Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/e625c427-ed2c-3dcd-812d-91c421264688.roa
File:                     e625c427-ed2c-3dcd-812d-91c421264688.roa (raw, json)
Hash identifier:          hsjOj1ITWIv3Ac4EbKgIwAkbV1D9wJEsVdhfnBYwLzU=
Subject key identifier:   67:CD:7F:F6:00:11:F7:7B:44:1B:F9:9F:3A:A6:A8:D9:B1:6D:6C:C9
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F43285848F7C14494FE8820A1FA878700
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/e625c427-ed2c-3dcd-812d-91c421264688.roa
Signing time:             Sat 22 Feb 2025 14:00:52 +0000
ROA not before:           Sat 22 Feb 2025 14:00:52 +0000
ROA not after:            Fri 23 May 2025 13:00:52 +0000
asID:                     216321
IP address blocks:        23.162.176.0/24 maxlen: 24
                          23.162.177.0/24 maxlen: 24
                          45.59.137.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f7:c1:44:94:fe:88:20:a1:fa:87:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Feb 22 14:00:52 2025 GMT
            Not After : May 23 13:00:52 2025 GMT
        Subject: CN=927857c1-1c0c-4ae8-b1c8-cea852d41e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:56:c8:e1:37:1c:20:b4:11:5f:1a:bf:4c:eb:
                    c3:39:33:e1:db:6c:d4:10:19:60:0e:78:d9:14:ae:
                    e3:f4:cf:f4:23:1b:9c:fd:18:b7:15:75:73:78:0e:
                    17:ab:52:dd:e7:a9:92:9a:f0:dc:6b:2b:9a:83:6e:
                    a2:95:85:81:85:dd:30:e1:d0:f9:6c:5d:5b:cb:6a:
                    a4:0f:bf:0f:bf:a8:3c:7d:32:41:d0:d2:88:b4:a1:
                    0f:03:cb:c6:8a:24:1e:6b:69:78:b5:d6:4b:6b:ee:
                    42:bf:93:86:01:27:96:79:62:63:d1:bc:d4:05:d9:
                    e4:eb:13:fe:4d:5d:12:84:da:37:f9:01:41:d3:9d:
                    f8:1e:87:9f:22:2a:88:56:2d:03:d8:8e:04:7c:f9:
                    90:aa:a1:18:50:dc:72:58:a4:eb:ef:5e:38:29:9a:
                    88:51:b8:ff:b9:76:b5:34:37:60:71:f9:80:eb:8e:
                    29:ef:29:df:fc:b6:af:00:f4:07:6b:fa:dd:18:3f:
                    6b:71:d0:32:ac:04:2d:bb:7a:cd:bc:c2:db:26:89:
                    02:46:5a:18:8e:61:be:cc:dd:46:18:a0:72:09:65:
                    91:f2:c0:9c:fb:67:aa:e9:07:5e:25:2f:e4:67:ac:
                    93:95:0c:8a:ac:7c:16:54:23:07:b6:94:11:fe:a7:
                    41:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CD:7F:F6:00:11:F7:7B:44:1B:F9:9F:3A:A6:A8:D9:B1:6D:6C:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/e625c427-ed2c-3dcd-812d-91c421264688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.176.0/23
                  45.59.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:57:08:de:aa:33:1e:38:9f:c5:4b:af:87:6f:71:67:8c:d6:
         ab:6d:a2:b6:fe:00:c7:00:cc:6e:b8:ef:f5:b0:bd:90:54:50:
         96:ac:41:1d:b6:8d:bc:24:84:81:d6:6d:b5:51:4d:57:37:97:
         55:64:de:f5:8d:3b:5b:5b:39:0c:3d:a9:fe:30:93:50:ae:c6:
         d2:29:81:f3:11:2c:1e:45:db:ec:0c:9d:98:d9:a2:45:59:54:
         d6:e5:ba:83:1b:6e:c1:34:90:37:bc:a5:49:01:61:56:99:00:
         2a:68:99:8e:24:34:67:f6:85:d7:ba:68:28:c0:0d:8c:02:b0:
         59:73:b7:14:cd:e4:c7:98:e5:85:e5:05:16:1a:8a:b2:3a:7e:
         f9:39:e9:24:d0:3e:0d:dc:9d:83:36:a5:f8:4e:30:31:62:ce:
         eb:f9:d1:6e:be:1d:3e:41:28:f2:46:42:57:0e:eb:36:0e:53:
         f0:37:20:67:85:29:f0:18:09:43:46:92:0e:92:9f:63:ad:86:
         fe:fe:5f:f1:78:fc:69:eb:e2:ba:db:26:9d:2c:eb:73:44:5a:
         de:c6:98:b6:e4:32:24:f1:65:30:54:d1:26:39:97:8d:3b:03:
         df:fd:5f:11:0a:ec:8c:68:05:0c:34:11:76:cc:a6:1b:47:10:
         49:0f:4f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:45 2025 by rpki-client on console.sobornost.net