Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/26239fe9-1b4c-309b-baa7-62dcf11a0892.roa
File:                     26239fe9-1b4c-309b-baa7-62dcf11a0892.roa (raw, json)
Hash identifier:          cK6ZOltv8acBF6tpXn+XHfmlWIF+PTfs1ZBwiSmwfL4=
Subject key identifier:   19:BB:D5:E6:1E:40:9C:C3:F6:4E:86:8A:64:9B:74:27:CB:46:F3:27
Certificate issuer:       /CN=256d2a2e-9ac7-4d29-bd15-75874d49df66
Certificate serial:       010D0C9F4328584981D452FAEBB5472CBEF40A00
Authority key identifier: E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/26239fe9-1b4c-309b-baa7-62dcf11a0892.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     40805
IP address blocks:        108.161.208.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:52:fa:eb:b5:47:2c:be:f4:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256d2a2e-9ac7-4d29-bd15-75874d49df66
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=6cb7768b-6f9f-409e-acbe-6b3189ef8a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:12:cc:f5:2f:ce:87:bc:e9:d1:cb:f4:40:f3:
                    47:e5:1b:0e:cb:ba:d0:fd:a8:69:56:2c:37:32:7a:
                    bf:03:8c:bb:d2:a6:74:59:d4:fd:fc:cb:13:56:fe:
                    3e:f0:a7:1f:70:3f:f6:ec:27:8e:8c:65:83:f8:58:
                    6c:81:14:6c:70:f8:51:43:1a:40:d2:64:d4:0e:13:
                    22:3f:58:af:58:26:90:ad:ee:4d:44:32:c0:4f:e3:
                    e0:ae:a4:2e:d7:3e:a3:21:b1:f3:d6:0c:b1:a1:3d:
                    74:aa:14:1c:c0:7d:77:0d:59:90:65:cf:48:0b:10:
                    fb:5f:28:fd:12:0e:07:c7:96:67:f7:51:69:f5:85:
                    d7:c0:a4:a2:03:81:fd:9f:3a:d8:00:68:a5:9c:d7:
                    6c:d0:47:90:e0:b8:04:b0:e4:c9:4a:54:bf:aa:e3:
                    72:e0:a6:23:e8:45:4f:0b:81:2d:9b:fb:8e:12:36:
                    ba:77:6b:d0:a4:c5:47:be:64:e7:0f:db:ef:c8:25:
                    18:ad:e9:6f:2b:9a:f6:10:e2:06:c0:04:d1:e1:db:
                    35:49:d9:c7:6b:de:4b:40:3a:96:30:82:92:b6:cf:
                    99:83:df:81:49:f5:dd:8b:e7:cb:2f:5e:24:02:82:
                    dc:45:78:1c:d8:b4:33:be:42:90:c1:0d:d9:ea:1f:
                    b2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BB:D5:E6:1E:40:9C:C3:F6:4E:86:8A:64:9B:74:27:CB:46:F3:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/26239fe9-1b4c-309b-baa7-62dcf11a0892.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl

            X509v3 Authority Key Identifier:
                keyid:E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.161.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:04:d3:61:25:16:83:35:e8:de:aa:03:80:98:2b:a1:60:3a:
         b1:62:45:c5:0b:1e:a0:db:2a:0d:fb:69:d2:63:5f:74:b0:18:
         fd:14:f9:35:a0:26:8b:ca:b0:68:49:18:2f:26:13:f3:ac:0d:
         2f:36:bd:f5:b2:a9:14:8e:16:db:52:29:d6:07:fd:75:6b:c9:
         53:eb:c3:b1:51:ad:3a:ef:ac:8d:a6:a6:17:12:8e:e0:55:1b:
         55:cc:1f:e0:0a:9b:46:1c:61:d8:28:85:fa:4b:d3:8b:80:20:
         b0:ae:9a:5b:9a:87:bf:ce:08:73:f6:25:e7:19:4e:09:ad:20:
         64:c3:a4:c7:55:2a:60:f6:a7:35:4d:67:c6:8d:ce:7c:66:c4:
         ab:28:ed:da:03:05:95:da:e6:d1:ef:4e:68:4f:85:63:43:e9:
         01:79:f7:75:78:57:c8:92:29:90:48:1f:8e:22:20:fe:e3:4c:
         2a:18:10:89:db:09:e9:ef:86:8e:b0:bc:13:19:bc:a2:eb:7c:
         0c:6c:92:14:53:29:0c:da:5a:56:cd:25:c1:44:59:21:74:79:
         48:7e:8c:10:07:20:f5:91:29:32:43:84:28:59:fd:50:20:75:
         06:09:11:9b:ac:a2:5e:71:9c:62:b5:81:47:95:9f:35:74:31:
         75:e7:eb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:16 2025 by rpki-client on console.sobornost.net