Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3515284d-0538-32f3-8521-dd2206bc1960.roa
File:                     3515284d-0538-32f3-8521-dd2206bc1960.roa (raw, json)
Hash identifier:          fuF+/5MBdbWNxNUAoAXYl99aS5dpzPXPz3SpeYxWMVs=
Subject key identifier:   70:33:8D:F2:54:F7:50:04:BC:E9:07:7F:3F:E8:85:73:66:92:94:BB
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858494B641FB87196B39E3D249C00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3515284d-0538-32f3-8521-dd2206bc1960.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     13332
IP address blocks:        184.174.91.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:1f:b8:71:96:b3:9e:3d:24:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=8c20aa56-59c7-41ca-99a9-8d5bbfd746da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:52:34:ac:21:97:34:d5:bc:ab:78:c8:97:12:
                    42:a4:34:b6:da:b7:1d:a6:55:fd:a1:03:b5:84:d9:
                    11:05:95:c2:41:ce:14:ed:bd:cb:27:ed:8d:4a:a2:
                    95:16:10:15:b2:99:ee:58:73:76:7b:9f:ad:66:92:
                    e2:57:13:65:f3:a5:cd:ea:3d:c2:de:60:15:66:37:
                    51:a3:21:5c:56:04:58:a8:6c:db:03:33:61:29:c3:
                    29:1c:38:2d:38:34:58:cc:7c:0f:d5:23:d9:bd:e4:
                    2c:23:c1:a4:7f:4b:48:85:99:2b:ea:e5:46:14:5c:
                    68:6f:ca:a0:48:fc:9e:66:3d:f6:eb:09:ef:34:5a:
                    6e:e4:f8:56:ef:c7:1a:ab:ad:7f:42:fd:38:e5:1b:
                    35:16:07:92:11:a8:9c:f7:b2:13:fd:fc:66:60:18:
                    ba:80:7c:0f:88:6f:6a:20:b9:ae:a7:56:ab:cc:f0:
                    36:42:86:d5:72:23:ed:2c:bb:77:d1:4b:a9:b7:db:
                    79:c9:f0:cb:4a:91:3e:98:b6:09:2f:b3:64:f4:4f:
                    1f:12:0d:87:82:31:84:4c:66:9f:6f:1b:fe:2a:c8:
                    3d:16:8b:c2:14:f9:08:49:51:32:67:66:a3:20:74:
                    7a:08:01:61:20:a5:75:6c:dc:f8:29:36:92:ba:fc:
                    56:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:33:8D:F2:54:F7:50:04:BC:E9:07:7F:3F:E8:85:73:66:92:94:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3515284d-0538-32f3-8521-dd2206bc1960.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:71:f0:f8:2a:d0:ec:e4:82:62:98:d9:6e:61:ae:6b:4e:3b:
         2a:40:56:8f:8f:3b:80:e0:ad:6c:93:40:90:30:c4:5f:99:28:
         87:a4:99:66:63:af:58:8b:0c:4f:79:40:f0:dd:51:6b:ed:71:
         36:df:60:f8:c4:0b:5b:31:8a:b9:a8:53:f3:36:70:7e:02:4a:
         1f:8d:d3:63:25:c7:61:4b:0b:de:9c:c5:a3:4b:a2:bb:69:0f:
         ab:76:16:8b:1d:2d:28:14:55:f7:8e:1a:02:a3:cd:51:cb:28:
         3c:aa:0c:47:55:03:ec:f5:d2:7d:6a:a3:ff:ed:b5:81:8b:4a:
         7c:f6:0e:d9:7a:2e:94:2b:9a:55:a6:49:23:72:73:af:c3:a7:
         0c:2b:e2:3a:ee:f0:c7:5b:08:6b:5f:e2:33:04:4d:f7:c8:f7:
         70:cb:8a:88:82:3c:58:41:72:44:9c:cd:67:17:f1:09:e8:7e:
         07:ca:f5:18:01:fa:e8:cc:a3:0f:ef:a1:63:44:df:4a:f5:0b:
         3f:6b:de:fc:9a:3a:d7:3a:d3:18:f9:c5:4c:ba:8a:92:01:c3:
         49:37:6a:58:28:e4:67:05:7e:85:d5:52:ae:c9:cc:3a:57:db:
         40:66:bd:9f:d3:ad:33:46:18:2e:ec:de:19:44:49:31:f3:d4:
         6c:f9:b6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:47 2025 by rpki-client on console.sobornost.net