Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/edd59b08-3eec-38b2-82d0-f845c5a1dfeb.roa
File:                     edd59b08-3eec-38b2-82d0-f845c5a1dfeb.roa (raw, json)
Hash identifier:          5SZMsc0u1XiMMgK1bEh7pDqBQldzaZrQ+LUjXa/gCMs=
Subject key identifier:   8B:9B:24:55:4F:A0:61:FF:A3:17:B1:F0:A8:D8:5D:D5:27:FA:A3:7C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849687A0117556AC61811AA5380
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/edd59b08-3eec-38b2-82d0-f845c5a1dfeb.roa
Signing time:             Thu 03 Apr 2025 23:03:43 +0000
ROA not before:           Thu 03 Apr 2025 23:03:43 +0000
ROA not after:            Wed 02 Jul 2025 23:03:43 +0000
asID:                     400536
IP address blocks:        142.252.139.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:68:7a:01:17:55:6a:c6:18:11:aa:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr  3 23:03:43 2025 GMT
            Not After : Jul  2 23:03:43 2025 GMT
        Subject: CN=fcc9b995-60e0-4616-bf4d-7a725f481868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:87:06:b6:2a:a4:e1:7b:29:ba:b0:d7:68:a7:
                    e2:fc:5c:20:72:9a:ee:f7:bf:8f:f5:cc:ad:ad:1f:
                    e2:52:76:c1:d0:c4:de:16:07:fb:a8:4c:cf:bd:3f:
                    87:fe:ab:3b:dc:95:9d:d6:60:0f:7b:2e:51:bd:f2:
                    58:3b:ff:dd:72:90:cf:d0:46:b4:c0:ec:e0:f1:cd:
                    7a:77:c5:e9:90:1d:0b:b8:22:11:ed:39:37:ee:2d:
                    09:a1:a7:09:4b:7a:1c:a2:04:27:dc:07:3a:73:90:
                    c9:c6:0b:44:cb:4b:a4:3e:bf:a0:a1:5d:f2:bd:30:
                    36:09:1a:67:e5:e7:1c:e8:ee:f8:44:c1:33:3f:89:
                    d6:32:37:23:1f:71:1c:71:6d:ed:51:5b:26:eb:ba:
                    53:10:05:3a:98:28:a1:28:b3:18:01:51:86:39:0e:
                    cd:96:17:e7:d1:38:92:8c:86:a7:33:c1:70:af:b2:
                    d3:4c:6f:09:e8:aa:63:91:ab:73:93:05:cc:45:b2:
                    35:df:9e:41:bb:48:02:f7:f7:f2:0e:59:60:cc:eb:
                    37:60:4c:03:33:f7:e4:45:65:a1:db:f0:5d:9b:6f:
                    f6:ed:b2:28:30:82:cd:a4:94:a6:23:fb:c8:51:48:
                    40:49:8a:d9:20:fb:b4:e8:f9:b5:a3:a0:30:a8:64:
                    eb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9B:24:55:4F:A0:61:FF:A3:17:B1:F0:A8:D8:5D:D5:27:FA:A3:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/edd59b08-3eec-38b2-82d0-f845c5a1dfeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:f1:76:29:02:c2:6a:10:89:78:42:61:b4:4e:57:98:12:59:
         75:61:c4:f8:74:40:fa:c5:25:f4:d8:b1:1b:67:d6:49:e8:c0:
         2c:b0:fd:3e:00:a6:16:fc:e0:32:79:bc:ba:26:40:b7:a8:17:
         52:63:72:18:63:9b:5e:14:8c:c8:4a:94:1c:0c:e8:e6:af:b5:
         36:e8:ba:d6:0f:9a:dc:27:d1:9f:cc:f7:ad:89:23:52:b1:77:
         54:7b:c5:92:e8:5b:55:e7:f4:42:81:66:b3:7b:63:d0:49:b8:
         ef:11:76:c4:e4:59:80:50:bb:28:ba:fc:e4:e9:15:12:5f:a6:
         44:f3:9a:47:fe:47:40:b4:f1:87:6d:0a:71:60:6a:bf:19:f9:
         d6:fa:e0:35:b6:8d:7e:bc:75:61:75:07:63:fa:d9:9c:a9:d8:
         25:e2:de:5a:c4:ad:3f:bf:b5:4b:67:4c:aa:4a:f4:51:7d:76:
         be:3b:9c:9d:db:d7:cd:37:59:61:f6:40:48:32:b1:e2:6b:3e:
         e9:7d:f0:39:72:9c:84:af:a1:59:32:9d:75:d3:73:8b:cf:aa:
         7b:32:67:80:16:fb:2c:ff:5a:ff:90:31:92:52:be:83:8a:cb:
         23:3f:d3:06:fc:6f:ae:2b:db:28:cb:e0:e4:36:06:9b:21:52:
         5d:f4:4f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:44 2025 by rpki-client on console.sobornost.net