Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/cb22155d-db2e-393b-81cf-71d00304cacb.roa
File:                     cb22155d-db2e-393b-81cf-71d00304cacb.roa (raw, json)
Hash identifier:          d8LccXF/TGakm+uyGSQq5HI1J4RpvRi1/5hcibktRH8=
Subject key identifier:   4B:62:9F:E1:54:93:40:01:C1:7E:9A:5C:98:76:A1:5A:68:1B:92:74
Certificate issuer:       /CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
Certificate serial:       010D0C9F43285849071B7135AD9716A03BEC8060
Authority key identifier: AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/cb22155d-db2e-393b-81cf-71d00304cacb.roa
Signing time:             Fri 28 Feb 2025 01:59:47 +0000
ROA not before:           Fri 28 Feb 2025 01:59:47 +0000
ROA not after:            Thu 29 May 2025 00:59:47 +0000
asID:                     13451
IP address blocks:        172.86.128.0/20 maxlen: 20
                          208.90.160.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1b:71:35:ad:97:16:a0:3b:ec:80:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
        Validity
            Not Before: Feb 28 01:59:47 2025 GMT
            Not After : May 29 00:59:47 2025 GMT
        Subject: CN=9a166a61-5eb2-49c9-b9f3-b4b45c2e8d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9b:43:ca:f5:f2:a1:b0:a7:cb:21:b2:e2:6b:
                    c0:7f:85:e5:28:f4:18:f3:fc:e8:a6:19:88:76:8f:
                    ae:4a:86:e9:74:ae:53:91:26:72:cd:1a:74:bd:94:
                    e5:12:2e:ac:a8:5c:65:37:51:4e:ad:d9:5a:84:85:
                    f6:8f:e5:ca:fe:5e:87:be:2c:3e:e1:c5:a4:20:9e:
                    dd:58:5a:38:e9:7e:ec:c2:4c:4b:71:56:38:dc:d7:
                    dc:ed:2b:2d:5d:8e:b1:4f:68:1f:a4:b7:c1:3b:3e:
                    1b:da:10:a3:78:86:bb:e3:41:93:c2:3d:6c:d6:94:
                    ae:ab:41:c0:96:1c:fe:3b:32:e2:6d:94:3d:3c:b4:
                    17:ff:a6:5a:f2:ce:8c:6e:0a:65:f4:c8:d8:22:74:
                    67:83:07:d7:64:18:8f:73:e2:0e:56:58:3a:8d:be:
                    83:fd:e4:3d:89:cf:cd:34:13:da:1c:47:93:5f:64:
                    26:aa:08:7f:fd:25:fd:52:bb:80:f0:35:cc:50:60:
                    e8:92:98:ab:4f:c3:b3:58:42:62:4b:30:83:88:e6:
                    cb:1f:d0:7c:cd:cf:2f:7d:a8:d1:7f:96:83:28:d2:
                    3b:4d:73:19:05:3e:26:0d:51:56:ba:5e:61:03:02:
                    a4:22:32:cc:0c:71:3a:e2:55:dc:4e:67:11:eb:42:
                    80:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:62:9F:E1:54:93:40:01:C1:7E:9A:5C:98:76:A1:5A:68:1B:92:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/cb22155d-db2e-393b-81cf-71d00304cacb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl

            X509v3 Authority Key Identifier:
                keyid:AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.86.128.0/20
                  208.90.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:9c:73:eb:9b:ab:25:b5:25:c9:b0:50:e9:2a:8c:4a:cf:6b:
         16:ef:ad:db:50:dc:ef:94:6b:fc:7f:f9:28:ae:37:f4:1f:a0:
         13:d8:17:75:c3:61:1e:9b:e3:5a:c8:21:01:f5:88:b2:56:48:
         6e:6f:59:1d:39:38:f9:96:50:66:cf:1e:c5:0b:36:6b:ba:e8:
         32:9a:87:53:1b:8f:67:4e:5d:55:c1:73:dc:d7:25:5d:25:83:
         6c:e2:3d:56:2a:29:b3:f1:78:74:c3:08:74:84:87:35:1e:af:
         be:5f:d6:8a:0e:ad:49:21:27:41:18:b9:b2:f9:60:94:53:47:
         1b:99:ae:e2:43:db:0a:ae:7e:53:63:6b:d6:dc:e4:c9:55:f3:
         a0:c7:75:45:e0:d6:a2:2a:93:ea:ee:7f:8f:13:36:66:c7:f5:
         33:97:c0:d6:92:58:69:3c:bf:6c:38:4e:b3:fd:bc:b6:d6:75:
         50:06:c0:9e:01:8e:a8:d1:c2:c3:07:c2:c0:06:a9:d1:60:13:
         4c:42:e1:0d:e2:30:dd:1b:99:03:50:d2:bb:9d:fa:a9:06:75:
         df:2c:c3:00:57:93:87:1e:32:1d:d7:16:89:09:8c:81:3f:b3:
         9a:ac:c8:b7:9f:97:89:b2:04:42:19:32:d4:63:ba:0c:c2:59:
         6b:62:f8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:25 2025 by rpki-client on console.sobornost.net