Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/b3798828-71b2-329f-8988-21b3e3f05b65.roa
File:                     b3798828-71b2-329f-8988-21b3e3f05b65.roa (raw, json)
Hash identifier:          pzx58G1VNuXCmxJEKT3SAP8faVFf10tGpz2V6EyIgQM=
Subject key identifier:   9A:9B:D2:19:85:1C:7F:B1:9F:DF:98:BD:6C:A3:8F:56:B3:62:01:F8
Certificate issuer:       /CN=70057aa1-544d-4237-b549-304fd45324ba
Certificate serial:       010D0C9F43285849806F270076A156922B0D1000
Authority key identifier: DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/b3798828-71b2-329f-8988-21b3e3f05b65.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     25617
IP address blocks:        216.222.208.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:27:00:76:a1:56:92:2b:0d:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70057aa1-544d-4237-b549-304fd45324ba
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=d44c4052-c7fb-4329-bbe0-71224efd0be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:aa:7e:5e:af:f8:ef:fc:80:28:89:a0:1c:a1:
                    2c:c8:3e:78:9a:ba:73:fc:aa:e4:53:7e:04:b7:a3:
                    c3:1a:e6:e4:42:b1:d0:2f:7d:c4:cb:d7:4e:b5:51:
                    7f:77:86:5c:a5:fb:b4:c1:6a:d6:97:2c:fb:c0:d1:
                    8c:34:f6:b0:4b:9b:fc:29:d9:99:57:82:93:a6:b7:
                    91:32:1e:fd:7b:a9:2f:5f:d9:f0:eb:15:7c:de:ce:
                    25:85:e0:a9:7e:22:71:c4:a0:2c:90:b3:84:09:c0:
                    40:6d:54:44:42:9f:43:21:e5:61:15:2f:58:b1:05:
                    fa:b9:91:53:45:bc:2d:68:2e:4e:28:e3:c8:fc:98:
                    18:8d:51:3e:bd:61:13:1e:73:58:f2:33:2b:97:e3:
                    a3:36:6a:81:8f:d7:01:44:de:25:28:dc:b2:cd:c8:
                    1f:28:20:61:56:86:94:d2:ec:ac:84:14:fd:3d:98:
                    9a:5d:48:87:02:1f:5a:0b:ca:d6:b6:e4:20:c3:4a:
                    05:31:03:92:77:a3:b9:25:63:05:91:e8:21:2b:c5:
                    a9:50:e8:bd:e8:8f:59:66:1d:e2:57:a1:37:2e:9e:
                    86:6e:f3:74:42:56:29:13:83:d9:8d:a1:a6:0a:cf:
                    3c:70:c0:7c:31:15:b8:e8:a0:a2:90:bc:70:fd:c7:
                    e7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:9B:D2:19:85:1C:7F:B1:9F:DF:98:BD:6C:A3:8F:56:B3:62:01:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/b3798828-71b2-329f-8988-21b3e3f05b65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl

            X509v3 Authority Key Identifier:
                keyid:DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.222.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:8b:9a:44:5c:da:35:b0:83:60:ff:d7:b3:c7:5f:33:0b:72:
         eb:6e:af:d7:2d:98:51:17:be:b6:50:25:ff:25:eb:d6:9b:4b:
         05:83:97:5e:7f:f4:4d:02:3c:83:47:e3:a0:c6:a0:7b:d2:6d:
         18:d9:af:5b:7e:df:be:27:16:cf:58:f1:88:e6:9a:dd:88:0f:
         9c:14:94:ad:a5:1f:c7:6b:da:f7:37:ff:52:33:a8:9d:cf:15:
         ff:c5:4c:03:7f:45:73:61:49:6f:76:75:8e:56:2c:29:83:a3:
         7c:b8:58:26:26:05:f4:69:fb:1a:f8:c4:35:0d:46:f4:8f:30:
         b6:7c:91:d5:41:05:b1:f5:31:c9:96:55:f0:17:2b:26:25:5e:
         d5:15:60:a3:81:2d:00:27:95:a4:35:ef:89:2c:9b:aa:21:15:
         74:a0:3f:d9:ef:04:ef:a4:bb:c5:8b:2c:57:74:bd:ed:75:e5:
         0b:b9:bb:46:60:95:57:8a:10:4d:4a:94:54:b5:0d:21:b6:77:
         16:6f:92:aa:99:36:a6:3c:d3:d0:2f:a0:04:18:05:08:d1:93:
         29:46:ff:2d:eb:be:5e:74:e6:f9:ca:47:6b:ca:41:90:fe:a5:
         0c:c1:f3:a5:0c:5e:25:da:6b:63:53:d8:74:bf:c5:10:ae:52:
         9e:83:72:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:41 2025 by rpki-client on console.sobornost.net