Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/1f0f7151-1a17-3c20-b5f6-6c21ad2a655a.roa
File:                     1f0f7151-1a17-3c20-b5f6-6c21ad2a655a.roa (raw, json)
Hash identifier:          hFqoYzHb+mQTDg/l9ZtO5OMhAFvBT08+tndJmPZGPE0=
Subject key identifier:   4F:FE:58:59:D5:BE:DC:A2:2F:3A:4E:2C:47:CC:F4:54:9D:89:67:A4
Certificate issuer:       /CN=949c3388-1f02-441c-9195-5c40d8fd63d2
Certificate serial:       010D0C9F43285849711432C7747570399266DFC0
Authority key identifier: 68:2C:71:CE:90:9C:5F:87:15:0C:2C:E6:93:67:15:C7:A9:AF:10:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/1f0f7151-1a17-3c20-b5f6-6c21ad2a655a.roa
Signing time:             Mon 07 Apr 2025 01:00:47 +0000
ROA not before:           Mon 07 Apr 2025 01:00:47 +0000
ROA not after:            Sun 06 Jul 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        69.164.100.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:71:14:32:c7:74:75:70:39:92:66:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=949c3388-1f02-441c-9195-5c40d8fd63d2
        Validity
            Not Before: Apr  7 01:00:47 2025 GMT
            Not After : Jul  6 01:00:47 2025 GMT
        Subject: CN=77d44f19-95f7-4d79-9fff-ae7a0d3653e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8b:bc:ae:7d:8c:41:74:28:01:57:54:e5:5b:
                    58:6c:88:c2:10:ec:cc:fb:03:b5:f2:d3:c7:1e:88:
                    88:a2:29:06:85:3e:81:84:20:41:54:7d:89:da:f7:
                    3e:5c:f9:38:4d:12:f1:e4:6e:05:be:90:47:2c:3a:
                    0b:06:b6:30:0f:b6:c3:96:96:f3:ef:c1:9e:ff:23:
                    b8:c5:51:df:9a:5f:da:d6:2b:b9:8c:34:d5:2f:ac:
                    99:8a:85:68:d2:8d:f2:fd:ca:c5:7e:63:dd:0a:0e:
                    99:2c:43:d3:53:c6:c1:c2:c3:dd:a7:5a:f9:f4:e5:
                    0f:9b:33:92:75:9c:ab:98:ca:2a:13:b5:bf:11:71:
                    d9:c8:0c:de:f0:3e:cb:31:e3:0b:2d:4a:a3:28:59:
                    2d:53:3d:3f:f6:ce:dd:af:92:ae:6e:ae:6a:6b:b5:
                    5a:06:eb:9a:9b:03:dc:72:b4:08:aa:ac:86:61:cb:
                    af:65:96:87:74:eb:9c:1d:2d:fa:bd:f1:71:ef:e5:
                    a3:97:9b:3f:2e:11:12:13:37:f3:a7:13:91:78:46:
                    ec:8f:ed:75:07:a0:1d:34:02:b5:3b:4f:18:0a:8c:
                    8f:f4:9c:64:90:93:4c:74:60:c1:4d:13:b7:e2:ab:
                    d8:91:d0:e9:dd:b7:8a:8c:b8:3d:59:e7:c8:78:26:
                    d8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FE:58:59:D5:BE:DC:A2:2F:3A:4E:2C:47:CC:F4:54:9D:89:67:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/1f0f7151-1a17-3c20-b5f6-6c21ad2a655a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/949c3388-1f02-441c-9195-5c40d8fd63d2.crl

            X509v3 Authority Key Identifier:
                keyid:68:2C:71:CE:90:9C:5F:87:15:0C:2C:E6:93:67:15:C7:A9:AF:10:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.164.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:c8:40:ec:86:6c:ee:52:ad:c9:f5:c1:25:73:60:10:fd:5d:
         ab:ac:34:5b:fe:32:3f:87:9b:15:77:90:91:1c:8a:f7:29:6d:
         54:97:64:5a:64:4a:62:a4:97:93:40:0f:c5:05:36:ef:63:13:
         c2:bb:42:88:49:70:8b:da:1a:71:81:09:a1:84:c2:3c:ee:a1:
         a8:bd:4e:c0:65:a2:f2:ee:95:05:77:e7:91:2f:03:92:af:97:
         52:2f:89:34:03:21:54:6f:7c:9f:3e:ca:23:8c:f8:04:b0:35:
         7c:45:85:41:b2:8d:50:30:56:97:ab:b4:6b:25:8d:bc:98:4b:
         42:87:7f:fc:6f:4e:5f:c2:ad:cb:98:9d:f2:36:a4:98:f9:df:
         1a:e2:36:46:6d:69:9e:ef:03:ae:fa:59:0d:4c:81:41:d0:96:
         bb:16:cd:9b:99:5b:04:1d:2c:13:e2:e9:b7:5f:28:d2:86:1f:
         90:e9:02:9c:c7:f9:dc:67:92:4a:93:58:9a:85:ee:84:7d:b7:
         ad:78:17:50:ab:f7:ea:52:b5:e1:71:76:cf:ad:02:3c:4f:2d:
         c6:18:3d:62:21:c4:a2:b3:d7:a4:ee:90:ff:38:84:f2:e8:4b:
         52:24:47:ba:3e:91:59:3f:18:bb:88:8f:b5:5e:01:04:3a:30:
         60:c1:0e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:19 2025 by rpki-client on console.sobornost.net