Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b/f361a84e-2742-3bd4-aa97-1effc6bf5c93.roa
File:                     f361a84e-2742-3bd4-aa97-1effc6bf5c93.roa (raw, json)
Hash identifier:          nWQlxfTkSG2Lv2dGQVncApi0tUKvhI2ZifdreLiuB9Q=
Subject key identifier:   23:F5:7A:9F:A8:D9:96:16:46:D2:3F:A5:43:19:5A:F4:3C:DA:27:C8
Certificate issuer:       /CN=b7cfe74c-db75-4446-81fd-1ad10a601f2b
Certificate serial:       010D0C9F43285849552944DC0C73A797FA9BA320
Authority key identifier: 67:5E:41:7C:EF:8E:A0:EA:50:E7:89:9C:51:02:B4:D9:07:96:08:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b/f361a84e-2742-3bd4-aa97-1effc6bf5c93.roa
Signing time:             Fri 28 Mar 2025 01:00:41 +0000
ROA not before:           Fri 28 Mar 2025 01:00:41 +0000
ROA not after:            Thu 26 Jun 2025 01:00:41 +0000
asID:                     40007
IP address blocks:        141.109.0.0/18 maxlen: 24
                          141.109.96.0/19 maxlen: 24
                          141.109.176.0/21 maxlen: 24
                          141.109.184.0/23 maxlen: 24
                          141.109.186.0/23 maxlen: 24
                          141.109.188.0/22 maxlen: 24
                          141.109.192.0/19 maxlen: 24
                          141.109.224.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:55:29:44:dc:0c:73:a7:97:fa:9b:a3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7cfe74c-db75-4446-81fd-1ad10a601f2b
        Validity
            Not Before: Mar 28 01:00:41 2025 GMT
            Not After : Jun 26 01:00:41 2025 GMT
        Subject: CN=960ae4ee-0202-46b8-9dcc-911f27e00e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4c:10:3f:e8:f9:34:dd:4d:75:7d:b1:72:02:
                    88:6e:06:32:88:e8:da:6e:8f:2f:88:15:4d:8b:5a:
                    ca:8c:6c:0b:04:a7:6a:f6:b8:b8:39:0c:6c:0c:8a:
                    87:f7:21:f1:5f:46:70:78:39:25:c3:15:49:ae:54:
                    13:9d:97:a9:d2:78:94:4b:6c:c4:ad:ba:9e:8c:22:
                    a7:47:78:8e:3a:b7:00:44:ca:ca:43:64:99:ea:f9:
                    c2:7b:38:4d:6f:80:95:98:d9:84:7d:ee:31:d9:80:
                    ec:5e:3d:79:cb:ed:97:81:63:44:ba:63:94:f9:cc:
                    e4:f5:b7:4a:b0:79:18:4c:77:33:f5:59:ba:83:00:
                    79:7f:38:cc:28:86:2a:ea:2f:b2:28:42:e1:3f:8b:
                    42:48:56:19:d4:6e:1d:17:1d:a7:9f:2f:0c:53:bf:
                    88:51:b9:25:58:24:7a:dc:f0:80:a6:f1:c0:1f:a3:
                    96:d9:e7:8c:bc:24:be:3e:d5:fe:f4:94:57:b6:e8:
                    4a:f3:7b:f6:1d:4f:1d:02:61:c5:d0:33:3b:53:da:
                    ac:21:33:27:d0:5f:03:ba:9e:e2:69:5e:ed:eb:76:
                    e7:17:49:23:e2:12:53:5b:bf:75:fb:2a:d3:98:1d:
                    b3:e1:29:63:7b:26:7a:1b:2d:ab:c7:46:73:d4:47:
                    6a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F5:7A:9F:A8:D9:96:16:46:D2:3F:A5:43:19:5A:F4:3C:DA:27:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b/f361a84e-2742-3bd4-aa97-1effc6bf5c93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b/b7cfe74c-db75-4446-81fd-1ad10a601f2b.crl

            X509v3 Authority Key Identifier:
                keyid:67:5E:41:7C:EF:8E:A0:EA:50:E7:89:9C:51:02:B4:D9:07:96:08:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.109.0.0/18
                  141.109.96.0/19
                  141.109.176.0-141.109.231.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:17:0c:ea:19:ae:ba:35:57:fd:66:f2:4d:36:32:a0:fd:18:
         d3:1a:64:90:91:bc:c9:86:fb:bc:fe:25:bf:d9:31:b8:35:c2:
         18:63:eb:f2:80:3e:e9:48:b5:59:b7:cb:44:9d:2c:3c:49:d8:
         e6:00:7e:b6:b7:fa:78:4c:13:ad:56:61:c3:b2:c1:3d:1d:0a:
         e1:88:98:e6:53:d6:43:d0:ac:20:d3:02:b2:7a:5c:a2:59:dd:
         11:30:9a:7d:06:ec:af:e6:65:1f:04:da:e5:55:e0:17:63:29:
         3c:b4:c1:2f:cb:04:25:0e:56:d3:1f:87:1d:b2:35:06:7d:3a:
         82:f7:4f:58:37:0e:34:de:d7:e0:c8:01:b3:12:79:1b:4a:dc:
         93:5e:a0:22:dd:9e:6b:fe:46:e2:52:da:53:1e:9c:53:16:58:
         85:b9:83:41:95:77:e1:11:d4:a4:78:e1:47:9f:70:db:b9:99:
         90:b7:0c:c7:01:b9:fe:19:8a:84:ad:e8:3d:cb:23:97:25:a8:
         10:fe:e3:9a:42:4d:58:dd:b8:e3:6e:cb:e4:e2:b2:5e:08:cf:
         66:4d:80:ab:39:7b:ac:06:06:1e:d3:d8:f7:8c:50:c4:a8:2c:
         f8:18:09:85:10:47:66:43:33:c1:14:1c:27:bb:16:a7:93:e1:
         66:9f:eb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:05 2025 by rpki-client on console.sobornost.net