Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0/e4984303-cfdd-381f-b4b6-b6359fd756a7.roa
File:                     e4984303-cfdd-381f-b4b6-b6359fd756a7.roa (raw, json)
Hash identifier:          71Mt2AF9fs1MEo5YCjKFAGDYSFnNRaiazGSsktiSO2M=
Subject key identifier:   3F:13:86:6B:D9:EC:4E:5C:02:77:33:FB:3B:86:A1:E3:15:1E:CD:C4
Certificate issuer:       /CN=5f8eb08f-0895-4c2b-8851-fe9215edcff0
Certificate serial:       010D0C9F432858495EEEE37A689009E50357A760
Authority key identifier: 49:DA:1E:65:9B:07:55:49:32:34:4C:11:E0:2C:96:0C:CB:47:DA:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0/e4984303-cfdd-381f-b4b6-b6359fd756a7.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     20283
IP address blocks:        192.16.104.0/22 maxlen: 22
                          204.144.176.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:e3:7a:68:90:09:e5:03:57:a7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f8eb08f-0895-4c2b-8851-fe9215edcff0
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=3677c527-021c-4fb6-9a58-aa368a51d8c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:36:0d:73:63:84:39:91:71:1e:72:57:aa:23:
                    19:c3:a1:08:45:6b:99:0d:e9:bc:b0:9c:2d:f3:9d:
                    42:eb:15:b1:e6:72:a8:43:94:d3:23:79:37:87:f1:
                    d6:f9:7e:df:50:fc:d1:55:91:ee:f7:95:90:58:16:
                    ca:93:d2:04:b3:50:12:b5:a3:be:74:70:8d:7f:a2:
                    ba:bb:14:d3:24:02:16:30:9a:15:4f:1f:07:49:89:
                    ef:50:36:83:68:70:5e:7c:74:02:62:7d:8d:73:da:
                    25:54:2a:b8:bd:34:1b:5a:75:ed:30:70:2a:c6:15:
                    c9:01:89:e4:0f:9a:e7:7d:2b:bd:cf:b7:1e:93:ee:
                    55:3c:2c:a1:5f:72:4a:0d:e8:ea:31:24:1e:ce:f2:
                    93:74:d1:f9:4c:f8:5e:e5:c0:82:3b:86:fb:21:78:
                    13:e7:6e:53:66:21:66:20:35:f5:09:a5:28:62:62:
                    b6:c6:79:14:74:2f:13:57:e3:db:80:60:dd:97:e6:
                    a7:3b:fc:78:d6:b3:9e:66:71:0f:8e:f2:2c:10:6d:
                    da:c7:27:57:8b:b6:b3:d7:bf:c7:66:82:b2:5b:e1:
                    21:b9:a5:0f:40:d8:4d:ad:83:97:d4:d5:cd:49:f6:
                    1b:dc:76:64:06:e5:15:94:e5:52:b1:d5:30:3d:00:
                    ad:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:13:86:6B:D9:EC:4E:5C:02:77:33:FB:3B:86:A1:E3:15:1E:CD:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0/e4984303-cfdd-381f-b4b6-b6359fd756a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0/5f8eb08f-0895-4c2b-8851-fe9215edcff0.crl

            X509v3 Authority Key Identifier:
                keyid:49:DA:1E:65:9B:07:55:49:32:34:4C:11:E0:2C:96:0C:CB:47:DA:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.16.104.0/22
                  204.144.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:66:e9:f9:a5:09:55:da:c2:82:88:fe:a5:47:09:20:a2:1a:
         fb:d5:84:3d:ad:c1:c2:3d:27:2c:42:e3:ac:f6:89:7e:64:a3:
         69:bb:9e:66:c2:fc:85:da:37:cb:45:8a:c1:93:69:51:44:db:
         ca:17:e2:fe:5f:79:16:56:8a:79:96:58:5f:e3:c7:fa:a8:7e:
         60:65:bd:22:48:72:83:2e:dd:02:19:e0:90:62:5b:59:7e:10:
         b9:78:c4:eb:cd:3d:0b:3e:6f:60:e3:49:00:68:28:e9:22:06:
         8f:33:1b:74:6d:a6:4b:11:6a:b6:3b:a0:26:94:f4:6a:a0:66:
         f2:13:de:c6:c4:5e:7c:be:09:d7:41:11:c8:06:b6:db:6e:c4:
         a7:81:d8:d9:ed:9b:c6:03:8c:30:43:df:29:2a:1d:29:da:18:
         4a:4b:d9:37:4e:fd:d5:a6:44:27:ed:18:17:0f:e7:73:44:3b:
         57:94:73:62:4b:fb:9f:aa:9c:b5:73:09:97:90:15:ae:16:1f:
         5e:a4:5b:b3:d1:be:a7:c8:fd:a6:dd:09:c3:12:7e:0e:0a:cb:
         9d:fc:8d:19:08:85:ea:cb:e3:60:e0:07:b4:bb:cb:a9:98:4f:
         1f:05:84:0d:4b:14:98:fc:2f:d1:38:5d:a3:af:ff:da:e7:7b:
         07:22:12:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:31 2025 by rpki-client on console.sobornost.net