Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/c98bcc7f-33a9-3609-84f1-216cce3ea44e.roa
File:                     c98bcc7f-33a9-3609-84f1-216cce3ea44e.roa (raw, json)
Hash identifier:          wjHivPFiCLd0Pi6/RhpmHX3t6wi8pPueK9hSKNsz4CE=
Subject key identifier:   4E:A0:3C:E0:61:E5:82:02:68:9F:2D:F1:A9:38:2D:99:F2:CD:FF:EA
Certificate issuer:       /CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1
Certificate serial:       010D0C9F432858490E16C2B36219DB3DA6D60440
Authority key identifier: 34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/c98bcc7f-33a9-3609-84f1-216cce3ea44e.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     18986
IP address blocks:        202.130.217.0/24 maxlen: 24
                          203.21.47.0/24 maxlen: 24
                          203.21.104.0/24 maxlen: 24
                          203.28.168.0/24 maxlen: 24
                          203.30.143.0/24 maxlen: 24
                          203.30.211.0/24 maxlen: 24
                          203.34.15.0/24 maxlen: 24
                          203.57.110.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:c2:b3:62:19:db:3d:a6:d6:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=316fb4c7-eaca-491c-841c-12449b91b7d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c3:66:ad:a2:80:86:57:ab:c9:54:14:98:ec:
                    51:86:5b:b4:3c:12:11:f2:4c:28:ac:63:63:45:cd:
                    29:90:7a:4b:eb:a8:3b:47:16:c6:7c:2c:b4:ab:14:
                    0d:10:93:2a:64:60:50:7e:68:63:f6:b0:12:d6:75:
                    86:da:f0:3e:66:fc:7c:ba:2d:ba:5f:80:3c:71:19:
                    8b:4c:67:b2:7d:b5:6a:2a:ec:55:12:85:b6:bb:bb:
                    35:30:6d:29:a0:30:4b:1f:da:e5:d5:da:d5:33:b4:
                    ae:20:30:c5:b7:a7:6e:c3:33:19:53:5d:25:23:6d:
                    3b:af:b2:21:21:13:73:41:76:ea:00:0b:34:75:a5:
                    9d:70:ea:7d:06:00:cf:3c:0a:84:68:18:a3:71:7c:
                    ae:f0:e5:cc:d3:b2:35:09:af:b3:d0:fd:ac:02:f2:
                    fc:c5:bd:a1:25:60:d2:b3:31:c9:cf:84:9e:e1:ea:
                    44:95:72:b3:5f:05:2f:06:2a:5c:87:4e:9b:16:24:
                    54:6e:c7:ed:0c:13:fd:ac:8f:ca:57:32:cb:6e:31:
                    e6:d8:3d:f3:4d:d8:2c:9c:37:2f:2c:dc:48:7a:39:
                    f4:a5:e6:c2:9a:b0:b0:08:83:2d:8f:9f:d1:33:94:
                    6f:bd:80:80:f4:67:55:42:94:d2:8c:07:ef:aa:4b:
                    62:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A0:3C:E0:61:E5:82:02:68:9F:2D:F1:A9:38:2D:99:F2:CD:FF:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/c98bcc7f-33a9-3609-84f1-216cce3ea44e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.130.217.0/24
                  203.21.47.0/24
                  203.21.104.0/24
                  203.28.168.0/24
                  203.30.143.0/24
                  203.30.211.0/24
                  203.34.15.0/24
                  203.57.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:6f:de:28:d6:ac:5d:42:c3:f9:9f:a0:4f:6c:73:81:19:fb:
         ae:fe:13:8b:9e:ff:63:b4:a5:4d:fe:ba:b3:af:ae:1e:93:da:
         c8:21:f0:0b:43:84:df:10:6d:79:66:7c:11:29:de:00:e5:50:
         a7:2e:d5:01:76:15:11:ed:f6:c0:f3:1c:8d:dc:3d:bf:bf:d7:
         49:95:2d:e6:b6:9e:d9:13:b1:2b:e6:e0:f9:99:f0:47:20:08:
         65:f8:5a:56:47:1f:34:4b:42:ae:20:ed:06:d8:17:ee:e2:f6:
         0d:c1:28:fb:de:91:aa:ca:7d:f4:7d:e4:14:36:17:be:0d:b8:
         ac:f3:0d:72:76:81:e1:cd:ef:da:62:92:06:2a:58:08:b3:32:
         f5:1b:5b:3b:1a:70:c9:ec:60:4a:b8:36:8a:2a:c5:26:a1:34:
         b1:c6:93:bd:18:0a:be:1f:25:84:06:74:c2:03:8d:3a:a9:07:
         52:5d:1a:c1:f0:ea:2d:e4:6f:7c:99:22:21:a9:67:a0:38:05:
         91:53:de:03:ea:0d:4e:63:44:04:40:97:d0:b1:6c:b0:a2:34:
         74:bf:78:46:1a:1a:9a:ae:d8:e6:0c:6c:a8:b0:f1:5e:a3:6b:
         c9:ba:71:02:57:41:1f:a3:67:8e:5f:b4:3c:8e:d7:ad:b0:24:
         58:c1:05:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:21 2025 by rpki-client on console.sobornost.net