Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/1a47bd4e-105c-3919-ac20-899a2e9e60fb.roa
File:                     1a47bd4e-105c-3919-ac20-899a2e9e60fb.roa (raw, json)
Hash identifier:          McMnh2bT/JkT0NT5q/dD8s6I5SEANOvc+ha8p+ivjIQ=
Subject key identifier:   87:60:AE:13:F4:65:D5:65:AF:24:98:E7:57:A4:2D:7D:56:64:19:C1
Certificate issuer:       /CN=45fe4043-69f6-4f38-9003-897cd909fb3b
Certificate serial:       010D0C9F4328584967D073759F54130C0AA51600
Authority key identifier: D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/1a47bd4e-105c-3919-ac20-899a2e9e60fb.roa
Signing time:             Thu 03 Apr 2025 17:22:05 +0000
ROA not before:           Thu 03 Apr 2025 17:22:05 +0000
ROA not after:            Wed 02 Jul 2025 17:22:05 +0000
asID:                     13445
IP address blocks:        135.84.175.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:67:d0:73:75:9f:54:13:0c:0a:a5:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45fe4043-69f6-4f38-9003-897cd909fb3b
        Validity
            Not Before: Apr  3 17:22:05 2025 GMT
            Not After : Jul  2 17:22:05 2025 GMT
        Subject: CN=970b348f-59c8-40c9-b66d-c338c19431a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:af:49:cb:35:d5:fe:cd:0c:22:ed:db:60:05:
                    cd:8b:5e:5f:be:c9:5c:52:8a:86:b0:25:93:66:5d:
                    9b:af:8b:e1:06:0d:fa:16:8d:c6:87:8b:41:fb:d9:
                    ea:bf:83:7b:0d:6c:c7:61:24:5e:f8:c0:c9:1c:30:
                    a4:84:97:92:c2:e9:83:07:e1:57:a5:92:53:3f:ad:
                    91:89:66:f8:f3:28:61:33:b9:08:4f:30:e2:34:c5:
                    e3:3d:ef:81:ff:d8:7c:57:2b:e6:a3:88:4e:d6:4d:
                    45:67:1d:26:fb:d5:73:77:ea:43:1e:54:c6:25:38:
                    12:90:02:8c:26:bc:71:a1:88:76:67:44:38:c3:22:
                    33:e5:50:26:85:d2:aa:fd:96:07:aa:d0:4e:f8:28:
                    0d:4d:c9:78:07:6b:7a:02:5a:b7:dc:21:77:26:aa:
                    98:8a:80:c2:4b:bb:fa:de:46:97:37:12:a1:de:c6:
                    28:b1:c2:09:cb:13:e0:48:a6:6f:56:3f:2c:e2:eb:
                    8d:c7:14:e4:b5:be:97:db:f6:5c:86:79:02:d0:e3:
                    7e:fe:12:6b:db:97:90:ba:c4:b7:6a:41:3a:bc:ad:
                    c2:4d:87:69:39:bf:60:65:3e:5c:d1:6e:80:f2:d1:
                    51:2a:17:e9:8f:11:80:78:a3:43:4f:1c:5b:2f:27:
                    88:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:60:AE:13:F4:65:D5:65:AF:24:98:E7:57:A4:2D:7D:56:64:19:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/1a47bd4e-105c-3919-ac20-899a2e9e60fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl

            X509v3 Authority Key Identifier:
                keyid:D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:7c:94:2e:8d:05:90:59:47:a0:3c:94:74:f2:be:6b:06:52:
         4d:48:2f:4d:6c:6b:53:3f:85:e1:5f:f8:e4:31:99:c1:9e:85:
         5f:81:11:c0:c4:13:71:35:5e:5c:21:46:b8:a5:47:64:b5:75:
         ac:78:89:90:f5:26:28:52:7f:ac:2b:4c:ab:af:47:48:85:65:
         1f:0f:fd:15:0f:df:5e:c5:46:7b:88:46:42:00:8c:74:4e:85:
         98:13:75:09:3c:e5:14:14:18:50:80:a4:25:2d:b4:c5:52:68:
         f4:bc:00:2a:97:f4:21:4e:f7:2a:2c:b3:23:c8:4f:64:cc:c6:
         73:88:69:0f:3b:44:6d:85:9a:af:5b:ab:a0:b5:dd:b1:29:b0:
         0b:1e:9b:cf:f8:42:7e:b3:d2:d6:e9:08:1d:23:09:c7:07:ab:
         8b:dd:54:9e:f6:73:54:ec:ed:84:6e:df:40:fc:03:a2:84:e3:
         42:dc:24:6c:3f:1a:c8:fe:fd:d7:fb:5b:59:3f:9d:94:b1:f9:
         30:ec:3d:3e:e5:9b:af:15:6f:43:c0:07:c4:6c:47:5f:83:93:
         a9:f1:35:da:0c:7c:3b:82:c6:77:65:3b:1f:49:61:cf:94:c6:
         6d:10:10:44:0d:28:c2:4c:01:db:4b:68:29:f1:b8:c3:51:27:
         d8:4f:d8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:27 2025 by rpki-client on console.sobornost.net