Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/eaba529a-e760-30c1-9e8a-47ce5d6fbc4d.roa
File:                     eaba529a-e760-30c1-9e8a-47ce5d6fbc4d.roa (raw, json)
Hash identifier:          2oJlpSBDaVnvTS+F4OfDnWrRd7ng/TIK/775wpWmQlg=
Subject key identifier:   49:18:5F:F2:C9:73:E0:1D:19:97:93:DF:DC:B9:D7:EB:9F:2C:DF:8F
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584961B99A5EDFEED49367C99680
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/eaba529a-e760-30c1-9e8a-47ce5d6fbc4d.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     11105
IP address blocks:        206.12.17.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:9a:5e:df:ee:d4:93:67:c9:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=6d232c5f-6aaa-400f-b6f8-7b9c3a28115a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:00:a7:94:f3:ec:6e:3d:82:20:8a:e8:3a:f3:
                    c4:f5:9e:cf:8e:aa:2c:09:c4:ff:d8:01:4a:33:0a:
                    e7:7f:b6:b5:53:f9:55:ea:9c:e7:b5:78:74:d7:a8:
                    d1:14:80:f1:50:53:59:e4:7c:a7:c7:75:ca:e7:e8:
                    45:75:fe:fd:1a:35:6e:a0:a0:e7:77:c4:d2:b9:8c:
                    a2:c1:11:f5:ae:9a:90:6b:dc:f1:ec:c5:4d:b6:b0:
                    5b:d5:a0:c9:25:e5:9e:9c:8c:61:fa:b0:ce:79:c8:
                    f5:a4:1c:02:e9:9a:8e:61:20:57:63:1d:c8:09:20:
                    a6:db:3f:af:18:0f:cf:6e:e0:28:54:d3:1a:e3:d1:
                    3f:63:68:d5:3e:b1:d9:74:e5:66:06:12:a3:98:31:
                    bb:22:2a:88:5d:26:dd:5c:4c:46:d8:f2:f2:53:f1:
                    a8:46:f1:26:66:c7:91:40:35:36:2d:de:94:87:1d:
                    87:c9:da:6e:e4:e6:46:07:ae:8d:36:18:17:80:eb:
                    5b:03:bd:4e:fd:09:3f:54:2b:6d:76:a3:fa:85:6f:
                    24:76:74:27:17:69:c3:7e:4a:4b:5f:b7:95:02:cb:
                    90:3f:f6:61:41:77:56:ec:26:2c:dd:9c:00:b2:de:
                    a5:41:22:72:58:fa:b9:48:d5:98:09:12:10:b5:f5:
                    0b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:18:5F:F2:C9:73:E0:1D:19:97:93:DF:DC:B9:D7:EB:9F:2C:DF:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/eaba529a-e760-30c1-9e8a-47ce5d6fbc4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:c5:7e:a2:6b:d8:a1:67:14:da:56:61:26:89:88:3e:57:8b:
         05:dc:19:ce:b8:36:9d:b9:2d:79:31:f3:b2:b1:48:73:aa:15:
         14:eb:3a:9c:20:05:0d:52:50:69:ad:5e:b0:65:68:10:75:94:
         5d:0f:31:93:bc:f7:36:22:d7:e9:66:f0:e6:f9:49:21:23:65:
         cd:b7:67:2d:60:2a:ad:21:31:62:6e:29:32:1b:e6:13:75:f3:
         1d:3f:43:89:c0:d0:02:13:55:bd:8c:bb:f1:76:56:ee:df:ee:
         e5:f2:d3:5e:32:43:0a:b3:ef:a1:2d:c0:77:e5:40:c1:8a:4a:
         2f:b7:c0:80:43:e5:a2:c8:cc:10:e3:a2:41:5a:23:42:e8:17:
         22:b0:18:90:04:ce:78:bc:8a:b5:a1:8b:37:bc:85:63:9a:8c:
         62:22:d2:78:e7:7c:41:2b:43:25:c6:67:47:b4:f6:5f:43:f5:
         41:e1:1b:bc:cd:c9:5b:d9:59:1d:29:b4:bf:28:63:2e:4a:67:
         fa:31:6d:40:4f:ac:fd:37:e7:f8:16:c4:f2:f2:32:08:2c:ad:
         71:aa:14:57:e9:5d:b9:bc:e4:be:2a:6a:68:bd:f8:1e:a4:0b:
         9b:40:e1:02:dd:a4:9d:4a:4f:6c:8e:cf:1b:48:46:d2:5b:f8:
         74:02:75:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:04 2025 by rpki-client on console.sobornost.net