Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e381eeff-1212-3499-ba5e-186bb131c799.roa
File:                     e381eeff-1212-3499-ba5e-186bb131c799.roa (raw, json)
Hash identifier:          9OCm8SS+fpvLeIow2Pz3gJKvrt6NElpsQvfQ2O1/OtQ=
Subject key identifier:   C0:21:BD:9D:AC:13:BD:8C:06:44:E6:55:D4:70:82:09:4B:B0:C4:55
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858494B642A6FFD9ED84E002DE0C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e381eeff-1212-3499-ba5e-186bb131c799.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     397236
IP address blocks:        64.6.64.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:2a:6f:fd:9e:d8:4e:00:2d:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=a3f455f4-de5f-42d8-b1ef-28de4963378a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cd:0d:46:48:37:2e:cd:29:a4:07:04:e2:7d:
                    69:c7:18:13:94:6a:d4:27:6b:1c:67:04:16:d5:72:
                    dd:ba:b3:37:0d:b4:1d:1a:ee:65:df:7b:8d:6a:e4:
                    3c:5d:f4:23:0a:6c:a7:af:64:44:04:91:54:73:7e:
                    c8:1e:fa:ea:4f:6f:91:08:58:d1:e4:21:b7:8d:ba:
                    17:3a:07:09:8e:04:42:99:39:3b:01:e1:25:77:f1:
                    b6:ee:f2:01:7c:fd:e9:74:fb:4a:3d:9d:26:b8:45:
                    99:76:cb:07:1c:5f:4f:27:52:d7:58:51:66:68:87:
                    37:87:4b:da:da:58:60:fe:b0:20:03:78:12:c7:19:
                    8f:94:da:07:53:db:27:ce:0f:30:3a:a8:8e:5b:b9:
                    09:27:14:55:84:1e:6f:57:bf:09:bb:1a:55:f3:14:
                    e4:a8:db:c8:da:ca:f8:ef:c3:c0:d9:24:41:5a:c0:
                    f1:65:a4:03:51:6a:5a:3e:cb:5c:f0:fc:ee:be:56:
                    e1:6f:7f:cb:92:dc:e8:b2:45:67:b1:dc:b5:c5:0e:
                    a2:ca:f9:25:96:c6:00:16:99:12:72:4f:3c:50:2d:
                    6b:c2:93:f4:14:03:29:8e:7b:6b:35:70:9b:ef:e3:
                    2c:21:00:b2:b7:0a:e0:ae:c9:5d:ba:da:27:37:d9:
                    cf:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:21:BD:9D:AC:13:BD:8C:06:44:E6:55:D4:70:82:09:4B:B0:C4:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e381eeff-1212-3499-ba5e-186bb131c799.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:ea:54:ff:53:b1:87:84:a8:11:c3:cd:93:78:d4:62:90:17:
         1c:43:c6:da:a4:00:ad:b4:48:2b:45:b3:29:e0:63:c9:c0:d0:
         6b:b5:9c:21:d8:ee:c2:12:bb:f3:59:66:2b:8c:13:c5:d1:04:
         33:a1:ae:78:6e:2e:b9:dd:63:49:95:e8:82:f3:cb:79:c3:ca:
         3f:40:6e:07:02:33:eb:1a:75:bf:67:72:46:0c:89:60:0a:6a:
         69:f5:fd:2a:8a:d9:a5:94:ba:61:99:bf:89:3e:6a:2e:2d:7f:
         4f:57:a7:16:60:cb:25:41:a5:b0:4b:27:75:2c:22:1b:2f:cf:
         b5:c6:2a:8e:4e:5f:83:38:16:1b:3c:43:c0:dc:d1:23:be:56:
         20:c7:92:49:78:bf:12:12:c1:6e:f6:2a:f1:9f:ce:16:f6:40:
         c5:68:b0:6f:61:a0:7a:ed:b4:6c:93:29:a3:0e:b0:5d:92:07:
         d5:db:b7:50:b6:62:fb:3d:a7:ed:a9:26:84:76:7d:94:e1:7e:
         32:ea:2a:07:e6:b3:c8:2a:3e:05:87:97:3a:4c:f4:b6:ea:92:
         c7:bf:0c:0c:8f:2c:1b:87:d5:51:5b:df:78:73:92:45:72:ab:
         88:bb:09:28:c4:50:9f:c9:dc:8f:d0:df:df:54:05:b9:8a:2b:
         e4:4c:1c:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZCpv/Z7YTgAt4MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk
YTNmNDU1ZjQtZGU1Zi00MmQ4LWIxZWYtMjhkZTQ5NjMzNzhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3M0NRkg3Ls0ppAcE4n1pxxgTlGrUJ2scZwQW
1XLdurM3DbQdGu5l33uNauQ8XfQjCmynr2REBJFUc37IHvrqT2+RCFjR5CG3jboX
OgcJjgRCmTk7AeEld/G27vIBfP3pdPtKPZ0muEWZdssHHF9PJ1LXWFFmaIc3h0va
2lhg/rAgA3gSxxmPlNoHU9snzg8wOqiOW7kJJxRVhB5vV78JuxpV8xTkqNvI2sr4
78PA2SRBWsDxZaQDUWpaPstc8Pzuvlbhb3/LktzoskVnsdy1xQ6iyvkllsYAFpkS
ck88UC1rwpP0FAMpjntrNXCb7+MsIQCytwrgrsldutonN9nPuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMAhvZ2sE72MBkTmVdRwgglLsMRVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZTM4MWVlZmYtMTIxMi0z
NDk5LWJhNWUtMTg2YmIxMzFjNzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAZAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAADqVP9TsYeEqBHDzZN41GKQFxxDxtqkAK20SCtFsyngY8nA0Gu1nCHY
7sISu/NZZiuME8XRBDOhrnhuLrndY0mV6ILzy3nDyj9AbgcCM+sadb9nckYMiWAK
amn1/SqK2aWUumGZv4k+ai4tf09XpxZgyyVBpbBLJ3UsIhsvz7XGKo5OX4M4Fhs8
Q8Dc0SO+ViDHkkl4vxISwW72KvGfzhb2QMVosG9hoHrttGyTKaMOsF2SB9Xbt1C2
Yvs9p+2pJoR2fZThfjLqKgfms8gqPgWHlzpM9Lbqkse/DAyPLBuH1VFb33hzkkVy
q4i7CSjEUJ/J3I/Q399UBbmKK+RMHNc=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:42 2025 by rpki-client on console.sobornost.net