Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/03afefba-4630-36ec-b134-c0f50876f0fe.roa
File:                     03afefba-4630-36ec-b134-c0f50876f0fe.roa (raw, json)
Hash identifier:          YSgE8e8LYzyaDNfNJ+k+z7HAmGl/MHeTyc8mM1fO/Sw=
Subject key identifier:   9A:BE:4A:3E:A7:FA:0D:02:31:0D:A8:85:1F:53:67:1F:D9:85:29:93
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F4328584976A9906B64BEDA08B55E8300
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/03afefba-4630-36ec-b134-c0f50876f0fe.roa
Signing time:             Wed 09 Apr 2025 01:00:47 +0000
ROA not before:           Wed 09 Apr 2025 01:00:47 +0000
ROA not after:            Tue 08 Jul 2025 01:00:47 +0000
asID:                     8987
IP address blocks:        199.180.202.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:76:a9:90:6b:64:be:da:08:b5:5e:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Apr  9 01:00:47 2025 GMT
            Not After : Jul  8 01:00:47 2025 GMT
        Subject: CN=bf12fb0b-f111-47dc-9cba-d80f1d3f7385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9c:ce:58:a2:05:f1:9e:07:f6:61:1e:1b:d9:
                    d0:cb:5a:3d:fe:06:da:d5:b2:6a:a5:a6:47:0f:0f:
                    29:18:dd:92:7a:28:b9:f1:10:ad:b6:9b:f7:17:97:
                    1d:75:d7:6d:cb:56:03:ff:8d:24:ea:fb:30:0b:f3:
                    77:96:51:64:26:e4:3b:29:78:ac:07:8d:b6:08:0a:
                    44:f6:32:ea:f2:1c:df:a9:fa:4e:9f:1b:92:ab:ae:
                    26:62:70:a9:18:97:46:76:ea:f1:97:0b:08:58:a0:
                    26:8d:42:70:42:f5:de:f0:26:fd:d4:3b:22:cf:83:
                    0a:4d:42:ae:c5:6c:66:51:8d:e2:20:05:7c:f8:43:
                    70:8a:88:a7:3e:ee:87:15:46:e2:35:ee:88:f4:b1:
                    3a:95:6b:8a:6d:fa:5b:28:bb:89:1e:59:4a:cb:bd:
                    01:4f:46:b5:e7:d1:10:20:66:b2:c9:ee:0e:e4:8e:
                    f0:f8:b8:57:60:b7:50:e4:ee:51:de:c0:82:5f:56:
                    75:4b:f7:48:bf:5f:f5:fd:77:cb:83:ab:30:af:61:
                    ec:9c:46:6c:4c:19:52:d8:e8:e1:87:8f:92:ab:2c:
                    d3:1d:10:60:71:c7:a1:bc:bc:7f:fb:a3:db:67:33:
                    cf:29:0a:39:8b:68:b8:1f:2c:9a:71:ae:fc:04:7d:
                    f8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BE:4A:3E:A7:FA:0D:02:31:0D:A8:85:1F:53:67:1F:D9:85:29:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/03afefba-4630-36ec-b134-c0f50876f0fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.180.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:90:43:a2:97:cb:c0:ee:22:78:18:b2:42:3e:2d:c4:d6:9d:
         df:5c:d6:58:1c:c8:5d:93:d6:71:49:84:c3:a6:e2:92:61:34:
         b8:2d:58:31:fe:32:f6:83:7d:d3:fe:47:a0:7f:b8:ca:46:5f:
         51:cc:01:d8:04:e2:c8:58:34:c0:0b:df:3f:3d:72:81:cc:5a:
         64:f6:b6:6d:cc:85:d0:b8:5c:cf:1f:6a:5d:f1:a6:2a:c0:f8:
         98:44:95:c4:3d:01:8d:96:cc:6e:9e:26:59:f5:8a:c7:78:26:
         35:3c:76:9b:66:08:21:82:d7:10:f9:95:80:6f:d5:1a:56:90:
         20:a7:d7:aa:5d:d7:82:1d:67:19:5f:c6:bc:78:f9:76:21:08:
         2b:f1:3e:bd:f5:6d:5f:bf:23:c2:70:86:d8:bd:12:ff:b6:1d:
         7e:cc:92:fd:65:60:d3:75:d9:3c:4d:02:55:59:1e:e6:af:53:
         61:27:30:c4:4f:d0:6d:e6:d4:02:41:34:c0:00:ed:5e:73:ec:
         69:1c:93:cb:ea:d9:ad:03:ea:23:b2:7c:5b:aa:96:9b:18:ef:
         9e:51:2f:15:4e:76:2a:ab:9e:c8:97:79:99:62:1c:f2:5f:f4:
         20:5f:a0:55:e6:e6:d3:a9:59:db:fc:61:b9:0c:9b:99:67:d3:
         01:98:76:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:28 2025 by rpki-client on console.sobornost.net