Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/1a822607-4eb6-348d-a583-ce8fe84932bb.roa
File:                     1a822607-4eb6-348d-a583-ce8fe84932bb.roa (raw, json)
Hash identifier:          CNzS7xEmyR6qJJKQPOGJekoxqpo0ZYppvLd01NgfRYw=
Subject key identifier:   8D:8E:79:54:E9:6E:28:76:FA:DB:68:F3:78:00:C3:79:68:E8:2F:0C
Certificate issuer:       /CN=88390227-7474-42cc-ab77-86c936657096
Certificate serial:       010D0C9F43285848EF6153163E11FC3FD74C4200
Authority key identifier: 2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/1a822607-4eb6-348d-a583-ce8fe84932bb.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     17157
IP address blocks:        207.230.158.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:53:16:3e:11:fc:3f:d7:4c:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88390227-7474-42cc-ab77-86c936657096
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=f0cf0cad-83dd-4455-b004-d98987f1a723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:af:a3:02:77:84:37:94:ce:74:79:03:9b:c4:
                    71:70:78:c4:18:8a:7c:df:29:d9:39:a3:90:67:5a:
                    07:9d:8e:2d:c1:55:9b:11:59:d7:44:93:ff:f8:0a:
                    87:d0:c7:26:45:d2:95:ec:53:8a:7d:e5:ff:40:a5:
                    07:45:04:f5:f0:66:01:a5:b7:23:a9:49:f2:ed:9c:
                    22:9b:c4:fc:f9:18:7e:1c:63:36:d4:0d:35:c9:4a:
                    7b:f9:3e:50:df:c1:1b:a7:ad:18:e1:eb:97:4f:ea:
                    40:f8:39:81:8d:49:01:84:33:5c:18:f5:ca:1f:03:
                    d1:ba:70:3b:db:10:8e:d4:73:cf:84:59:d5:b7:cd:
                    82:11:46:50:fc:ec:22:fc:04:11:f1:ca:21:7b:dc:
                    6b:36:23:39:2b:fe:d5:59:5a:f7:a3:4a:0b:47:86:
                    cf:b0:2e:66:61:d9:98:e3:b6:9c:42:ab:ad:29:b3:
                    a3:b3:93:a9:99:c5:a0:9b:25:41:e4:99:94:86:ce:
                    02:c7:07:c6:e5:4a:6b:fd:58:ee:dc:56:4b:6b:a1:
                    c4:57:af:56:af:3e:54:39:16:75:8a:5b:1b:fc:e7:
                    63:c9:13:32:26:ee:16:34:cd:23:5b:43:39:36:7d:
                    b9:4a:57:17:45:ee:18:cb:5d:6b:89:73:3a:58:c9:
                    ee:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8E:79:54:E9:6E:28:76:FA:DB:68:F3:78:00:C3:79:68:E8:2F:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/1a822607-4eb6-348d-a583-ce8fe84932bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.crl

            X509v3 Authority Key Identifier:
                keyid:2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:27:a5:24:d1:30:cb:53:44:02:ba:bc:db:46:e0:41:f5:ed:
         32:63:78:b5:a3:b2:99:b4:56:d6:ad:aa:03:df:bb:c7:ca:99:
         2a:21:db:fa:f2:e4:fe:7c:56:20:ef:01:38:6f:de:c9:70:79:
         53:6a:86:cc:84:9b:89:16:99:71:58:b2:cb:2e:42:6d:0d:5d:
         72:33:1c:e6:ef:5a:b3:90:5f:53:26:5c:7f:be:d8:f4:4d:77:
         65:db:04:44:8c:fe:f0:1f:e0:db:2d:04:2c:ce:74:d8:6a:22:
         ea:45:3b:cc:39:bc:21:34:7f:8c:92:b5:cf:72:50:c3:13:96:
         8e:69:45:5f:12:fa:da:97:0e:d6:a2:32:51:39:26:e5:90:36:
         e5:67:94:9c:38:09:a2:69:0b:54:1a:c3:a4:dd:44:1d:e6:a7:
         de:61:38:d5:a8:bc:a5:3c:2f:b7:90:53:f9:16:c5:07:c6:aa:
         74:fb:f0:16:64:b4:c8:c6:1f:ce:03:0a:19:af:b0:56:8d:7c:
         31:86:61:f2:1f:0c:a2:a5:08:11:c1:8c:76:ce:c2:60:18:77:
         da:5f:07:5f:84:a4:05:0c:a3:90:1c:ff:fb:e8:6b:a9:b2:96:
         66:ea:55:73:d9:18:50:1c:d1:a7:a6:e1:0f:27:f8:b3:b8:b1:
         36:fd:db:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:24 2025 by rpki-client on console.sobornost.net