Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/04f8b2e8-8cfe-38be-aaf8-e6c8b618a23d.roa
File:                     04f8b2e8-8cfe-38be-aaf8-e6c8b618a23d.roa (raw, json)
Hash identifier:          5S9cmxvKysS9fvegWThRzNN7QsHgmUhnDl7mVyXCr3E=
Subject key identifier:   A7:55:05:88:DF:D8:DE:FE:3E:31:90:03:FD:A8:58:4D:8B:DA:E4:6E
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858495C246B79DB696C248034CD00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/04f8b2e8-8cfe-38be-aaf8-e6c8b618a23d.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     19905
IP address blocks:        204.74.112.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:6b:79:db:69:6c:24:80:34:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=3f8e6e7a-ecdc-4f59-be89-18745e1a7b5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:79:45:87:83:9e:42:4b:27:50:3d:97:12:a4:
                    b7:0e:d3:f5:05:e2:39:be:8b:04:d7:f0:5d:03:d3:
                    28:10:46:1a:c1:af:c9:53:95:20:db:b9:fa:fa:c0:
                    40:70:22:55:17:f1:e6:72:6f:fe:7e:ec:57:04:08:
                    7d:3d:ce:8d:13:be:b7:e1:f6:78:65:28:a4:6d:ad:
                    2b:ea:26:62:cb:e6:8a:82:9f:22:03:f0:37:98:7c:
                    8b:ed:e9:c5:0a:82:c9:2a:65:57:3b:60:39:90:23:
                    a4:63:42:43:28:27:c5:49:0a:61:e7:11:bd:2a:0a:
                    1b:08:d3:1f:f4:b5:7c:ef:61:d5:8e:c6:5e:15:9f:
                    56:0a:71:9a:1f:6f:d7:bf:1a:e9:31:9e:d1:53:39:
                    25:53:97:b8:23:3e:1a:ff:d8:2c:43:93:23:9a:dc:
                    34:ff:1d:0a:4d:f9:51:22:27:c3:99:da:a2:5c:52:
                    cd:df:93:78:8e:20:04:49:27:05:1e:71:7b:f5:18:
                    2d:87:03:ec:8e:33:7d:cd:e1:0d:e5:38:ea:ef:f3:
                    14:fb:6d:1d:55:f5:be:23:87:ac:a5:a3:10:23:17:
                    b7:0d:e6:86:ba:db:1b:ef:27:ba:6f:5e:bf:5f:26:
                    49:fd:6a:cb:62:89:45:f8:a4:06:4f:66:3a:11:ae:
                    6e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:55:05:88:DF:D8:DE:FE:3E:31:90:03:FD:A8:58:4D:8B:DA:E4:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/04f8b2e8-8cfe-38be-aaf8-e6c8b618a23d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:b6:37:14:37:00:ec:02:1e:67:f9:a1:5a:16:10:00:23:08:
         3e:35:cc:52:4a:0f:38:2e:32:4d:2a:50:5f:64:71:b2:fb:c4:
         23:e4:29:20:75:9c:d6:1f:09:be:d0:89:e1:3e:f8:64:f2:0a:
         63:8d:29:28:fb:9b:28:5c:3b:f0:f7:14:c9:97:3c:f9:25:23:
         33:0d:62:06:7b:59:ee:65:d0:81:ca:5c:f2:bd:be:58:d3:97:
         82:fe:3a:4d:5f:fe:1f:12:dd:9d:5a:ad:c1:7d:51:2b:b8:bf:
         28:e8:3d:12:9a:cd:ba:0e:ad:56:63:a6:50:84:87:0a:fb:d3:
         54:8c:64:e5:81:9f:3f:64:16:46:0f:bc:30:16:88:fe:75:e1:
         7d:ca:94:dd:ea:ed:18:25:0b:b8:44:57:a3:43:5e:52:e4:77:
         f5:bb:60:48:15:de:6c:a0:cb:a0:53:ad:94:6b:84:b6:e6:63:
         cc:ac:f7:23:78:7f:a1:17:15:28:67:66:f3:99:1c:07:6c:b2:
         ff:fd:50:10:f9:6c:c9:05:71:ba:31:da:63:8a:05:e0:e2:87:
         c9:ca:96:38:6d:ae:46:b9:0e:10:c5:d3:8d:40:b8:4c:d3:95:
         88:06:68:52:92:7e:d4:7e:4b:6f:0a:73:50:74:c4:ed:d0:6c:
         d3:29:d5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:28 2025 by rpki-client on console.sobornost.net