Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/11cff431-9278-3524-bc39-08ba7453130b.roa
File:                     11cff431-9278-3524-bc39-08ba7453130b.roa (raw, json)
Hash identifier:          NcF3ARQJT3DIubHn5AO1P6oRgvYZDTNKKqOoEiBFr4w=
Subject key identifier:   64:7A:72:7B:9D:FC:68:7D:A2:69:93:12:A6:1F:E5:8C:2A:07:4F:1A
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F43285848EC96ADEA15B859DD5960D880
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/11cff431-9278-3524-bc39-08ba7453130b.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     203724
IP address blocks:        208.81.71.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:ad:ea:15:b8:59:dd:59:60:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=bd27def6-8735-437e-a41c-a0afc2f0545c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:92:d1:55:dc:68:08:34:e0:93:d6:3a:bd:ed:
                    f2:d3:9f:25:d0:56:a6:13:3b:ea:62:ab:83:5a:22:
                    61:7b:2f:0b:d7:ea:c4:e5:31:9a:82:72:11:d0:cb:
                    ed:4a:57:f5:9d:00:f8:1e:d7:8f:78:61:95:a0:28:
                    5a:88:98:92:d9:d3:7b:b7:0e:5d:93:72:9a:e9:8c:
                    6b:c3:35:53:68:90:38:16:e4:65:39:4c:aa:15:bf:
                    52:7c:0e:29:c6:38:41:e2:d4:c7:dc:d3:be:8f:6f:
                    1b:4b:df:c0:ba:de:80:ce:84:a0:f2:cd:6d:00:77:
                    eb:a2:ce:59:2e:6d:63:ce:e2:3f:cf:40:1a:6b:12:
                    7c:75:89:66:64:e0:62:1d:fc:48:a2:03:7a:26:2a:
                    7a:a3:35:e9:d5:59:5c:83:a7:d2:e5:fa:df:73:8d:
                    c4:34:e4:3a:00:98:07:56:15:97:c9:35:e0:9f:da:
                    06:06:a4:c4:61:6e:31:4d:b2:77:7c:b0:e0:02:66:
                    f3:e3:30:24:fe:2b:a5:56:64:b2:0c:1f:64:a9:f9:
                    b6:d1:db:90:f4:18:10:4a:ff:dc:90:58:17:50:46:
                    96:db:54:65:ea:eb:a3:14:8c:5c:8f:10:8c:77:47:
                    9e:a5:d8:97:f7:e4:82:1e:be:bb:ff:ac:77:81:9e:
                    b9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7A:72:7B:9D:FC:68:7D:A2:69:93:12:A6:1F:E5:8C:2A:07:4F:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/11cff431-9278-3524-bc39-08ba7453130b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.81.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:39:af:93:e8:38:33:7c:5d:fd:df:2c:f8:44:6a:a5:4c:d1:
         f2:d2:87:8c:81:46:ab:ce:4e:4c:5f:8b:60:df:e9:b3:8d:83:
         e2:a5:2b:b7:22:3a:a5:77:d8:cb:64:bf:61:6e:96:d4:64:11:
         6f:4e:66:d2:36:ca:2d:e6:96:ed:28:e8:65:81:69:46:d7:3e:
         ca:91:37:14:35:de:38:2c:1a:30:ba:5e:72:e1:e4:c6:39:46:
         26:7a:85:b3:f2:cc:91:e6:d7:09:24:2f:39:9b:5c:b5:62:fe:
         79:90:13:45:9d:1b:19:27:1c:4d:ef:2f:2c:b5:26:61:ed:d8:
         21:78:04:43:9f:87:14:eb:49:50:d9:e5:18:01:42:dc:ba:d7:
         61:47:ca:b7:31:d4:2d:4d:61:0a:19:07:21:10:79:e4:ef:df:
         33:cd:f4:2d:f4:78:09:28:95:59:9f:c4:a7:6d:cd:15:66:b0:
         d9:23:bf:b2:b5:21:da:58:8b:1f:fb:0c:c8:f9:28:a5:6a:d6:
         35:71:9a:18:bc:ef:45:fe:8a:c7:ef:4b:94:94:1f:ad:01:93:
         59:d1:6b:13:b7:5a:0f:08:01:32:aa:fe:ef:8b:73:67:67:ba:
         6f:02:71:a7:2c:24:cf:f4:da:79:96:8a:7b:ac:bf:4c:fb:22:
         b7:4b:fb:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslq3qFbhZ3Vlg2IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3
Yjc0MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk
YmQyN2RlZjYtODczNS00MzdlLWE0MWMtYTBhZmMyZjA1NDVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpLRVdxoCDTgk9Y6ve3y058l0FamEzvqYquD
WiJhey8L1+rE5TGagnIR0MvtSlf1nQD4HtePeGGVoChaiJiS2dN7tw5dk3Ka6Yxr
wzVTaJA4FuRlOUyqFb9SfA4pxjhB4tTH3NO+j28bS9/Aut6AzoSg8s1tAHfros5Z
Lm1jzuI/z0AaaxJ8dYlmZOBiHfxIogN6Jip6ozXp1Vlcg6fS5frfc43ENOQ6AJgH
VhWXyTXgn9oGBqTEYW4xTbJ3fLDgAmbz4zAk/iulVmSyDB9kqfm20duQ9BgQSv/c
kFgXUEaW21Rl6uujFIxcjxCMd0eepdiX9+SCHr67/6x3gZ65vQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGR6cnud/Gh9ommTEqYf5YwqB08aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5
MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMTFjZmY0MzEtOTI3OC0z
NTI0LWJjMzktMDhiYTc0NTMxMzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl
ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5
N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll
OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FFHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFQ5r5PoODN8Xf3fLPhEaqVM0fLSh4yBRqvOTkxfi2Df6bONg+KlK7ci
OqV32Mtkv2FultRkEW9OZtI2yi3mlu0o6GWBaUbXPsqRNxQ13jgsGjC6XnLh5MY5
RiZ6hbPyzJHm1wkkLzmbXLVi/nmQE0WdGxknHE3vLyy1JmHt2CF4BEOfhxTrSVDZ
5RgBQty612FHyrcx1C1NYQoZByEQeeTv3zPN9C30eAkolVmfxKdtzRVmsNkjv7K1
IdpYix/7DMj5KKVq1jVxmhi870X+isfvS5SUH60Bk1nRaxO3Wg8IATKq/u+Lc2dn
um8CcacsJM/02nmWinusv0z7IrdL+88=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:28 2025 by rpki-client on console.sobornost.net