Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/667c237d-c9f2-33fe-a94c-6ee6d1cf6b35.roa
File:                     667c237d-c9f2-33fe-a94c-6ee6d1cf6b35.roa (raw, json)
Hash identifier:          BYHmWe26YnuXBoUSNGYpv7OTdeO9NrCY9LW+N1tDA2Y=
Subject key identifier:   EB:1E:AA:D4:E8:D0:FA:68:F2:36:80:27:25:11:6D:D8:A3:37:D6:C2
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285849446940AA6D9F2B2B8930A580
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/667c237d-c9f2-33fe-a94c-6ee6d1cf6b35.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     14315
IP address blocks:        184.174.20.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:40:aa:6d:9f:2b:2b:89:30:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=9b85abe7-4643-40ef-aaaa-29e209a92a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d8:3e:58:de:2f:2f:6e:d0:ae:5b:1c:16:e7:
                    56:b0:a3:9f:a8:74:58:e7:86:ab:0f:f0:06:c4:46:
                    cf:f9:08:62:3f:5d:4d:d8:d2:99:ca:38:5e:27:f9:
                    74:e6:e7:e6:e2:3e:b5:e7:3c:9f:76:c3:82:e6:c9:
                    e9:ab:73:51:c9:b5:d0:65:c5:f4:9d:49:04:39:9e:
                    47:da:40:3c:14:9b:02:a9:4f:5b:fb:e3:35:93:2d:
                    09:6e:fa:b5:d7:ff:ba:e0:06:86:48:9f:49:c6:e1:
                    21:ca:e6:5a:44:6b:76:61:ca:e8:f1:ab:13:17:15:
                    dc:8b:10:5c:b6:38:53:63:79:51:63:91:6a:2b:cd:
                    99:d8:8b:8d:9f:bb:22:a6:93:ed:2e:a2:86:d6:ce:
                    47:4f:46:56:ed:3b:89:f4:8d:d2:2b:20:e5:c9:49:
                    71:76:9a:35:c8:70:7d:81:15:8d:9d:6c:c9:9b:9e:
                    ae:66:48:eb:46:fd:60:a2:9a:5e:ce:fc:0c:11:b6:
                    28:40:58:49:1c:bc:0a:2d:30:9b:b9:cd:ef:6c:55:
                    5f:db:99:d7:23:6d:48:2e:59:f5:89:92:f1:5d:c9:
                    1a:75:f3:1a:bd:f2:3f:37:69:a6:1f:e6:90:49:b9:
                    c3:9c:61:43:7c:98:bc:a1:46:b7:33:14:b4:1b:56:
                    80:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1E:AA:D4:E8:D0:FA:68:F2:36:80:27:25:11:6D:D8:A3:37:D6:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/667c237d-c9f2-33fe-a94c-6ee6d1cf6b35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:cd:3a:9c:30:86:a2:2c:1f:d7:3d:6c:a0:45:25:a3:87:fa:
         e3:66:43:a6:f3:c3:67:d4:5e:25:60:c3:26:4a:5f:f3:56:fc:
         a5:a8:a1:37:17:63:ae:c6:22:3d:64:90:d7:9c:f3:60:be:6d:
         ab:52:f1:78:85:00:77:d3:b3:d4:f4:59:b7:c9:be:4c:ce:43:
         af:c1:77:70:44:5f:27:b4:96:54:13:96:25:4e:2d:50:f0:79:
         bc:e5:0f:bb:d4:58:92:7b:1d:c4:86:61:16:dc:ea:ab:5a:a8:
         0f:13:71:c9:2c:b0:9e:7d:6f:d1:25:3c:7f:8b:e8:b4:6e:0e:
         d3:7b:ac:f6:2c:59:bc:c0:ae:b2:0f:2b:07:78:9e:3d:37:04:
         e4:98:da:fe:6b:02:30:40:6d:6e:47:e2:1c:3e:f8:93:01:4a:
         1d:78:db:7d:bd:3f:59:a6:9a:d6:03:0b:b1:9d:ac:0c:04:8b:
         f6:86:8c:81:54:78:1c:17:d9:9a:04:8b:91:60:d6:75:59:96:
         c4:8b:79:f4:1d:97:c6:94:ef:11:0f:6a:13:e7:ef:69:22:95:
         8b:a5:8f:99:0c:c1:f8:74:59:d6:fa:c3:b9:f9:a8:f0:7c:8d:
         35:82:f8:9d:89:ec:ad:f0:82:75:89:2c:57:32:a3:27:e0:15:
         fd:b8:7a:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaUCqbZ8rK4kwpYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk
OWI4NWFiZTctNDY0My00MGVmLWFhYWEtMjllMjA5YTkyYThkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tg+WN4vL27QrlscFudWsKOfqHRY54arD/AG
xEbP+QhiP11N2NKZyjheJ/l05ufm4j615zyfdsOC5snpq3NRybXQZcX0nUkEOZ5H
2kA8FJsCqU9b++M1ky0Jbvq11/+64AaGSJ9JxuEhyuZaRGt2Ycro8asTFxXcixBc
tjhTY3lRY5FqK82Z2IuNn7sippPtLqKG1s5HT0ZW7TuJ9I3SKyDlyUlxdpo1yHB9
gRWNnWzJm56uZkjrRv1goppezvwMEbYoQFhJHLwKLTCbuc3vbFVf25nXI21ILln1
iZLxXckadfMavfI/N2mmH+aQSbnDnGFDfJi8oUa3MxS0G1aAEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOseqtTo0Ppo8jaAJyURbdijN9bCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNjY3YzIzN2QtYzlmMi0z
M2ZlLWE5NGMtNmVlNmQxY2Y2YjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuK4UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAILNOpwwhqIsH9c9bKBFJaOH+uNmQ6bzw2fUXiVgwyZKX/NW/KWooTcX
Y67GIj1kkNec82C+batS8XiFAHfTs9T0WbfJvkzOQ6/Bd3BEXye0llQTliVOLVDw
ebzlD7vUWJJ7HcSGYRbc6qtaqA8TcckssJ59b9ElPH+L6LRuDtN7rPYsWbzArrIP
Kwd4nj03BOSY2v5rAjBAbW5H4hw++JMBSh142329P1mmmtYDC7GdrAwEi/aGjIFU
eBwX2ZoEi5Fg1nVZlsSLefQdl8aU7xEPahPn72kilYulj5kMwfh0Wdb6w7n5qPB8
jTWC+J2J7K3wgnWJLFcyoyfgFf24ei0=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:47 2025 by rpki-client on console.sobornost.net