Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/a31730f9-097b-3034-9b42-5724baebff75.roa
File:                     a31730f9-097b-3034-9b42-5724baebff75.roa (raw, json)
Hash identifier:          coDPcTdCQDnLd10u22UauL0v9iSQnUROG04kbvQ3qBY=
Subject key identifier:   96:5B:78:C0:1D:8E:68:B2:74:E4:64:8C:0F:B3:D0:26:53:5A:23:6F
Certificate issuer:       /CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
Certificate serial:       010D0C9F432858495EEEEBCD66B05A51759ACCD8
Authority key identifier: DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/a31730f9-097b-3034-9b42-5724baebff75.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     14579
IP address blocks:        167.80.77.0/24 maxlen: 24
                          167.80.102.0/24 maxlen: 24
                          167.80.134.0/24 maxlen: 24
                          167.80.177.0/24 maxlen: 24
                          167.80.244.0/24 maxlen: 24
                          167.80.246.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:eb:cd:66:b0:5a:51:75:9a:cc:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=7f18d66e-0771-41ec-8106-073022221fcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e1:a8:ea:a3:e5:0c:de:6b:43:cd:10:05:09:
                    59:41:d7:fa:9b:2c:db:dc:73:9a:40:c7:ea:69:83:
                    88:b1:29:cd:50:df:06:13:7a:e4:38:70:a8:34:c7:
                    ff:20:57:91:4f:ca:3e:4d:38:f0:39:a1:4e:77:4e:
                    4f:ca:90:b1:3d:44:07:a6:db:64:d8:0c:61:a2:ed:
                    7c:b9:99:99:05:c5:d9:a2:6b:84:ba:d0:62:3e:17:
                    e1:29:80:b4:7a:52:6f:6b:2d:aa:b5:80:e8:aa:fe:
                    4e:00:45:69:e0:4c:35:28:6f:d7:6d:0a:be:2d:a0:
                    a5:3e:bd:34:f9:db:ca:6e:29:b1:bd:9f:3c:9c:ee:
                    21:d5:a5:18:69:bd:ea:ee:aa:af:23:fa:7c:70:7d:
                    f8:91:2c:01:4e:44:aa:fa:45:6c:31:e2:a7:e4:ba:
                    01:b7:ea:4e:fb:7d:5c:03:c6:c4:fa:76:ba:c3:cd:
                    33:0e:20:d0:f3:2a:cd:2d:45:39:87:a4:1a:3e:23:
                    67:d1:f7:45:00:1c:7f:0e:85:a6:5f:8d:d2:49:da:
                    bc:dc:d7:ed:33:89:af:c4:f5:a5:f1:5a:e0:fb:56:
                    61:f3:1b:88:b5:a9:0b:0b:1c:6f:ef:2f:dd:8d:1b:
                    52:0c:f2:9a:20:c7:ba:f0:b9:dd:f1:7d:db:18:a2:
                    dd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5B:78:C0:1D:8E:68:B2:74:E4:64:8C:0F:B3:D0:26:53:5A:23:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/a31730f9-097b-3034-9b42-5724baebff75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl

            X509v3 Authority Key Identifier:
                keyid:DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.80.77.0/24
                  167.80.102.0/24
                  167.80.134.0/24
                  167.80.177.0/24
                  167.80.244.0/24
                  167.80.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:0e:79:71:b2:09:28:44:31:07:df:10:e3:67:7f:fe:f9:dc:
         38:c8:1c:63:69:78:93:90:6b:f7:a2:50:ac:89:8d:c7:c2:83:
         ca:a7:cc:30:59:8a:6c:24:d8:ee:df:25:66:cf:35:97:2c:0f:
         34:ce:10:82:88:fb:9e:8a:7a:7a:20:76:c2:7e:cb:9e:39:a8:
         85:93:df:f7:ff:6b:e0:be:6f:f6:1b:02:7a:a5:00:d2:5a:fc:
         78:24:39:1b:5f:e6:43:b8:88:a8:95:58:bf:4f:59:1c:a4:76:
         13:fc:d7:45:c7:1b:82:1e:8d:21:3b:6e:29:d0:b6:17:4d:7f:
         74:c6:67:64:aa:7e:fe:73:ce:28:fe:a5:93:fa:c5:79:94:63:
         73:ad:be:09:21:08:f8:53:41:ad:32:46:13:1c:11:93:88:32:
         b6:f9:dc:08:3e:29:98:7d:6f:66:9d:82:6d:69:68:89:5b:9e:
         40:0a:c6:2f:e9:92:ca:f5:47:4b:17:af:fa:ad:64:56:24:c7:
         45:0f:a4:f2:5f:45:75:1a:7e:2f:f3:f5:1f:c2:b7:5c:1e:71:
         15:01:db:ab:13:02:1b:60:23:bb:80:77:cf:eb:b0:73:55:d6:
         ca:8d:ef:51:27:11:df:b1:4f:e4:33:6a:4a:04:d9:1c:14:e5:
         72:14:71:91
-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEle7uvNZrBaUXWazNgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYzYzU1NGItZThjZC00MzA2LTkxZTAtNGEyNzUyNjlj
Y2JiMB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk
N2YxOGQ2NmUtMDc3MS00MWVjLTgxMDYtMDczMDIyMjIxZmNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+Go6qPlDN5rQ80QBQlZQdf6myzb3HOaQMfq
aYOIsSnNUN8GE3rkOHCoNMf/IFeRT8o+TTjwOaFOd05PypCxPUQHpttk2Axhou18
uZmZBcXZomuEutBiPhfhKYC0elJvay2qtYDoqv5OAEVp4Ew1KG/XbQq+LaClPr00
+dvKbimxvZ88nO4h1aUYab3q7qqvI/p8cH34kSwBTkSq+kVsMeKn5LoBt+pO+31c
A8bE+na6w80zDiDQ8yrNLUU5h6QaPiNn0fdFABx/DoWmX43SSdq83NftM4mvxPWl
8Vrg+1Zh8xuItakLCxxv7y/djRtSDPKaIMe68Lnd8X3bGKLd/wIDAQABo4IDczCC
A28wHQYDVR0OBBYEFJZbeMAdjmiydORkjA+z0CZTWiNvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZjNj
NTU0Yi1lOGNkLTQzMDYtOTFlMC00YTI3NTI2OWNjYmIvYTMxNzMwZjktMDk3Yi0z
MDM0LTliNDItNTcyNGJhZWJmZjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGYzYzU1NGItZThjZC00MzA2LTkx
ZTAtNGEyNzUyNjljY2JiLzRmM2M1NTRiLWU4Y2QtNDMwNi05MWUwLTRhMjc1MjY5
Y2NiYi5jcmwwHwYDVR0jBBgwFoAU3wM28+iu8MD4VP4VO4mOxBvO6vwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80ZjNjNTU0Yi1lOGNkLTQzMDYtOTFlMC00YTI3
NTI2OWNjYmIuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAp1BNAwQA
p1BmAwQAp1CGAwQAp1CxAwQAp1D0AwQAp1D2MFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBALkOeXGyCShEMQff
EONnf/753DjIHGNpeJOQa/eiUKyJjcfCg8qnzDBZimwk2O7fJWbPNZcsDzTOEIKI
+56KenogdsJ+y545qIWT3/f/a+C+b/YbAnqlANJa/HgkORtf5kO4iKiVWL9PWRyk
dhP810XHG4IejSE7binQthdNf3TGZ2Sqfv5zzij+pZP6xXmUY3OtvgkhCPhTQa0y
RhMcEZOIMrb53Ag+KZh9b2adgm1paIlbnkAKxi/pksr1R0sXr/qtZFYkx0UPpPJf
RXUafi/z9R/Ct1wecRUB26sTAhtgI7uAd8/rsHNV1sqN71EnEd+xT+QzakoE2RwU
5XIUcZE=
-----END CERTIFICATE-----
Generated at Tue Apr 15 05:20:19 2025 by rpki-client on console.sobornost.net