Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/0f6241fd-ac1e-3909-8b8f-cbbdd0e7bf62.roa
File:                     0f6241fd-ac1e-3909-8b8f-cbbdd0e7bf62.roa (raw, json)
Hash identifier:          OC6kUjOUPkrEPkrzCnBMXlfVaG7m2qj9oBC69Zn8KtA=
Subject key identifier:   B8:FE:62:2A:9E:A0:2D:C3:4E:C7:10:9C:8B:A5:46:A8:DD:76:7F:EC
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F432858497DA5B9F827EE546A949F3898
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/0f6241fd-ac1e-3909-8b8f-cbbdd0e7bf62.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     54113
IP address blocks:        140.248.254.0/25 maxlen: 25

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:b9:f8:27:ee:54:6a:94:9f:38:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=976162da-a411-4eb8-9b4e-45d26f5f7352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:90:67:18:bb:04:01:b1:4b:44:1f:29:8a:ac:
                    2b:91:21:9b:7c:54:18:85:a4:2e:3f:d1:a1:56:54:
                    36:bf:db:a6:a7:0b:cf:37:09:cb:a3:86:00:9d:5b:
                    62:c1:d1:ad:e4:25:49:f0:f0:d3:68:e3:5b:58:4d:
                    ad:54:f3:27:81:83:70:5c:cf:c0:cc:c7:32:31:cd:
                    69:23:91:aa:a5:c1:18:97:c3:8e:db:f8:48:00:4e:
                    21:89:04:8e:c7:e9:db:b9:81:a1:8a:19:cb:1a:d6:
                    61:9a:69:7d:46:23:eb:32:fd:1f:b0:41:9e:50:f9:
                    d5:fb:14:db:b5:06:31:bd:ab:9b:01:fc:fb:3d:41:
                    2d:53:8a:30:e8:75:cc:0d:c3:d0:f3:3c:60:ee:be:
                    bf:a3:fd:da:39:71:00:c2:ef:ea:96:6a:05:c8:36:
                    0d:1a:7f:55:a3:79:3c:1a:f4:a3:8f:5d:3d:d7:2c:
                    3f:63:f4:24:48:3a:1a:b3:ee:ec:70:03:1f:0f:dd:
                    3b:26:b1:65:ad:f3:d0:ea:31:7d:cc:e6:b1:47:3e:
                    26:d8:58:84:27:fd:99:67:e3:90:f8:7a:6f:17:53:
                    8b:1c:61:d1:9e:20:61:ba:28:57:18:e1:03:00:d8:
                    ed:b0:03:b4:6e:20:3f:74:a4:1f:39:6c:bf:fb:bf:
                    2b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FE:62:2A:9E:A0:2D:C3:4E:C7:10:9C:8B:A5:46:A8:DD:76:7F:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/0f6241fd-ac1e-3909-8b8f-cbbdd0e7bf62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.254.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:3b:e5:c1:48:03:74:9f:fa:43:29:c9:3c:d7:9f:14:06:7e:
         c3:56:ae:96:e7:58:0a:f3:a2:d1:86:de:63:41:b2:91:da:74:
         3c:84:ab:cc:d6:5d:0f:93:3d:db:fe:2a:87:90:2e:39:29:bb:
         a1:fd:b5:90:56:dd:92:97:78:b6:ee:2c:84:7d:21:57:58:22:
         35:6b:7e:ab:91:27:ce:90:3d:77:ba:2f:2a:fb:d8:fc:37:31:
         49:a7:79:29:41:e4:ea:da:82:24:05:9f:50:0e:82:24:c6:10:
         f0:a5:9f:72:8d:0f:bc:4e:32:59:4b:8b:25:50:74:d7:31:5e:
         cb:07:d1:cf:d0:76:92:15:03:0a:e7:17:1f:ac:ae:d7:11:4c:
         8e:27:68:2e:8a:ca:e1:ae:21:b3:e8:d3:56:96:42:92:88:65:
         48:ef:e1:a8:af:98:c9:84:68:e9:49:81:ce:16:37:c0:b2:27:
         4a:9a:36:72:fc:bd:c6:fb:42:26:87:f7:de:14:d5:ae:d9:32:
         b6:1b:ba:d9:b2:c7:e6:8e:92:ca:a7:1f:94:3b:27:c5:c1:2c:
         79:fa:2d:b8:50:5c:0b:ea:bb:01:f6:15:57:15:83:dd:08:c7:
         30:cb:a8:77:8b:35:48:aa:42:1a:1a:9b:82:a1:f2:7e:4b:0d:
         7e:d8:aa:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:19 2025 by rpki-client on console.sobornost.net