Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/df426ff0-9772-37ec-98f5-d774d3e25215.roa
File:                     df426ff0-9772-37ec-98f5-d774d3e25215.roa (raw, json)
Hash identifier:          zm/O6pp0wqVnrlh6Jw8pUnNXnk1+hOqsqI7tE0deiP0=
Subject key identifier:   08:F4:56:02:44:9D:B3:B1:49:5B:F1:BD:4E:69:DC:66:AC:D6:F8:7C
Certificate issuer:       /CN=0339efaa-3121-4a82-8dd8-192f56ab47d1
Certificate serial:       010D0C9F432858495C243779717DD399905370C0
Authority key identifier: B7:D4:2E:91:48:02:33:18:5A:64:6C:A5:2B:0C:93:B7:AF:1F:EC:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/df426ff0-9772-37ec-98f5-d774d3e25215.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     13979
IP address blocks:        198.177.182.0/24 maxlen: 24
                          198.200.151.0/24 maxlen: 24
                          199.104.104.0/24 maxlen: 24
                          199.104.105.0/24 maxlen: 24
                          204.145.202.0/24 maxlen: 24
                          204.228.170.0/24 maxlen: 24
                          204.228.175.0/24 maxlen: 24
                          204.228.176.0/24 maxlen: 24
                          204.228.177.0/24 maxlen: 24
                          204.228.178.0/24 maxlen: 24
                          204.228.179.0/24 maxlen: 24
                          204.228.180.0/24 maxlen: 24
                          204.228.181.0/24 maxlen: 24
                          204.228.182.0/24 maxlen: 24
                          204.228.183.0/24 maxlen: 24
                          204.228.184.0/24 maxlen: 24
                          204.228.185.0/24 maxlen: 24
                          204.228.186.0/24 maxlen: 24
                          204.228.187.0/24 maxlen: 24
                          204.228.188.0/24 maxlen: 24
                          204.228.189.0/24 maxlen: 24
                          204.228.190.0/24 maxlen: 24
                          204.228.191.0/24 maxlen: 24
                          204.238.94.0/24 maxlen: 24
                          204.238.123.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:37:79:71:7d:d3:99:90:53:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0339efaa-3121-4a82-8dd8-192f56ab47d1
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=2120ed60-71d2-4a47-9c66-676bcfbc0860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:96:ac:2a:ac:16:6e:87:6b:7e:b7:30:cb:2b:
                    7f:90:fc:d0:ef:2e:d7:9c:21:f2:be:97:84:30:db:
                    e4:42:e6:f7:04:e2:b1:77:e4:4c:f5:55:20:1c:56:
                    bd:e3:39:b9:32:3e:59:0a:1b:89:bd:e4:23:b3:ad:
                    df:08:ce:c2:d4:21:79:36:be:73:99:7c:3d:80:1f:
                    ea:47:06:84:0b:09:c4:0a:03:9f:8a:ff:b9:90:4b:
                    d1:31:e0:cd:37:d7:2e:10:51:2c:68:d0:33:06:4d:
                    66:fe:2c:53:7f:d4:3f:d6:47:9b:42:36:8d:31:cf:
                    96:d5:42:f2:1d:ea:d0:77:4a:40:91:05:f0:1c:6d:
                    06:ef:c3:24:dd:32:09:05:77:ff:67:98:a3:1e:a6:
                    41:f7:f3:c5:d1:12:58:89:17:77:87:bf:1d:e1:8a:
                    46:c8:fa:9c:cd:35:dd:1a:da:74:56:63:62:47:b0:
                    7f:19:9a:55:2f:a9:34:cc:75:90:04:c1:d5:56:d9:
                    c7:58:81:95:e5:64:c3:a3:f5:b1:1c:10:f5:fc:48:
                    8e:b4:90:34:6a:b8:f7:4c:58:61:fb:70:dc:33:82:
                    08:f2:78:fc:15:15:4a:dc:1a:6f:8f:22:7e:53:66:
                    2c:0c:41:93:4e:30:aa:d3:4f:63:f6:35:f0:89:8f:
                    bd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F4:56:02:44:9D:B3:B1:49:5B:F1:BD:4E:69:DC:66:AC:D6:F8:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/df426ff0-9772-37ec-98f5-d774d3e25215.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/0339efaa-3121-4a82-8dd8-192f56ab47d1.crl

            X509v3 Authority Key Identifier:
                keyid:B7:D4:2E:91:48:02:33:18:5A:64:6C:A5:2B:0C:93:B7:AF:1F:EC:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.182.0/24
                  198.200.151.0/24
                  199.104.104.0/23
                  204.145.202.0/24
                  204.228.170.0/24
                  204.228.175.0-204.228.191.255
                  204.238.94.0/24
                  204.238.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:db:1d:8b:99:7d:98:c0:7b:e8:8c:0f:30:09:90:60:94:e1:
         8f:14:ba:78:4d:75:25:38:5f:f4:a5:57:54:b2:1e:4e:55:9d:
         4b:49:c6:10:13:7e:f1:db:20:ff:ef:84:69:7a:0d:b1:79:1e:
         a9:c4:81:4f:7d:3c:0a:a4:8a:99:28:6f:24:a6:6b:75:e6:b8:
         06:fd:3c:f6:e6:c4:59:e9:a3:da:dd:ec:7f:79:51:83:3e:e6:
         57:3f:92:28:7d:e3:7c:a7:bd:b4:cb:18:d1:59:29:12:21:eb:
         fe:43:33:bc:86:76:d1:27:e6:19:e3:aa:52:ac:bb:bd:d1:51:
         b9:eb:f0:d8:25:b6:e9:83:e8:e2:e3:6a:48:83:ae:80:40:4e:
         ba:82:3e:4f:9b:76:f8:3e:4c:00:63:eb:c0:93:46:db:29:1e:
         7b:d0:d3:c6:a1:cb:50:13:f2:1c:c4:ce:36:08:7c:f5:55:29:
         04:b7:24:65:7a:8b:0a:93:13:bf:e2:16:0e:88:36:7b:02:4a:
         00:4f:8c:34:35:00:76:9e:db:82:07:da:10:f7:c3:90:09:c1:
         84:c3:b1:67:b1:54:d9:3d:b2:23:98:97:dc:8c:f3:49:e7:c3:
         ac:49:27:c5:a9:b8:f9:37:e6:50:fe:04:99:dc:32:f4:8c:8d:
         d3:46:6b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:15 2025 by rpki-client on console.sobornost.net