Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/0ea427a0-fbec-3443-bf3a-e857d1fcf4e4.roa
File:                     0ea427a0-fbec-3443-bf3a-e857d1fcf4e4.roa (raw, json)
Hash identifier:          VHce2y7jhUO51QmDJgJntRcvsDWxlqn6dn0jOLr4NeY=
Subject key identifier:   25:44:6C:8F:5A:D8:55:02:62:BB:17:B2:10:42:37:1A:49:B8:0F:59
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584948EA4835EF9F44C1D5141480
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/0ea427a0-fbec-3443-bf3a-e857d1fcf4e4.roa
Signing time:             Sun 23 Mar 2025 15:44:05 +0000
ROA not before:           Sun 23 Mar 2025 15:44:05 +0000
ROA not after:            Sat 21 Jun 2025 15:44:05 +0000
asID:                     400210
IP address blocks:        12.175.174.0/23 maxlen: 24
                          12.203.8.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:48:ea:48:35:ef:9f:44:c1:d5:14:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Mar 23 15:44:05 2025 GMT
            Not After : Jun 21 15:44:05 2025 GMT
        Subject: CN=21b54705-6ee7-4459-8c3a-47ef97994734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:38:2d:8b:2e:e6:e1:6a:0b:2e:05:88:0a:7b:
                    d2:7b:cf:b7:63:de:ff:b5:b7:82:b9:cf:6e:ad:12:
                    fd:2a:44:77:86:eb:34:48:87:99:3f:a3:fe:12:83:
                    10:e5:5a:4f:eb:a3:22:92:41:82:fe:01:d4:f0:a9:
                    e1:22:58:a6:be:d2:58:82:b8:e3:67:a4:17:fb:b8:
                    5a:66:59:ec:62:02:bb:f1:9c:3e:ba:4c:4b:4e:45:
                    d4:c4:72:81:c6:fb:c8:f7:6f:c5:31:c1:3d:60:fe:
                    e6:01:6f:e0:94:d7:2e:be:b3:77:b2:20:67:8f:95:
                    cd:59:66:94:c0:09:e0:b7:92:01:48:27:35:bd:33:
                    42:03:f1:7e:a0:27:3c:53:7b:c0:4f:12:6d:7c:b6:
                    14:33:8b:76:d6:f9:d5:00:d6:5d:f5:16:45:4c:2f:
                    a7:d4:4f:6d:12:91:58:2b:da:ee:04:2f:81:88:cd:
                    2c:a9:af:13:fb:10:4e:28:de:57:ea:0b:90:3c:83:
                    af:26:14:5a:95:65:b6:30:d8:25:38:b9:e2:55:89:
                    7d:fc:f9:2c:76:d6:fd:dd:07:eb:c8:0e:91:23:d9:
                    f2:84:54:9e:2c:6f:4e:07:e8:56:2d:6c:97:03:83:
                    9f:c9:f0:3d:9e:c5:08:4c:2e:99:a2:d7:b5:9a:b6:
                    76:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:44:6C:8F:5A:D8:55:02:62:BB:17:B2:10:42:37:1A:49:B8:0F:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/0ea427a0-fbec-3443-bf3a-e857d1fcf4e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.175.174.0/23
                  12.203.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:d6:4a:33:1a:fc:c8:ff:e7:b2:b0:73:11:3f:b3:d3:7b:eb:
         9e:b0:f4:7d:9c:21:c3:c2:ce:36:5f:63:38:fd:00:ce:c3:07:
         94:06:b8:38:41:78:75:dd:60:94:ba:95:18:f0:2f:db:9f:7d:
         3c:19:fc:60:ff:4f:6f:8d:3f:16:93:79:08:dd:f4:da:05:83:
         44:f3:83:f6:f9:34:39:d2:26:68:e4:44:1c:37:d6:a0:4e:9f:
         c9:0c:08:0f:ad:58:60:05:e7:1d:3a:25:00:30:7f:ce:e0:ba:
         f5:85:56:a7:95:1f:75:3d:3d:99:09:30:6e:31:e0:7e:2d:48:
         a5:79:97:a2:d1:15:ae:2f:e4:d8:3c:6b:b2:aa:a5:78:5d:d8:
         ec:f8:69:5d:64:01:3f:a4:de:f5:a9:f1:22:dd:e4:fc:97:3b:
         85:51:c3:61:a7:92:99:ae:91:56:5c:da:53:bf:db:d3:e6:bc:
         04:4b:ec:46:24:fd:6b:db:37:8e:73:e3:4e:59:b2:43:49:2b:
         39:98:c0:96:a2:aa:a2:18:ce:24:84:de:d3:c6:b8:b6:77:bf:
         00:af:88:36:d1:5e:a2:83:85:45:46:68:ea:d5:f8:cf:66:a6:
         0e:f7:02:8a:49:b5:04:5b:86:4c:ca:34:d2:94:31:29:76:55:
         f9:1e:90:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:34 2025 by rpki-client on console.sobornost.net