Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/047b96ad-5320-33eb-a106-6d610cbe11c1.roa
File:                     047b96ad-5320-33eb-a106-6d610cbe11c1.roa (raw, json)
Hash identifier:          Uno2Bih9GD4jXXcl/EunFZjwHSkYl2vrylmVIQHqYTA=
Subject key identifier:   52:4A:DB:7A:05:28:F6:F2:89:C1:13:16:7E:0A:90:C4:7B:D1:21:E8
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584981D45B4F0844A179F94A6780
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/047b96ad-5320-33eb-a106-6d610cbe11c1.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     212238
IP address blocks:        216.107.137.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:5b:4f:08:44:a1:79:f9:4a:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=e2777961-8eca-4d1e-b660-f0022122cc67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f3:a8:88:33:32:8d:42:ab:de:f0:11:de:31:
                    f3:99:5e:11:1c:f8:52:0e:82:7f:ac:54:2c:64:da:
                    26:3b:ec:b0:fe:77:9f:bc:ba:db:26:0b:7a:db:ce:
                    6e:32:06:0c:41:4d:c0:1e:80:7d:69:c2:28:43:8b:
                    a3:bf:ab:40:67:71:2d:68:0f:7f:18:8c:f7:19:ab:
                    17:6a:fc:8f:db:e7:28:64:b5:e9:0d:8a:cc:a1:26:
                    b0:98:07:6d:bb:44:96:0a:07:c2:9d:11:51:23:97:
                    05:5b:4a:2f:d7:ed:fb:66:21:48:c8:1f:da:e9:ab:
                    c3:30:c6:b5:db:54:f6:c0:04:97:4b:09:4c:88:74:
                    28:0a:8d:71:9c:eb:aa:62:dd:e3:8d:8b:ef:6c:a8:
                    2e:2e:c7:27:1e:c8:9a:db:02:c6:c3:7b:a3:16:5c:
                    93:7e:53:b6:72:c8:31:32:a5:87:4e:70:2c:0e:c2:
                    5e:be:5b:d6:f7:fc:99:56:e2:2b:9a:d6:9d:3a:66:
                    3b:06:86:93:2e:08:61:89:83:43:65:ea:7c:fc:1a:
                    87:d6:51:8e:88:03:74:04:87:69:5c:d9:9d:fd:8a:
                    7b:39:85:be:59:f5:00:45:2e:b6:1b:3c:61:40:25:
                    58:97:cd:34:78:23:6b:11:13:ec:7d:32:3c:fe:d8:
                    3e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4A:DB:7A:05:28:F6:F2:89:C1:13:16:7E:0A:90:C4:7B:D1:21:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/047b96ad-5320-33eb-a106-6d610cbe11c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.107.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:51:f2:81:74:e3:99:6b:c3:99:de:c9:ae:6d:b8:68:fe:84:
         1f:b3:f9:8e:63:5c:46:1c:ad:d9:76:bf:dd:d8:50:26:8a:a2:
         3c:17:06:13:e2:3c:af:73:8b:d9:d2:43:b0:9e:be:d0:a5:0f:
         ba:c3:cc:b1:89:60:74:01:e6:f3:fe:ed:f8:92:7f:eb:86:dd:
         f3:28:ff:37:47:b5:3a:5f:cc:e3:61:10:be:29:56:42:7e:6f:
         59:a7:93:50:43:61:d0:f3:5a:14:db:08:ed:b5:75:2c:71:df:
         9d:53:d1:05:e0:6f:80:50:fd:aa:5e:4b:1f:e4:9f:3b:7e:5a:
         75:4b:a9:7a:15:b0:cf:44:5a:09:07:f4:9d:cb:93:a8:10:c2:
         3c:ae:ef:be:a3:ec:6c:76:88:f7:94:43:a8:d8:d9:9c:43:7a:
         27:49:19:f6:21:ac:4f:14:69:33:55:ae:bb:c9:9a:82:76:df:
         88:27:ac:72:3f:a3:8b:a7:06:a0:41:39:55:1d:75:fb:c5:2e:
         7c:33:50:f5:87:f6:86:cc:82:ca:42:df:2e:9e:ba:0a:14:ed:
         da:2d:1a:7e:31:fa:25:39:56:5e:46:18:b2:96:65:4b:b4:da:
         f6:d8:e7:5d:9d:be:d3:75:81:52:83:98:0b:ca:ae:2a:24:01:
         f5:fe:16:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:47 2025 by rpki-client on console.sobornost.net