:e1:c6:58:99:fd:85:
                    ab:45:01:31:09:6c:b9:d1:4a:eb:a7:20:84:02:f5:
                    d8:ec:ca:1e:5d:4f:73:42:bd:23:3b:8d:da:c7:1c:
                    bc:9b:29:bf:8d:b5:8a:82:b4:f5:d0:b8:2c:25:09:
                    99:e6:89:9f:03:b0:c5:db:a1:59:22:a4:cd:13:1c:
                    eb:f4:0e:35:8a:13:4a:4c:4c:41:47:7b:3f:aa:3f:
                    83:5b:ce:e3:57:b8:b4:1a:9c:9d:4f:4d:21:56:d8:
                    21:a5:34:ab:f2:ea:0d:25:95:7c:b2:74:a8:0f:cf:
                    98:16:ff:75:53:aa:9e:62:ee:d6:29:01:42:e1:63:
                    89:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:74:EE:FC:15:3B:86:73:AD:CC:BE:69:C6:14:A2:FB:6D:30:27:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cc332367-edc8-3a0c-a539-71196ae96da7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:5d:69:52:e4:90:a1:f2:41:06:ec:03:24:f8:33:eb:14:15:
         b7:0e:2d:1e:7c:a9:e6:6f:a5:35:c6:77:c0:ea:bc:8a:3e:c7:
         e0:50:a2:08:fb:7f:e0:49:93:19:07:83:ba:96:ee:ae:bc:51:
         2f:af:58:12:6f:f6:f7:fd:74:f7:49:39:e2:03:5b:6b:f3:9a:
         7e:3a:a5:3e:fa:bc:33:b2:90:5c:e8:25:f6:7c:b5:3f:76:12:
         d7:4c:8d:8f:a8:a5:99:00:99:df:5c:e0:28:32:05:5a:96:9e:
         67:82:05:69:ba:e8:d8:25:83:14:17:17:9a:9d:7d:10:62:17:
         b2:17:9d:d5:9c:c7:53:5b:f5:b9:bc:06:6c:20:bd:7e:41:1c:
         14:de:c2:56:47:9b:39:3c:1e:49:0e:c2:d5:0c:a6:92:79:4b:
         59:16:29:4f:1e:37:70:2e:0e:71:cf:f1:ad:a9:20:5f:c3:8a:
         e9:9c:bc:4f:45:67:00:52:ae:ea:03:8b:bd:ae:9e:35:5c:84:
         07:46:a7:4b:17:f1:84:58:6d:56:64:25:7f:6a:61:e7:46:c6:
         49:1e:39:3e:b6:07:ae:89:18:4d:0b:bf:bc:07:2e:06:be:e0:
         96:d3:e7:4a:3d:32:82:f7:73:e3:5b:d0:56:ce:34:08:08:86:
         36:2a:51:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:38 2025 by rpki-client on console.sobornost.net