Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f2d71818-c79d-3099-bbef-15605bef4960.roa
File:                     f2d71818-c79d-3099-bbef-15605bef4960.roa (raw, json)
Hash identifier:          k1XY0MfudthDLEjNj1tiIEgmIu2SabgxXDVcdEWgXLI=
Subject key identifier:   0C:0B:57:6A:2A:7E:1A:68:2B:B5:09:76:5E:27:0D:35:66:6F:6E:DD
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584912470380D4777B8522B76FA0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f2d71818-c79d-3099-bbef-15605bef4960.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     397221
IP address blocks:        2001:502:100e::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:47:03:80:d4:77:7b:85:22:b7:6f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=5859da2b-ed2c-4953-8a85-31fd16b2adaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:23:18:6c:97:92:47:8b:e0:cd:ad:1e:2d:90:
                    90:1b:fe:4a:8c:44:df:19:39:17:da:71:b2:24:c2:
                    d2:aa:88:47:97:e9:07:53:55:5c:2f:02:cc:93:03:
                    d0:94:7d:d0:55:7b:d1:af:b7:08:9d:4f:77:ae:07:
                    59:4b:e2:8c:43:9c:38:8d:1a:2a:0e:3e:f0:05:e6:
                    22:37:ca:a1:60:f9:4f:09:33:e5:fb:0f:9e:6e:37:
                    05:8a:58:02:98:73:b1:cd:ed:48:7d:e9:06:c3:ad:
                    8f:23:93:76:d2:e0:6d:f2:63:b4:78:cf:37:7c:ef:
                    eb:b8:a9:27:f8:bd:80:f8:7d:d4:42:f4:75:25:07:
                    63:2b:e4:4b:64:ac:6f:cc:6d:40:02:3e:02:c1:8d:
                    ef:b4:29:b3:86:f1:e9:31:d2:93:dc:ea:f8:64:69:
                    92:fa:af:ba:0a:62:c0:e7:bb:76:d4:da:b5:1f:d3:
                    0c:4e:c5:da:9f:25:b9:35:04:14:cd:bf:f1:48:cf:
                    44:68:f5:a1:13:28:58:1e:a1:03:63:af:5c:0b:e1:
                    24:9d:d7:93:6f:3e:71:07:d4:18:18:44:0c:40:25:
                    2a:80:3d:25:3b:0a:e4:59:f0:d1:0f:ed:29:7c:e0:
                    44:95:65:cc:c8:9a:8e:a6:54:e7:09:4c:03:4c:4e:
                    1d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0B:57:6A:2A:7E:1A:68:2B:B5:09:76:5E:27:0D:35:66:6F:6E:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f2d71818-c79d-3099-bbef-15605bef4960.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:100e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:7d:77:ab:b4:4b:ab:21:86:b1:9f:ac:a0:e1:91:f2:56:f5:
         d8:71:83:b4:28:a7:19:7b:c1:4b:18:57:d0:16:b8:57:f2:89:
         14:22:ee:1f:8e:81:6f:67:5c:eb:23:6e:b8:bc:18:27:38:29:
         0c:33:f0:c4:35:5e:04:9f:99:e2:6e:75:fc:66:23:18:ac:13:
         3a:0f:9d:3c:b5:a6:07:fb:f7:9c:b9:66:2a:c5:23:96:c7:65:
         64:9a:23:59:e7:73:81:00:ee:83:e9:5a:dc:11:3c:4a:df:ce:
         c0:42:78:f9:43:3b:bf:65:c9:41:09:8a:6a:cd:20:4b:0a:45:
         e9:ec:b8:d1:fb:a9:7b:da:a4:0c:d1:f0:f5:7a:cb:bd:58:b8:
         8c:9d:ae:ce:d8:96:21:ed:8d:06:67:ca:fa:03:5d:83:2c:6a:
         8f:ec:d7:21:08:7b:a0:14:5a:2e:00:90:0b:9c:00:96:e7:e7:
         17:83:2b:e6:a3:b2:4b:cf:b8:7a:ef:4c:2a:52:ef:c4:cb:40:
         d1:21:ca:f2:31:8b:18:cd:b5:5f:c4:92:fc:59:61:5c:cb:cd:
         8c:69:63:2d:f5:86:43:7d:3f:4b:f5:42:ff:f4:7a:65:f1:d6:
         44:d3:08:1f:db:48:07:6c:45:a6:ec:1b:6c:f0:6d:fa:a0:29:
         e9:17:f9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:44 2025 by rpki-client on console.sobornost.net