Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c7b19e67-e596-317a-af39-0fc4c54fa9be.roa
File:                     c7b19e67-e596-317a-af39-0fc4c54fa9be.roa (raw, json)
Hash identifier:          QMnqNooBTG+KzvVFCf8TtK+KOVOxGgYwCZ5C4miXMYQ=
Subject key identifier:   FF:AF:B9:3E:DF:EF:88:53:EA:70:C1:A3:72:98:78:61:B2:51:0F:76
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858496FAF196862A42C8934FF5824
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c7b19e67-e596-317a-af39-0fc4c54fa9be.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     397213
IP address blocks:        199.7.67.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:af:19:68:62:a4:2c:89:34:ff:58:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=b4b54105-ce55-4ca5-af4a-6b5ad0ee73f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ad:3c:48:c9:f1:73:fc:0f:71:67:4c:63:ce:
                    af:ed:53:b3:bf:20:52:9a:25:4f:b6:35:5b:7f:6c:
                    b8:46:cf:7f:f7:be:69:8f:7e:f0:f1:1f:ae:3d:03:
                    f8:a6:9a:d9:95:ed:94:35:bd:a7:3c:af:76:96:b4:
                    c5:de:74:20:3b:2c:cd:d2:bf:ac:c2:97:7f:a5:1c:
                    56:4c:76:b3:69:73:a8:b3:7a:70:b7:af:9e:8d:b9:
                    a5:dd:36:79:85:01:77:71:2b:66:23:e5:bc:54:8b:
                    49:4d:be:ad:97:3a:a2:cb:60:6a:b2:6b:a2:36:9a:
                    c3:55:d4:f0:b1:16:ab:f2:1b:4e:b4:19:8d:3f:74:
                    39:c5:2e:68:87:93:55:34:ba:49:a5:8b:5c:14:89:
                    06:9a:2a:de:e8:02:76:e7:61:e4:7e:dc:be:c8:43:
                    3c:80:bd:cf:47:0a:e3:cb:97:85:c6:05:b3:20:5a:
                    71:13:6c:ce:a4:3c:e1:37:7c:9e:fa:4d:d2:77:ad:
                    c6:b8:42:f6:1a:60:f2:5b:f7:0a:39:dd:73:77:dd:
                    8f:de:3b:e0:83:d5:8d:12:f6:26:1e:99:31:63:be:
                    56:5e:fe:80:82:e0:8e:f1:09:2a:3c:1f:6e:23:2b:
                    b0:f4:10:df:0c:89:08:06:58:ff:4e:ca:04:3c:4f:
                    6c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AF:B9:3E:DF:EF:88:53:EA:70:C1:A3:72:98:78:61:B2:51:0F:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c7b19e67-e596-317a-af39-0fc4c54fa9be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:93:6d:bd:7c:e6:c4:16:6a:d8:cb:e2:07:91:68:d5:2f:ce:
         ce:86:4e:9d:28:f2:62:9b:5c:22:f9:21:9b:ed:46:3b:fe:c7:
         ea:7e:81:aa:23:27:bf:3f:2c:91:78:77:47:b6:fd:fe:8b:15:
         cb:9b:36:3a:41:d3:fe:91:3f:f1:7d:a8:b1:db:06:97:05:96:
         d0:52:e6:0a:d2:7f:89:93:3c:4c:9c:ac:a1:28:e0:e5:84:68:
         d7:12:4a:d4:42:a2:1b:16:d0:5b:25:e3:51:1e:e1:94:5e:2e:
         c1:04:ba:5f:85:c2:8d:84:74:31:34:59:b0:e1:5a:44:38:45:
         47:09:69:15:7b:a0:7c:16:e8:9a:74:26:28:9f:3a:f1:ba:e6:
         37:43:30:d8:bb:07:a3:ce:8e:a3:f5:ab:75:6e:0c:04:81:da:
         62:c7:e5:e2:48:59:6c:4f:81:a0:e6:61:9d:72:d8:90:1f:7a:
         f9:e9:f1:45:96:ec:2d:13:a3:c1:6b:a7:87:8a:2a:1e:6d:cc:
         08:f6:0d:f4:cf:61:02:05:bb:07:b6:e8:62:a4:36:30:92:0a:
         c6:de:e0:e3:da:8c:f4:28:9a:fc:e3:98:c4:20:f4:15:e3:62:
         f2:e3:48:98:bd:c9:ba:a5:48:22:dd:6c:c2:39:9e:03:75:15:
         68:a2:2a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:41 2025 by rpki-client on console.sobornost.net