Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/40cb8bf8-b7f4-317f-8740-a10807e3806b.roa
File:                     40cb8bf8-b7f4-317f-8740-a10807e3806b.roa (raw, json)
Hash identifier:          2vyGytEyVV93qiFFAFS36t4mPxNQBP50G9ZqEYr5P6E=
Subject key identifier:   7B:DE:5F:DA:E4:A4:84:6B:E9:FF:C0:6E:83:4F:6D:8C:AC:B2:F9:8C
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F432858496A19A6D7FA71D6237D942700
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/40cb8bf8-b7f4-317f-8740-a10807e3806b.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     14618
IP address blocks:        169.150.104.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:a6:d7:fa:71:d6:23:7d:94:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=1d4d5ac9-bac1-4345-b2ea-3cfe3588f7ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:94:c6:91:0f:35:6b:8b:90:d8:64:62:88:31:
                    23:5f:f1:f3:88:83:d7:07:99:63:7a:8b:16:30:cf:
                    f9:68:45:45:4e:e8:18:6b:92:df:ad:d1:59:9e:74:
                    58:c8:d1:95:c3:1d:8a:14:0c:52:ea:34:e9:e1:a5:
                    b9:8a:b6:b9:38:b1:c2:9f:2b:ff:6a:09:ed:e9:43:
                    53:ac:c2:77:99:bc:ea:27:10:d7:35:c2:24:d3:02:
                    5f:e9:d4:d7:40:80:71:50:76:f8:00:10:35:7c:ee:
                    df:f8:3c:35:e6:12:c5:d9:96:e8:78:7b:11:37:6c:
                    a1:83:d2:93:70:f7:54:07:6e:67:eb:e6:9f:c5:91:
                    21:5a:1d:17:2c:05:d7:9a:d8:3b:41:f9:f2:05:e0:
                    95:aa:01:b0:54:b3:f7:f2:8d:99:18:8a:ae:45:22:
                    40:b2:95:6d:e8:9e:ad:0a:ff:a8:7e:48:df:39:39:
                    c9:2d:09:ff:d9:4e:1a:23:2d:c5:60:3e:7d:00:63:
                    69:d1:50:e0:52:75:68:24:73:fc:9a:78:31:3d:3f:
                    5d:78:cc:0c:60:bf:b5:26:42:6b:7a:1d:82:a5:cc:
                    74:84:67:9d:13:aa:5a:a2:15:70:3a:2e:87:4f:bb:
                    5e:74:05:8b:4a:8c:76:9d:50:8c:de:b7:65:fc:1d:
                    9a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DE:5F:DA:E4:A4:84:6B:E9:FF:C0:6E:83:4F:6D:8C:AC:B2:F9:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/40cb8bf8-b7f4-317f-8740-a10807e3806b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.150.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:94:f4:ba:c2:dd:5f:ea:61:09:59:cf:9a:aa:6e:5c:59:dc:
         57:fd:a1:21:8f:82:9a:0f:90:72:6f:d7:42:c6:1c:5b:e1:67:
         d1:f3:a3:bd:be:c3:0e:c1:4e:94:aa:20:dc:39:a7:43:bc:40:
         69:1d:45:4d:41:3e:c9:53:f1:57:2d:7a:45:f5:99:7a:64:ca:
         bf:bc:1f:a5:50:79:b4:c7:04:7b:72:ac:e3:29:d5:f7:59:02:
         c0:71:57:ce:72:eb:c3:1b:9e:28:39:50:8c:2d:77:8d:f5:7e:
         80:d2:e8:52:75:0c:d1:c2:72:0a:5a:f1:e7:c7:04:54:c4:b0:
         97:39:0b:30:65:8f:9a:82:6e:4e:dc:e8:0a:0b:f6:bc:2e:85:
         b1:87:2e:3a:fa:e8:d4:51:87:fe:7a:3d:11:c7:40:4e:10:d6:
         47:3d:68:d0:36:b5:8f:c1:ac:40:d4:08:19:7a:8f:0b:e5:29:
         a2:7d:77:9b:f8:01:7c:43:15:ca:db:f6:e0:9a:ac:4d:48:11:
         ac:f1:12:b3:66:19:39:1a:bb:22:b0:b0:49:cf:76:06:62:7e:
         fe:b0:82:b1:f9:1b:1a:ac:1e:40:68:b7:89:45:21:48:94:2f:
         20:c6:21:49:81:7a:ec:3b:65:f5:26:b0:f2:69:d0:b5:bc:6e:
         20:ad:d5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:27:26 2025 by rpki-client on console.sobornost.net