Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/12e46e6f-b9b8-3b84-b6d5-27e024920045.roa
File:                     12e46e6f-b9b8-3b84-b6d5-27e024920045.roa (raw, json)
Hash identifier:          IjShGCFrocp610OGX3/ci2S+JgBDYtUJoDQWo9Vh8Jk=
Subject key identifier:   48:F8:58:FD:E8:A6:83:05:6C:65:43:5C:AD:E7:43:E5:EE:52:7B:87
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584948E127A6B4B795E7EBA99200
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/12e46e6f-b9b8-3b84-b6d5-27e024920045.roa
Signing time:             Sun 23 Mar 2025 15:25:41 +0000
ROA not before:           Sun 23 Mar 2025 15:25:41 +0000
ROA not after:            Sat 21 Jun 2025 15:25:41 +0000
asID:                     22249
IP address blocks:        12.20.188.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:48:e1:27:a6:b4:b7:95:e7:eb:a9:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Mar 23 15:25:41 2025 GMT
            Not After : Jun 21 15:25:41 2025 GMT
        Subject: CN=13f1c90f-93fb-426b-bce5-7f22ee748ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2c:f1:36:f7:b5:81:76:07:b8:b5:00:82:4f:
                    7e:5d:74:63:bb:1a:f9:44:7f:75:46:3d:54:9b:38:
                    a4:e3:03:af:76:d0:91:51:0a:f9:74:55:ea:3f:95:
                    dc:ae:8e:d1:f9:4e:d5:c3:98:4c:7e:df:d0:25:ed:
                    8b:44:66:d7:72:b9:82:09:66:33:af:fa:11:26:82:
                    7b:eb:2f:2b:98:de:dc:a3:96:ef:71:9f:66:b1:78:
                    4d:6f:dc:99:b2:ad:8e:b5:cb:ea:85:63:fc:03:e5:
                    73:5e:1b:ed:be:42:1a:32:c8:c1:fd:92:90:53:dc:
                    d3:9b:b8:b6:92:7d:ca:64:e5:5b:f1:46:d2:54:0c:
                    8c:e5:66:9c:21:6d:22:6b:b2:56:ab:30:67:da:19:
                    22:76:3f:d5:5c:8e:35:18:ac:30:1e:69:34:c6:5d:
                    42:48:59:24:e3:29:e2:d9:cb:97:d5:d6:8d:b6:e6:
                    cd:f8:71:7f:2c:bd:a4:1b:d5:7e:f3:12:43:8f:6f:
                    79:d6:b0:12:c5:b8:ad:54:eb:9e:18:94:5b:5e:ed:
                    f9:b7:e4:01:7c:63:b3:eb:4e:42:77:35:e5:91:df:
                    80:8a:2c:37:3d:b1:5d:80:0a:db:aa:69:39:61:8a:
                    23:55:c3:dd:6e:64:9e:a1:9f:e4:b7:b7:97:e7:d7:
                    f2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F8:58:FD:E8:A6:83:05:6C:65:43:5C:AD:E7:43:E5:EE:52:7B:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/12e46e6f-b9b8-3b84-b6d5-27e024920045.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.20.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ad:7e:e0:ea:4e:ef:1d:7c:54:f5:d8:67:70:d6:d2:be:52:
         56:80:a6:3c:a0:af:f6:59:2a:12:25:c2:ab:10:9c:7c:23:38:
         32:6b:f3:11:cb:62:0b:22:ca:7d:1d:8a:e2:30:cd:15:39:cf:
         7e:1d:a5:b2:77:a4:65:27:60:db:ab:59:e9:e9:d7:18:15:c9:
         ef:e1:df:98:bb:a8:44:18:56:68:17:3e:ed:95:08:87:9b:c2:
         0a:26:c3:5b:48:4a:83:a0:27:b0:2d:fc:42:2b:cb:25:2b:38:
         1a:4f:41:0a:4e:a5:33:d4:0e:ad:c2:ac:5e:ff:5b:16:81:49:
         36:79:f9:69:12:b5:8e:e0:df:b1:17:50:df:5c:d8:2b:88:0a:
         df:8f:85:da:b8:66:eb:7d:91:fd:e3:dc:dc:89:c9:e9:7a:85:
         f5:2c:45:54:34:fe:62:32:c5:25:71:3c:51:11:ec:1f:7e:7a:
         96:2f:35:43:d3:92:1a:b5:1c:aa:68:f2:34:6a:4c:74:3f:ff:
         8d:d1:a6:e8:53:6c:ea:21:19:30:a0:ae:64:a6:27:c8:e2:6a:
         52:1b:04:18:1d:f2:b1:79:01:f8:21:dc:a8:9c:1b:e7:e8:d3:
         41:59:00:3d:1a:13:5e:bd:61:e3:a9:dc:6a:9c:9c:84:2b:7f:
         77:d7:59:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:34 2025 by rpki-client on console.sobornost.net