Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/683f5d66-eaff-3067-96b9-4bcce2c49736.roa
File:                     683f5d66-eaff-3067-96b9-4bcce2c49736.roa (raw, json)
Hash identifier:          ETorDw/n23pQdJ79uICCJu3Mg+Yp3k7Ei2WZLQz7D6w=
Subject key identifier:   91:9E:3A:BF:04:53:63:A1:28:0E:6C:E3:64:CF:76:44:01:DC:0F:40
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858494B640619873D3431A0227D00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/683f5d66-eaff-3067-96b9-4bcce2c49736.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     21769
IP address blocks:        67.203.56.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:06:19:87:3d:34:31:a0:22:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=9cc34127-577e-4d0c-bfbd-429478526416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a6:8c:23:55:f4:4e:40:2f:08:d8:d4:63:62:
                    48:55:23:22:cb:13:c6:97:c3:64:cc:8a:40:3f:70:
                    92:fa:1d:2a:66:55:d0:91:bd:b2:50:cb:8c:db:2a:
                    e8:7f:11:0a:9e:2b:95:b8:43:0c:0b:7d:c1:56:3b:
                    32:6d:a9:ce:ad:1b:b7:3b:e7:aa:a9:9c:92:70:22:
                    9b:9f:69:48:f4:fd:7e:6c:82:7f:8d:90:7a:29:8e:
                    e5:92:02:0e:73:af:b8:85:fb:5d:b9:36:f8:51:ff:
                    b1:40:a3:90:00:8c:25:a0:f1:13:d2:b6:ef:39:b5:
                    51:dc:38:ac:fd:b4:66:33:f5:33:12:34:8e:4d:f6:
                    99:0e:00:e2:20:8c:db:2f:a2:ef:00:e2:84:36:52:
                    9b:0e:71:da:bc:91:1a:f5:f2:3f:24:31:f7:fa:91:
                    3e:dd:1a:3f:df:cd:db:b6:60:b8:f1:57:b4:30:b7:
                    3d:0f:9c:98:27:77:89:10:17:cc:dd:47:a7:08:3a:
                    65:5e:53:0a:42:62:e3:c6:c4:e7:bf:60:c3:f0:21:
                    ee:b0:8b:00:4d:9d:c6:f0:f8:eb:d6:b6:8e:83:04:
                    fc:1d:ba:eb:88:bb:bd:65:b7:74:93:6d:7e:68:08:
                    23:f8:6a:e0:30:b1:0b:fe:78:af:f0:67:6b:99:87:
                    7e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9E:3A:BF:04:53:63:A1:28:0E:6C:E3:64:CF:76:44:01:DC:0F:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/683f5d66-eaff-3067-96b9-4bcce2c49736.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.203.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:da:ac:e9:e2:f2:f4:ba:6c:0e:19:42:30:fd:06:bb:1d:63:
         9d:7c:06:f4:30:b9:a6:de:d2:29:68:7d:1a:fb:c6:17:d6:2e:
         c5:43:37:38:01:ec:c5:fb:39:f2:06:fc:c1:dc:9c:26:a3:32:
         47:e4:81:7f:05:e7:14:d4:ef:31:a1:9c:aa:b6:71:d6:5e:bf:
         c2:c4:33:fd:74:48:e7:3d:65:08:28:5c:89:be:cc:6a:af:e4:
         04:31:4f:29:d2:b7:25:de:65:d0:8c:62:d8:63:5c:9a:2e:75:
         0b:2a:41:0d:13:8b:47:ab:70:92:9a:20:5b:03:d8:c7:02:4d:
         36:9e:ed:eb:02:fb:c7:ae:7d:cc:11:c3:1a:71:90:5d:02:2b:
         a5:b4:65:c8:d6:ce:d4:cb:4b:be:97:87:02:51:1e:11:86:40:
         0e:65:40:53:d7:d1:1f:b9:b6:29:08:49:ed:ca:fb:78:66:1a:
         1c:a9:33:b3:21:94:9e:5b:82:8c:04:db:65:53:38:c4:66:f6:
         31:51:6e:4f:42:5f:4d:47:b1:3e:9d:8c:2d:b9:db:29:94:db:
         36:13:61:1e:1d:20:65:6b:30:f1:37:70:c2:84:7b:76:a8:da:
         02:6a:c7:b2:45:35:56:96:43:01:06:1a:8b:a4:f7:9a:13:29:
         75:fc:e1:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZAYZhz00MaAifQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk
OWNjMzQxMjctNTc3ZS00ZDBjLWJmYmQtNDI5NDc4NTI2NDE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaaMI1X0TkAvCNjUY2JIVSMiyxPGl8NkzIpA
P3CS+h0qZlXQkb2yUMuM2yrofxEKniuVuEMMC33BVjsybanOrRu3O+eqqZyScCKb
n2lI9P1+bIJ/jZB6KY7lkgIOc6+4hftduTb4Uf+xQKOQAIwloPET0rbvObVR3Dis
/bRmM/UzEjSOTfaZDgDiIIzbL6LvAOKENlKbDnHavJEa9fI/JDH3+pE+3Ro/383b
tmC48Ve0MLc9D5yYJ3eJEBfM3UenCDplXlMKQmLjxsTnv2DD8CHusIsATZ3G8Pjr
1raOgwT8HbrriLu9Zbd0k21+aAgj+GrgMLEL/niv8GdrmYd+0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJGeOr8EU2OhKA5s42TPdkQB3A9AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNjgzZjVkNjYtZWFmZi0z
MDY3LTk2YjktNGJjY2UyYzQ5NzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ8s4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGTarOni8vS6bA4ZQjD9BrsdY518BvQwuabe0ilofRr7xhfWLsVDNzgB
7MX7OfIG/MHcnCajMkfkgX8F5xTU7zGhnKq2cdZev8LEM/10SOc9ZQgoXIm+zGqv
5AQxTynStyXeZdCMYthjXJoudQsqQQ0Ti0ercJKaIFsD2McCTTae7esC+8eufcwR
wxpxkF0CK6W0ZcjWztTLS76XhwJRHhGGQA5lQFPX0R+5tikISe3K+3hmGhypM7Mh
lJ5bgowE22VTOMRm9jFRbk9CX01HsT6djC252ymU2zYTYR4dIGVrMPE3cMKEe3ao
2gJqx7JFNVaWQwEGGouk95oTKXX84aM=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:47 2025 by rpki-client on console.sobornost.net