Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/db13fbe3-fdb8-3437-9d61-28d9395917a8.roa
File:                     db13fbe3-fdb8-3437-9d61-28d9395917a8.roa (raw, json)
Hash identifier:          N9X1c7o4yFHgVkof7Ma4pHPXLWu6TYcQJhOhHGij7f4=
Subject key identifier:   9E:80:47:25:83:1A:B1:6D:86:8B:7D:DD:DB:B1:4F:3D:FD:F3:87:79
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858496A199278FAE328357B23BF40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/db13fbe3-fdb8-3437-9d61-28d9395917a8.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     8881
IP address blocks:        104.253.198.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:92:78:fa:e3:28:35:7b:23:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=0860f79d-888b-46d7-aa83-00f74848e32f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:38:f2:80:f6:4b:5d:52:b1:39:57:0f:33:0c:
                    a7:8d:fc:b6:b3:b4:3f:b1:06:e7:f9:47:92:86:b2:
                    44:f8:9a:04:51:96:26:53:07:ac:37:9d:f5:64:cd:
                    6d:1f:8c:aa:1b:60:a2:29:a8:04:40:dd:d2:7e:99:
                    8a:31:8f:08:d6:f0:03:e0:96:2b:2a:2e:63:12:f7:
                    b6:85:47:39:8f:6f:f3:4b:83:93:2a:80:12:88:75:
                    87:e0:4b:fc:39:48:4a:7a:ca:ad:1d:33:ef:48:4d:
                    72:92:06:0f:06:28:81:6a:94:43:f6:9e:24:d9:60:
                    b1:53:63:f1:4d:9c:88:a3:7f:ce:fd:70:19:84:17:
                    9f:f9:9e:56:c2:9e:0a:f7:30:bf:76:e6:06:e6:8b:
                    76:d8:da:91:91:eb:1a:f2:bc:52:e8:d9:81:4b:d5:
                    1d:19:49:23:b8:94:34:eb:29:b2:37:d4:d0:4e:72:
                    37:0e:11:58:92:06:d7:04:8c:f7:e5:8b:a4:a7:19:
                    57:c0:e0:f8:9a:02:57:ef:e6:74:ea:59:03:b0:7b:
                    cc:7c:8d:96:55:bc:6c:8b:00:f5:c4:50:3e:66:82:
                    98:e0:f9:6c:f5:aa:5c:82:a8:03:b2:78:ae:be:06:
                    d1:cf:9e:18:00:d1:b4:e6:ef:b9:03:fd:3c:d9:96:
                    df:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:80:47:25:83:1A:B1:6D:86:8B:7D:DD:DB:B1:4F:3D:FD:F3:87:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/db13fbe3-fdb8-3437-9d61-28d9395917a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:c6:49:6b:06:c2:27:71:64:3d:ac:7a:e8:cb:3e:1a:c1:0c:
         2b:b5:cd:89:58:86:b2:04:d0:63:32:a0:97:a4:e0:fe:30:6d:
         45:7a:b2:c0:33:66:3a:17:e6:5d:30:de:ab:42:11:13:b3:78:
         19:df:d2:6d:7d:37:ef:0d:18:7c:69:28:3d:d8:30:6e:25:99:
         5b:48:e7:3d:9b:47:cb:cf:e9:65:93:37:19:39:73:31:ee:13:
         fb:d6:8d:da:16:6a:77:75:a6:9f:cd:67:37:0b:08:76:e5:56:
         69:72:85:9d:6e:ad:9c:13:36:e5:18:b4:52:4c:af:ac:e1:c3:
         f5:56:7f:11:fc:a4:9e:89:2b:7d:e5:90:8e:8f:dd:72:ca:d0:
         8a:30:5b:08:7e:f1:f2:2d:4c:26:9d:2e:5e:6a:7f:a3:51:15:
         5a:e4:4f:2c:93:0d:6e:6a:81:82:41:cc:5c:4d:b9:76:94:32:
         a8:d8:96:33:16:cc:4c:75:e5:01:26:07:dd:14:a0:29:f9:ad:
         64:f9:bc:e0:ef:97:2f:3a:14:6d:16:69:2b:a5:38:4b:0e:69:
         4f:8e:9c:9b:30:78:c9:f8:d2:89:a7:8f:3c:7d:4a:55:68:af:
         5d:ad:5b:a1:ba:3a:d8:fe:5f:cb:ff:72:fc:1b:20:f0:42:5d:
         1e:46:42:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGZJ4+uMoNXsjv0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk
MDg2MGY3OWQtODg4Yi00NmQ3LWFhODMtMDBmNzQ4NDhlMzJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzjygPZLXVKxOVcPMwynjfy2s7Q/sQbn+UeS
hrJE+JoEUZYmUwesN531ZM1tH4yqG2CiKagEQN3SfpmKMY8I1vAD4JYrKi5jEve2
hUc5j2/zS4OTKoASiHWH4Ev8OUhKesqtHTPvSE1ykgYPBiiBapRD9p4k2WCxU2Px
TZyIo3/O/XAZhBef+Z5Wwp4K9zC/duYG5ot22NqRkesa8rxS6NmBS9UdGUkjuJQ0
6ymyN9TQTnI3DhFYkgbXBIz35YukpxlXwOD4mgJX7+Z06lkDsHvMfI2WVbxsiwD1
xFA+ZoKY4Pls9apcgqgDsniuvgbRz54YANG05u+5A/082ZbfWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ6ARyWDGrFthot93duxTz3984d5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZGIxM2ZiZTMtZmRiOC0z
NDM3LTlkNjEtMjhkOTM5NTkxN2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP3GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAjGSWsGwidxZD2seujLPhrBDCu1zYlYhrIE0GMyoJek4P4wbUV6ssAz
ZjoX5l0w3qtCEROzeBnf0m19N+8NGHxpKD3YMG4lmVtI5z2bR8vP6WWTNxk5czHu
E/vWjdoWand1pp/NZzcLCHblVmlyhZ1urZwTNuUYtFJMr6zhw/VWfxH8pJ6JK33l
kI6P3XLK0IowWwh+8fItTCadLl5qf6NRFVrkTyyTDW5qgYJBzFxNuXaUMqjYljMW
zEx15QEmB90UoCn5rWT5vODvly86FG0WaSulOEsOaU+OnJsweMn40omnjzx9SlVo
r12tW6G6Otj+X8v/cvwbIPBCXR5GQk4=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:43 2025 by rpki-client on console.sobornost.net