Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bdc266d1-adc7-3c7d-a932-26e410a5fc05.roa
File:                     bdc266d1-adc7-3c7d-a932-26e410a5fc05.roa (raw, json)
Hash identifier:          cCfiQqt3c63Zm/afFUi6mJ10Usqaa1ShZVvbzz4BBWA=
Subject key identifier:   11:E7:0D:A0:18:A1:1D:57:FC:E4:83:12:42:3C:ED:94:33:F2:B2:A0
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858495C2466ED6E3F2BCF29D1CD80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bdc266d1-adc7-3c7d-a932-26e410a5fc05.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     397217
IP address blocks:        156.154.55.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:66:ed:6e:3f:2b:cf:29:d1:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=f5b9bb23-f25c-486f-a7fc-7c4c3eb996e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:20:7c:37:71:1f:b7:c3:26:74:10:55:02:87:
                    1f:42:8b:da:d5:d2:2d:1f:2a:bf:a0:e6:eb:c8:1c:
                    f7:01:2d:b2:b5:1d:02:6b:32:e9:73:a1:b7:8c:33:
                    63:8d:70:1f:9f:dc:52:27:3f:20:92:2d:aa:73:3e:
                    75:ad:6f:a4:13:a0:28:51:3f:77:60:ac:87:32:8d:
                    6b:f1:a6:87:a1:bb:6c:82:65:f0:34:4f:9b:f8:ab:
                    70:b3:96:c3:38:96:16:45:71:36:d1:09:ef:97:b3:
                    7c:96:ec:df:c6:4d:64:65:81:c6:8e:ad:52:79:6c:
                    e6:1c:10:40:b3:e2:96:54:cc:fd:0a:e6:30:7b:fb:
                    9b:ba:18:10:01:b7:e2:6c:34:62:86:12:fb:66:b4:
                    ef:63:56:d6:b6:a8:ef:6a:4b:11:7e:81:47:de:b3:
                    17:cc:c7:fd:a9:91:98:ad:20:8c:1a:00:ad:14:c3:
                    a1:85:7c:de:88:21:81:1a:e7:76:42:18:a1:04:e7:
                    89:4d:85:9f:95:c8:36:a8:da:10:e4:43:99:86:a3:
                    9a:ef:8e:ed:5f:b3:15:d4:29:f1:e1:8b:f2:61:bf:
                    eb:b1:67:1c:c0:18:15:ab:9f:40:82:08:fa:5e:69:
                    d6:27:75:a6:ca:90:b6:a7:07:ea:45:d1:e5:6a:45:
                    f6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E7:0D:A0:18:A1:1D:57:FC:E4:83:12:42:3C:ED:94:33:F2:B2:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bdc266d1-adc7-3c7d-a932-26e410a5fc05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:80:1f:5e:5f:32:f1:9a:26:76:55:4c:20:44:66:0b:9d:ea:
         82:40:36:d3:85:23:b0:85:95:67:05:6a:a9:54:5a:d9:19:05:
         ff:77:03:96:64:e4:a4:49:4c:0a:0f:19:31:d9:3b:49:71:80:
         2f:0b:55:7d:68:ee:66:0b:54:77:f5:e3:29:28:12:de:43:bf:
         a9:78:0b:69:1c:c6:65:4c:74:ce:14:f5:c0:d6:ae:9b:40:b3:
         56:4c:e6:33:b1:80:a4:7a:b1:4a:e7:61:15:c4:f1:9e:a6:ae:
         14:12:be:73:ff:90:67:96:8e:5c:98:7c:2c:17:8c:17:9d:d3:
         19:13:d4:0e:24:cf:4f:31:df:ca:a3:8e:bb:01:51:61:92:e2:
         d8:2b:60:eb:7e:08:4d:6d:81:b1:2d:da:31:f3:04:40:ce:67:
         df:4a:7e:11:85:c7:ff:5f:f3:a1:0c:37:94:70:c2:bf:ed:c4:
         93:d2:f8:e1:c8:af:48:08:0d:cf:17:72:94:d9:c9:f1:a5:a6:
         a4:ae:ef:4c:e6:bc:ac:ee:f2:93:3d:84:71:3b:9c:72:03:2f:
         f8:2a:b3:90:39:7d:68:36:7a:14:11:3e:4c:12:61:56:1d:ec:
         b1:89:2a:e2:d8:50:03:38:c9:5f:09:6a:78:12:3b:29:23:a6:
         da:c4:cc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:40 2025 by rpki-client on console.sobornost.net