Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee/34ef6e12-2d99-322e-b6b9-72a8c16d248a.roa
File:                     34ef6e12-2d99-322e-b6b9-72a8c16d248a.roa (raw, json)
Hash identifier:          jo2FKf0riZniQXbvzAeeAgVRlCUV1HmrEDpm+dA1Xn0=
Subject key identifier:   BF:9B:06:86:49:F6:87:CC:4D:E4:23:BE:EC:9E:DE:80:70:A4:E6:5D
Certificate issuer:       /CN=06adc51b-95f4-44e9-bf6d-3f9a3950feee
Certificate serial:       010D0C9F43285849806F26B7D35DFEA7BA077D00
Authority key identifier: D0:04:FE:E2:0B:C8:C6:C3:FE:2B:84:25:1C:FF:A8:B3:DA:58:60:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee/34ef6e12-2d99-322e-b6b9-72a8c16d248a.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     40690
IP address blocks:        162.251.207.0/24 maxlen: 24
                          2602:fa25::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:26:b7:d3:5d:fe:a7:ba:07:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06adc51b-95f4-44e9-bf6d-3f9a3950feee
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=85ad963d-3aaa-4231-9737-32df870c9bb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e2:d2:1d:cc:18:6a:db:d5:18:17:5a:e6:63:
                    d9:ed:04:b5:44:f2:45:4f:a7:b8:1e:e5:ab:85:7c:
                    97:a6:91:1c:a7:22:8f:df:e9:9d:b7:38:37:ad:22:
                    6a:b4:1b:59:c3:9a:e8:5a:9b:1b:d0:71:12:3c:83:
                    63:ce:dd:55:77:00:89:66:5a:de:25:82:91:ea:d0:
                    61:56:f4:9a:52:6a:a4:ea:f1:1c:32:d4:47:c5:22:
                    05:8f:a3:a3:59:60:57:e9:48:b4:b0:65:d7:0b:b4:
                    c0:b0:b1:82:22:3e:02:9e:3c:ad:07:2b:28:8b:89:
                    5b:b0:be:e8:88:fb:05:1c:84:c0:c0:b0:41:dc:9f:
                    64:b1:ce:79:ed:09:cc:33:1c:1b:5f:d4:0c:f0:a8:
                    fe:c0:41:fe:15:9c:dd:4b:35:1f:73:58:f8:5f:d1:
                    5e:a9:14:ca:3d:63:5f:f3:e2:2b:37:fe:f6:96:09:
                    75:0e:de:e7:8a:fa:90:a4:0f:03:1f:f4:f8:2a:8e:
                    dc:1b:24:2e:3e:01:f1:a5:ba:0b:e3:e4:d1:53:2a:
                    d1:34:f6:db:e7:6b:6a:0d:75:73:c9:3e:e0:a1:2e:
                    cc:e4:c1:e7:0d:1d:44:25:6f:9a:c9:ee:82:f6:ee:
                    f2:2f:9f:53:55:b1:de:1a:59:82:c7:ad:54:df:41:
                    8f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9B:06:86:49:F6:87:CC:4D:E4:23:BE:EC:9E:DE:80:70:A4:E6:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee/34ef6e12-2d99-322e-b6b9-72a8c16d248a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee/06adc51b-95f4-44e9-bf6d-3f9a3950feee.crl

            X509v3 Authority Key Identifier:
                keyid:D0:04:FE:E2:0B:C8:C6:C3:FE:2B:84:25:1C:FF:A8:B3:DA:58:60:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.251.207.0/24
                IPv6:
                  2602:fa25::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:c6:bb:b9:24:da:90:0b:8e:a3:7d:91:ec:34:7c:b1:23:de:
         8c:c7:b5:5f:90:48:52:18:74:61:bd:db:98:c4:fe:08:61:9f:
         0f:1e:06:14:2a:3e:a3:f4:8a:9a:8a:9d:3a:88:04:ae:70:9e:
         d6:03:c2:48:3c:4e:0f:f2:a6:00:a2:4f:5b:f7:63:1a:81:0a:
         c6:da:00:e9:8d:4a:96:60:c6:d2:c6:e1:c2:08:9f:8a:7e:97:
         8b:95:56:39:c4:71:63:03:9f:f9:94:6f:e0:1d:24:db:b4:ff:
         83:09:68:c0:42:5a:46:9a:ba:a7:d5:a8:f4:35:0e:58:ad:0b:
         57:95:15:17:09:0f:f5:c5:47:76:a9:ea:ed:39:37:66:38:89:
         4d:0e:4c:03:8c:7a:ac:57:7d:05:cc:d3:eb:52:3e:69:b5:b2:
         8f:96:53:44:55:35:fc:52:f6:c0:20:2a:00:a8:4b:c1:1b:e3:
         f9:ab:76:7a:28:26:61:43:c6:37:4c:96:78:79:64:ed:4d:02:
         32:68:65:53:27:48:90:fa:b2:0e:37:26:4b:99:7b:76:51:2a:
         f3:4e:ea:ca:a0:c8:44:07:ba:c9:94:48:5a:5f:9c:c6:bb:55:
         dc:00:a3:3a:9b:bb:07:44:29:25:78:3f:78:12:47:39:5c:f4:
         e8:4c:14:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:04 2025 by rpki-client on console.sobornost.net