Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ad12fd08-1a0d-3f04-bdaa-efc9ee88b655.roa
File:                     ad12fd08-1a0d-3f04-bdaa-efc9ee88b655.roa (raw, json)
Hash identifier:          64uIHgS4Els1EO+zmiUG5OsEdGDjCDoySZfyvRZM1a4=
Subject key identifier:   CC:EB:88:11:5A:6C:FF:02:9F:DC:FA:1A:50:C9:D2:01:35:D8:60:28
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584925B3B41919ADEDFE05247A80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ad12fd08-1a0d-3f04-bdaa-efc9ee88b655.roa
Signing time:             Tue 11 Mar 2025 01:00:40 +0000
ROA not before:           Tue 11 Mar 2025 01:00:40 +0000
ROA not after:            Mon 09 Jun 2025 01:00:40 +0000
asID:                     399161
IP address blocks:        2610:a1:3100::/40 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:25:b3:b4:19:19:ad:ed:fe:05:24:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar 11 01:00:40 2025 GMT
            Not After : Jun  9 01:00:40 2025 GMT
        Subject: CN=40f989a9-a7c9-4e6f-b825-8dd6b34ae8fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f3:c4:fa:09:ee:94:6e:32:21:cd:ac:b0:98:
                    bf:f0:09:9b:d0:72:51:b9:3f:23:aa:a7:62:3f:0f:
                    36:31:7d:65:d1:d5:8b:84:a1:9e:ca:7c:58:d5:45:
                    27:e4:be:02:51:03:bf:a0:6f:8b:1f:15:cd:da:4f:
                    fd:dc:60:dc:41:47:5a:bb:55:a1:9d:5f:1d:dc:11:
                    ef:b9:3e:8a:32:56:c3:18:81:55:2f:24:a9:ce:c8:
                    67:10:61:e5:42:7e:ba:32:16:ce:48:cc:8f:0d:9f:
                    e7:37:91:68:aa:9a:fa:48:b3:95:df:ab:75:bc:65:
                    58:eb:4b:2c:8c:b0:84:e0:da:76:15:f8:31:d8:96:
                    45:75:12:ff:52:8b:f1:bd:ae:cc:6e:bc:66:e5:4f:
                    71:1a:42:92:6a:a7:45:25:bb:8f:bb:2d:c1:c9:5b:
                    a4:97:b0:e8:e1:97:35:3a:90:04:06:5c:0b:3c:d8:
                    bf:6b:cd:2e:7a:70:12:ec:7d:8f:68:49:f2:a7:b4:
                    13:bd:2a:a2:4d:6d:bf:7c:b6:c1:00:34:ef:37:13:
                    fb:ba:c1:64:9f:71:db:87:5e:38:80:b5:0a:07:f8:
                    61:b3:ca:e2:67:53:09:f3:d1:ca:9d:11:60:cc:1a:
                    13:c5:48:56:d3:34:2a:53:4b:88:d8:cd:be:d5:ae:
                    b5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EB:88:11:5A:6C:FF:02:9F:DC:FA:1A:50:C9:D2:01:35:D8:60:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ad12fd08-1a0d-3f04-bdaa-efc9ee88b655.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:6c:53:a4:23:c2:f4:ff:9d:35:8c:ac:3a:11:a6:7a:8a:2b:
         5a:91:7e:e5:ea:79:1f:5c:e2:b7:9b:9b:5d:5c:7f:5a:79:84:
         ee:22:98:30:19:d1:bf:81:90:72:fe:3a:71:e8:b4:dd:ef:17:
         1f:c8:64:5c:12:ba:e9:b8:72:b0:59:17:f6:12:51:07:56:04:
         f9:d4:f2:8c:c4:d7:7b:42:37:7c:90:46:9f:8f:1f:08:86:dd:
         c0:91:48:78:09:d0:32:c6:fe:b6:f5:53:2d:0e:07:06:ec:e3:
         a9:20:14:73:51:56:9d:8d:49:f5:99:c8:84:98:00:95:af:cf:
         22:c6:58:fe:53:e3:a4:73:65:15:80:55:f8:25:ca:ce:aa:07:
         6f:99:c8:ac:54:7f:e3:12:3b:23:d1:02:13:be:fe:89:dc:39:
         de:e8:64:3f:68:54:4d:39:ed:31:47:66:84:3a:77:39:8a:c3:
         cf:0d:ef:da:fc:34:0f:43:bd:c7:8e:dd:a4:a8:b1:28:b2:82:
         04:29:e5:8f:71:42:a8:d9:bf:e4:1a:65:2e:60:e9:8c:4f:50:
         93:99:89:41:56:81:5d:a2:76:83:7b:73:51:5e:ae:a9:97:9d:
         94:63:7f:53:e2:a6:cf:f5:15:f7:03:e1:26:6c:f3:b4:bd:f7:
         b4:2f:97:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:40 2025 by rpki-client on console.sobornost.net