Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8837eba-6d77-3a98-99e8-e4367cfdf8e2.roa
File:                     f8837eba-6d77-3a98-99e8-e4367cfdf8e2.roa (raw, json)
Hash identifier:          Ut44Sq0+v6a7Gwt6yVcsGw3XRrY07YVAxoUScanZNAU=
Subject key identifier:   AB:89:D7:9F:45:8A:A7:37:EA:D5:36:9A:F7:B8:20:5A:5C:FF:D0:E2
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858496FAF1A5071ECDEC178FA2780
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8837eba-6d77-3a98-99e8-e4367cfdf8e2.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     397229
IP address blocks:        199.7.67.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:af:1a:50:71:ec:de:c1:78:fa:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=89f0193e-e29c-4dd9-b9e8-703c5689b54b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:84:f4:8d:e1:96:b8:1a:92:65:35:dd:6a:9f:
                    dc:30:48:6c:99:bb:5e:b9:cf:91:4d:5c:ad:47:ce:
                    83:88:b7:98:e9:9e:eb:1b:51:88:df:01:80:c1:c3:
                    72:34:84:9f:b8:e6:a3:97:4b:04:d3:af:5c:80:69:
                    cd:c4:7c:81:75:f7:cd:eb:06:61:fb:db:0f:3a:d6:
                    6d:56:ad:79:ba:84:25:7e:b5:a0:94:0b:e5:a9:f9:
                    d4:5f:d2:4e:45:4b:1c:e0:b3:76:3c:8a:89:38:26:
                    b5:6d:be:ef:ef:70:10:80:fa:61:27:09:1e:1a:f1:
                    eb:af:ac:4b:b9:f3:63:92:50:d8:8f:c6:66:83:39:
                    50:18:7d:68:be:9c:2f:b3:66:04:30:47:3f:0c:87:
                    15:3a:54:d8:5e:02:9e:72:99:f6:df:f0:e7:cd:0d:
                    ec:6e:d4:82:79:71:05:68:44:51:52:ab:f4:87:e6:
                    72:ff:9b:9a:1e:39:d5:0b:b8:a9:5b:75:76:98:54:
                    51:29:da:8e:cb:c6:4d:b9:b9:80:1c:45:2a:a4:7b:
                    b1:20:41:ee:45:09:b7:8a:bb:3e:84:2f:9f:eb:d9:
                    23:f1:a8:49:c1:fe:07:07:2f:fb:b9:c8:7e:46:fe:
                    47:c2:c1:70:de:a8:bd:5a:07:8e:8c:d6:0b:71:82:
                    98:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:89:D7:9F:45:8A:A7:37:EA:D5:36:9A:F7:B8:20:5A:5C:FF:D0:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8837eba-6d77-3a98-99e8-e4367cfdf8e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:9b:84:5d:7a:b7:8f:4a:f5:8b:4a:a9:1d:8e:d8:e6:b2:ed:
         7b:cf:3a:1b:77:2f:bd:d2:e0:96:7d:5b:f8:6b:27:a6:4c:b7:
         5d:e3:16:a5:9a:f9:02:d9:82:bb:96:61:a0:df:ea:b5:43:23:
         d1:5a:be:4a:fe:bb:87:1a:55:1e:90:dc:6b:bf:3d:2a:88:08:
         6c:7b:1e:ed:00:61:f4:66:67:7a:31:49:ca:3f:14:38:9c:f3:
         89:65:4e:d5:4c:4e:1c:a3:2e:8c:df:9d:3e:55:e7:46:44:77:
         d3:d3:cc:6a:24:f4:e8:4b:94:2c:53:1b:c3:94:35:cb:99:41:
         e8:78:49:7b:13:57:47:86:e9:f1:69:a3:af:a8:06:c8:f4:65:
         2b:df:b7:8b:af:89:dc:37:37:51:50:ad:86:5e:96:bb:fc:b9:
         ae:ec:55:2c:eb:03:b2:37:b2:31:9a:8e:59:3e:1e:fb:e4:85:
         ca:04:ea:19:8b:fd:6c:d6:74:88:d8:96:ca:4a:1d:0f:30:94:
         7d:06:03:ac:c0:39:fc:33:01:0e:bf:85:2d:b9:f0:d8:d3:35:
         d2:5b:21:43:d3:08:ce:18:a6:f5:45:66:c3:49:bc:f0:d6:f7:
         95:db:fc:65:7e:56:b0:7b:8d:03:50:d6:f7:d0:30:09:15:a1:
         41:69:3d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:44 2025 by rpki-client on console.sobornost.net