Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/3dad95c8-b382-3087-b45a-884e6286a797.roa
File:                     3dad95c8-b382-3087-b45a-884e6286a797.roa (raw, json)
Hash identifier:          JqjLH48akrF/LI4J8KZebzEozMM/Esx+rb4spH59n8U=
Subject key identifier:   47:54:7F:FF:CB:77:A7:66:8A:10:5F:55:CD:72:23:34:54:85:FF:CE
Certificate issuer:       /CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
Certificate serial:       010D0C9F432858497279A42AEA14D80BA7B852C0
Authority key identifier: 5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/3dad95c8-b382-3087-b45a-884e6286a797.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     1299
IP address blocks:        204.235.196.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:a4:2a:ea:14:d8:0b:a7:b8:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=7def6fd0-599a-4d46-b920-bd58d21da6f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:97:f2:cd:a5:cf:4b:8c:8c:64:5f:bb:80:2f:
                    bd:5e:b6:b4:25:4d:2a:6b:9e:f9:58:8c:0d:ae:fd:
                    a5:7f:e4:63:12:32:30:51:fc:c5:42:b2:34:4e:3d:
                    32:1b:07:82:7b:a2:34:90:14:66:d9:f7:0e:d3:4e:
                    c7:05:8e:80:82:74:ef:56:7c:5e:4f:bc:8d:50:ac:
                    2e:5e:42:59:58:49:45:49:34:96:63:f8:f8:8d:d4:
                    10:c9:08:6c:67:79:7e:ea:4f:04:57:89:d7:d6:52:
                    fa:90:0a:15:01:a9:42:81:e9:96:8d:ca:64:36:39:
                    4f:23:f0:ae:2e:39:ac:61:b2:4e:6c:7f:20:3a:f0:
                    56:ea:c6:a4:d6:5e:66:b7:f6:1a:c9:a5:73:6e:4b:
                    d6:21:6b:05:03:fc:16:a8:73:19:88:b3:06:37:c5:
                    80:53:f7:e8:f0:ed:14:5b:db:a4:cb:92:d3:2a:d0:
                    bb:87:59:3e:3f:03:18:c2:ca:6a:e7:b5:eb:01:10:
                    ca:f1:d8:4c:cc:80:dc:dd:69:5b:28:27:7b:b2:5c:
                    c8:56:4f:e1:cf:07:ea:41:cf:91:5b:e2:3b:8b:3f:
                    e3:e3:24:41:94:d2:23:a4:5a:82:e9:53:03:1e:16:
                    fa:77:0d:e6:fc:89:69:ee:9c:12:35:56:86:8a:4b:
                    79:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:54:7F:FF:CB:77:A7:66:8A:10:5F:55:CD:72:23:34:54:85:FF:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/3dad95c8-b382-3087-b45a-884e6286a797.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl

            X509v3 Authority Key Identifier:
                keyid:5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.235.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:f0:37:aa:05:fd:53:7d:3f:61:db:6b:30:ee:f6:4e:df:b3:
         d7:60:90:5f:d1:6d:b6:a2:9f:d8:0d:ee:be:e7:e3:a1:da:d8:
         89:e0:16:ae:a8:8e:38:e9:44:c1:8e:74:bf:25:f5:db:86:e7:
         30:6b:d0:ca:ae:62:9e:72:43:2f:a9:4d:45:df:65:cb:6c:92:
         3d:f7:bf:38:d1:3e:d9:0a:b6:6a:ab:33:e1:8e:7c:10:5a:a9:
         49:00:4a:5d:c2:b5:78:4f:03:4f:10:13:a8:b0:3e:d5:d8:df:
         db:95:b6:02:67:cd:b8:6d:fa:df:a3:92:8a:f9:08:d6:d0:b6:
         27:87:cf:4c:13:90:e0:aa:30:c5:bc:78:6d:07:10:02:48:00:
         f9:b4:c8:8d:b5:a6:53:50:63:3b:e9:a1:85:d8:3e:16:84:a1:
         27:f8:c5:bb:20:a3:c2:a1:24:07:b2:9c:ba:43:94:b0:7b:6f:
         f1:04:54:61:34:c3:32:df:30:a7:42:e5:7f:26:10:12:84:9c:
         98:c5:cd:64:31:34:eb:7d:39:8d:e0:be:a5:ab:35:b7:ea:dc:
         de:98:13:3d:45:85:1b:00:02:07:ac:f6:4e:75:53:6f:38:14:
         fc:8f:43:df:3b:73:00:ad:47:cb:63:c1:b4:f2:9d:ac:e8:15:
         13:99:ab:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:25 2025 by rpki-client on console.sobornost.net