Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/de7f9f2e-7162-35ee-8081-543d7779c9b2.roa
File:                     de7f9f2e-7162-35ee-8081-543d7779c9b2.roa (raw, json)
Hash identifier:          80ixM0IaDEvUO3QliuUjtjvAv1vO9tU9Af9/q2SPyrU=
Subject key identifier:   46:FF:07:2E:3E:B8:F1:62:EA:0F:0A:C7:75:2A:59:CD:BC:20:D7:58
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584961B999809D44B5E3E8F28700
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/de7f9f2e-7162-35ee-8081-543d7779c9b2.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     393249
IP address blocks:        142.231.64.0/19 maxlen: 19

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:99:80:9d:44:b5:e3:e8:f2:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=1cbae328-9753-497e-bace-a6805014d87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:40:7b:2f:e9:73:2d:6b:1e:d3:75:8f:0d:3b:
                    1c:03:c0:53:79:1d:4a:d0:12:25:c3:45:32:b2:b2:
                    d7:24:58:fd:f3:7e:a9:c5:76:e2:78:ec:f0:40:7d:
                    29:54:67:00:16:da:e7:1d:76:eb:6a:84:6c:14:66:
                    91:82:ce:65:2c:9c:4b:7a:40:d3:43:2a:1d:00:fe:
                    3b:4c:60:b6:fd:b0:cf:74:c2:66:b5:d6:b0:51:4e:
                    eb:6f:11:0b:93:2c:20:41:b8:79:ae:57:25:4a:f8:
                    d7:83:09:8f:44:85:6e:ff:b7:19:f0:ab:c2:e8:ac:
                    d5:c9:05:a3:ae:07:ed:ee:88:a4:ab:09:76:e2:cc:
                    7b:9d:46:d8:a0:4e:c0:c2:f2:67:14:63:e6:32:10:
                    3c:be:09:57:d7:02:0d:57:7f:6e:fb:d1:49:96:9b:
                    fc:d4:db:7c:d3:d5:57:c4:0b:6a:b6:e1:24:90:da:
                    cf:27:6d:eb:ec:8f:f8:7f:09:d7:c5:8b:40:d0:bd:
                    00:1e:a6:e6:fa:0f:d0:a0:c7:a3:c9:65:82:4f:5a:
                    32:f3:a8:94:8a:0b:bc:88:a1:ec:c2:af:7d:7f:22:
                    10:ce:31:34:34:71:d7:55:95:64:11:26:47:8e:51:
                    93:01:80:77:a4:e6:f0:c1:aa:be:58:b7:bc:ca:df:
                    d4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FF:07:2E:3E:B8:F1:62:EA:0F:0A:C7:75:2A:59:CD:BC:20:D7:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/de7f9f2e-7162-35ee-8081-543d7779c9b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.231.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:6a:ae:6a:2d:ae:74:91:5c:46:06:f2:79:13:36:83:dc:2b:
         ed:64:98:6d:54:f0:a5:1d:62:fe:b8:4d:b8:03:cd:1a:7c:1b:
         c0:ea:82:95:d4:e6:8c:d8:49:1c:82:92:a4:4c:6a:e6:99:f9:
         ea:99:4f:07:63:56:e7:32:5c:44:e7:53:1c:76:a5:7d:a5:7f:
         55:6e:92:7d:22:7a:53:4b:d0:43:30:7d:8f:ca:33:cb:3d:ad:
         78:8f:6c:b0:08:e5:96:c6:b6:e7:a3:36:6b:5f:07:f7:79:7f:
         55:1d:00:e3:22:70:47:61:63:c1:fa:11:24:ce:9a:26:a2:bf:
         1e:fc:51:eb:d5:8b:da:97:aa:8f:b8:3d:22:7d:a8:a5:56:c4:
         97:e3:a0:08:59:90:1c:f6:0e:2b:54:24:02:e9:58:27:41:6b:
         8f:c2:b8:a4:7d:b9:96:0f:bd:5c:9b:76:9f:bc:d5:9b:0b:25:
         97:e9:a1:93:4f:c3:95:d1:83:a1:f1:ec:3d:a8:bb:0d:76:a1:
         49:0b:d3:2f:68:a4:46:d7:d7:ef:16:c5:6b:60:55:48:22:8d:
         5c:9e:7f:95:c8:e3:bb:93:2f:90:7b:13:99:2c:f3:53:ca:38:
         43:a1:37:d7:a2:cb:46:80:3e:0d:a0:2c:39:e6:14:ec:f0:96:
         ad:e9:8b:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZmAnUS14+jyhwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk
MWNiYWUzMjgtOTc1My00OTdlLWJhY2UtYTY4MDUwMTRkODdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUB7L+lzLWse03WPDTscA8BTeR1K0BIlw0Uy
srLXJFj9836pxXbieOzwQH0pVGcAFtrnHXbraoRsFGaRgs5lLJxLekDTQyodAP47
TGC2/bDPdMJmtdawUU7rbxELkywgQbh5rlclSvjXgwmPRIVu/7cZ8KvC6KzVyQWj
rgft7oikqwl24sx7nUbYoE7AwvJnFGPmMhA8vglX1wINV39u+9FJlpv81Nt809VX
xAtqtuEkkNrPJ23r7I/4fwnXxYtA0L0AHqbm+g/QoMejyWWCT1oy86iUigu8iKHs
wq99fyIQzjE0NHHXVZVkESZHjlGTAYB3pObwwaq+WLe8yt/UfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEb/By4+uPFi6g8Kx3UqWc28INdYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvZGU3ZjlmMmUtNzE2Mi0z
NWVlLTgwODEtNTQzZDc3NzljOWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjudAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGtqrmotrnSRXEYG8nkTNoPcK+1kmG1U8KUdYv64TbgDzRp8G8DqgpXU
5ozYSRyCkqRMauaZ+eqZTwdjVucyXETnUxx2pX2lf1Vukn0ielNL0EMwfY/KM8s9
rXiPbLAI5ZbGtuejNmtfB/d5f1UdAOMicEdhY8H6ESTOmiaivx78UevVi9qXqo+4
PSJ9qKVWxJfjoAhZkBz2DitUJALpWCdBa4/CuKR9uZYPvVybdp+81ZsLJZfpoZNP
w5XRg6Hx7D2ouw12oUkL0y9opEbX1+8WxWtgVUgijVyef5XI47uTL5B7E5ks81PK
OEOhN9eiy0aAPg2gLDnmFOzwlq3pi+g=
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:04 2025 by rpki-client on console.sobornost.net