Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/ee97e258-8632-3ff0-ab06-d0fec008173c.roa
File:                     ee97e258-8632-3ff0-ab06-d0fec008173c.roa (raw, json)
Hash identifier:          QeJSWkpPOIb2aFu66BKxXY46P5cU0Kp5V2Dm33jqJUM=
Subject key identifier:   B4:A0:0C:55:C8:11:21:93:46:C4:77:E6:80:1C:05:D5:C0:F9:F3:AD
Certificate issuer:       /CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
Certificate serial:       010D0C9F432858497279A4190B8D3AEBE1A73680
Authority key identifier: 5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/ee97e258-8632-3ff0-ab06-d0fec008173c.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     35950
IP address blocks:        204.235.196.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:a4:19:0b:8d:3a:eb:e1:a7:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=d07b373a-5ca2-4f3e-b9c8-0dbe8f4ca366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e9:86:5d:d8:46:b5:b7:f2:ea:bb:15:bb:39:
                    e8:67:06:03:c0:22:0d:b6:cf:03:47:4c:7a:02:8a:
                    49:75:a8:88:fd:2b:ef:fe:c2:f8:ac:83:92:e7:4c:
                    66:d5:64:4f:52:62:27:cc:8a:2a:21:62:13:fa:11:
                    c5:db:53:d7:b3:b6:48:fb:55:11:9b:07:b6:5b:6a:
                    f5:da:59:bf:46:15:2d:ce:0c:1a:a7:d5:ed:ae:b5:
                    83:5b:cd:19:dd:06:7f:21:4e:a6:8e:9d:89:f6:db:
                    9c:78:ba:3c:25:96:6b:a7:2d:a3:e5:73:86:86:1d:
                    28:25:5a:91:dc:07:e3:28:c0:92:8e:2b:81:94:13:
                    d2:3e:17:1d:44:fb:30:52:52:b0:97:38:39:7c:59:
                    b7:6a:df:ce:53:6a:e4:3b:89:f4:87:c2:bd:c5:79:
                    ac:af:d7:10:27:5f:85:73:3d:3d:93:ae:80:56:4c:
                    f8:0b:21:5c:20:0c:f6:1c:9b:14:bb:f0:1a:1f:a1:
                    40:48:fc:c8:9c:7d:3c:78:ef:cb:15:33:c7:c4:86:
                    d1:2f:47:e7:67:2a:2d:42:5b:e5:19:e9:33:b5:60:
                    71:a9:f5:42:09:39:d5:83:52:69:2d:a7:f0:a0:6a:
                    3e:db:93:8b:38:3d:c7:c6:45:f3:e3:a2:85:77:8a:
                    5a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A0:0C:55:C8:11:21:93:46:C4:77:E6:80:1C:05:D5:C0:F9:F3:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/ee97e258-8632-3ff0-ab06-d0fec008173c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl

            X509v3 Authority Key Identifier:
                keyid:5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.235.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:3d:c8:bd:cf:4f:93:1c:72:ce:16:30:d7:59:37:6a:68:54:
         e5:b0:c4:51:f3:3b:c7:b5:c6:e4:ad:7a:2e:37:b8:cb:02:fb:
         6a:3e:f9:95:90:3c:ea:88:f5:cf:90:52:bf:71:40:f0:7b:62:
         e7:4d:05:96:5b:02:b7:72:67:98:7c:c2:a2:6d:25:00:ab:8a:
         b1:a0:15:4f:8d:82:e9:42:90:a5:f5:57:c9:29:12:a3:9f:d6:
         13:71:8d:df:83:95:0c:89:9b:15:da:a9:d6:39:1b:58:8a:de:
         af:19:2b:7b:92:a0:2d:6a:fb:12:b1:58:35:36:6d:3b:ae:5e:
         d0:5d:f5:14:7b:54:59:d3:c5:10:18:3c:e0:b3:b5:a4:a4:3e:
         a6:3b:e6:77:85:19:c0:f7:21:79:e3:02:32:98:85:f4:c4:18:
         1b:23:f0:53:ad:6a:cc:76:9d:c4:5e:6a:90:07:7c:3f:88:4d:
         b2:32:27:3a:23:e4:76:13:ea:5c:60:d4:1c:a9:53:8d:52:fa:
         05:33:03:b6:d6:87:a5:31:9b:82:5a:0f:33:49:65:8c:67:3b:
         45:2c:56:d1:0f:c7:8e:db:24:66:05:74:59:72:37:c7:e7:51:
         f7:1f:4e:69:6a:c4:1b:1a:bf:f0:31:32:53:e9:58:8b:38:3f:
         0f:95:fa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:25 2025 by rpki-client on console.sobornost.net