Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/2610a058-f412-3ea2-9d2c-e62411e2b78b.roa
File:                     2610a058-f412-3ea2-9d2c-e62411e2b78b.roa (raw, json)
Hash identifier:          6ZPQrpInNFxklBQezv3Dv8wW71ve7gyV6AP39jKlq1c=
Subject key identifier:   E0:F2:E2:92:85:BA:EB:93:2A:7C:0C:EC:A4:50:90:3C:72:BE:96:AE
Certificate issuer:       /CN=fccf3604-03c5-4074-aed5-6cf7161bf156
Certificate serial:       010D0C9F432858496FAF12A1268F2929EF1F5D80
Authority key identifier: BB:3A:1F:F8:92:62:5B:8E:16:42:C4:97:38:65:83:18:83:24:00:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/2610a058-f412-3ea2-9d2c-e62411e2b78b.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     399250
IP address blocks:        104.224.1.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:af:12:a1:26:8f:29:29:ef:1f:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fccf3604-03c5-4074-aed5-6cf7161bf156
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=5f8dad76-6a5c-46be-a382-40bf7819253a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:06:4f:22:df:5b:05:59:5f:f2:e9:78:6a:5b:
                    c2:2f:a3:16:ac:d0:b9:c7:37:d9:59:33:af:cc:03:
                    54:05:59:4a:76:9b:ca:d5:f3:c6:c3:41:2f:96:64:
                    c3:d7:50:44:00:c6:5a:62:4f:82:a0:d9:c3:29:23:
                    0a:e2:ad:98:e3:7f:db:29:09:4f:df:43:ad:85:d6:
                    12:c4:f4:91:93:45:2c:72:c5:9d:3e:84:05:ed:e5:
                    0e:6d:48:23:f1:50:d6:a5:da:07:ec:85:5e:76:e4:
                    53:0b:79:61:94:cc:56:b2:07:dd:d3:54:29:1b:cd:
                    21:55:50:a1:1f:eb:2d:1b:4b:6c:c3:f5:02:c8:b0:
                    df:dc:e0:2d:9e:5a:66:96:34:80:f6:0a:b2:16:d3:
                    93:a0:86:0c:e6:b2:0a:8f:ce:f2:d3:bc:ea:2a:53:
                    cc:0a:7b:e2:16:04:66:4a:4a:ed:46:2d:08:02:ff:
                    ea:9a:87:dd:52:a9:9f:c3:a0:e1:78:d5:9f:8f:7c:
                    b3:08:34:8b:7d:57:f4:95:7d:49:a6:87:7c:a6:aa:
                    b7:7d:1b:a2:fc:e1:ac:2b:f4:75:1c:0e:08:71:68:
                    d4:13:d9:a3:0d:df:39:65:f0:1b:db:13:ea:01:3a:
                    bd:5f:3a:52:5d:74:40:91:94:e8:35:ba:11:3a:b0:
                    6a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F2:E2:92:85:BA:EB:93:2A:7C:0C:EC:A4:50:90:3C:72:BE:96:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/2610a058-f412-3ea2-9d2c-e62411e2b78b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/fccf3604-03c5-4074-aed5-6cf7161bf156.crl

            X509v3 Authority Key Identifier:
                keyid:BB:3A:1F:F8:92:62:5B:8E:16:42:C4:97:38:65:83:18:83:24:00:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:c6:2b:54:d1:91:a1:61:51:5e:d9:a0:ef:47:bf:9f:4c:57:
         8a:74:d1:49:be:d0:72:39:fb:06:11:09:b1:d0:b7:d9:c3:f3:
         9e:13:00:9b:96:3a:60:27:78:74:6a:76:44:8d:9a:f0:c0:9a:
         98:b7:6a:e7:42:fc:c4:98:d6:08:de:8a:d2:60:71:0c:2e:a9:
         5e:ac:49:da:55:20:75:e4:d5:0a:6c:fd:67:c9:08:08:e2:ef:
         ab:5a:4a:c9:7b:03:6d:41:50:16:8e:8f:1c:c0:78:45:ac:38:
         89:ba:5e:2a:02:f2:bd:05:e1:cf:74:16:c9:93:b3:54:f3:ce:
         fc:88:7a:df:54:c2:86:cf:04:72:f8:ec:ad:e5:81:bf:e2:2c:
         cf:ed:fc:4a:8d:50:8d:79:3f:c7:f8:79:8c:03:55:a9:ce:81:
         2d:69:dd:5d:e7:47:51:05:11:96:79:f5:fe:06:8c:a8:07:c1:
         5c:e0:66:6c:a2:e9:cb:4f:84:33:29:3b:61:23:fc:18:07:c2:
         e3:04:8f:10:15:b5:a3:cf:a3:d6:97:8e:83:a7:3a:7e:14:a0:
         69:e7:11:5a:84:03:db:bd:6f:99:9e:18:7a:ea:d5:7d:36:6c:
         35:de:0e:ef:68:27:38:b7:f2:b1:77:eb:13:4d:a8:36:2c:bb:
         df:b6:0c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:59 2025 by rpki-client on console.sobornost.net