Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ea1d94da-b9ef-3726-8fd3-2c2e03ba8c70.roa
File:                     ea1d94da-b9ef-3726-8fd3-2c2e03ba8c70.roa (raw, json)
Hash identifier:          ig0b4PfH1GRfZ8X4B2T6G60Tl4o1xjhfbJ2obwEJSUI=
Subject key identifier:   C2:20:B2:F2:7B:71:F2:64:31:2C:13:C2:91:B8:C6:DE:37:DE:D4:E0
Certificate issuer:       /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial:       010D0C9F4328584950F9663FD4344BB04962AA40
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ea1d94da-b9ef-3726-8fd3-2c2e03ba8c70.roa
Signing time:             Wed 26 Mar 2025 13:00:53 +0000
ROA not before:           Wed 26 Mar 2025 13:00:53 +0000
ROA not after:            Tue 24 Jun 2025 13:00:53 +0000
asID:                     21559
IP address blocks:        204.77.11.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:50:f9:66:3f:d4:34:4b:b0:49:62:aa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
        Validity
            Not Before: Mar 26 13:00:53 2025 GMT
            Not After : Jun 24 13:00:53 2025 GMT
        Subject: CN=89970886-bd98-4f8a-b0c4-04da8229b125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:30:4c:d7:a9:d6:43:4c:28:10:f4:4e:a9:9a:
                    df:aa:2f:4f:13:4f:5a:fa:b5:03:c1:12:9d:46:56:
                    5f:42:e9:f4:70:0b:bf:40:34:c1:dd:e6:fd:4d:c8:
                    dd:d5:ed:ef:b5:f1:84:64:eb:d4:5b:ac:fa:7a:99:
                    65:c9:01:66:f6:62:a5:49:0b:cb:d1:4f:74:d2:e4:
                    9a:7d:0b:de:9e:d3:a1:df:63:b1:de:1f:21:38:d5:
                    c8:99:db:eb:33:53:d6:19:02:c9:dc:e5:25:9d:81:
                    2e:c2:5d:a5:3e:0c:0d:45:d9:57:66:1d:22:be:f4:
                    81:21:a6:c6:ee:6f:14:ea:1c:f9:ce:6d:35:79:85:
                    67:04:66:9c:39:e5:87:f9:3b:6d:bd:a2:86:b0:f8:
                    9c:a1:57:90:f6:49:34:10:a2:be:25:6c:51:53:a8:
                    4d:27:f7:a5:35:51:f8:84:63:b2:f4:ac:17:3f:b6:
                    21:69:3c:6f:42:40:32:5c:0c:13:24:7c:d2:96:26:
                    d1:4a:0f:79:6f:85:4f:9b:4d:13:52:db:1c:e2:2a:
                    73:a6:37:20:cf:65:18:22:ee:9a:2f:73:38:af:11:
                    e4:d2:60:86:ac:11:e9:0b:d1:63:90:20:a8:0f:d7:
                    7a:ec:b1:22:0c:8e:96:d6:b6:04:53:24:3d:69:a9:
                    c3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:20:B2:F2:7B:71:F2:64:31:2C:13:C2:91:B8:C6:DE:37:DE:D4:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ea1d94da-b9ef-3726-8fd3-2c2e03ba8c70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl

            X509v3 Authority Key Identifier:
                keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.77.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:38:54:ca:71:a4:87:97:d3:bf:6d:74:82:6e:5a:9c:71:80:
         30:4c:98:f0:e8:94:ff:a7:2f:75:0b:81:99:41:84:9a:82:22:
         af:d7:49:e2:36:c2:3a:7c:c4:96:75:cd:84:ac:ec:c9:9d:ea:
         5b:23:d8:97:19:8a:4e:65:52:e1:91:09:98:c7:93:d9:4a:3c:
         44:ff:a4:1a:1e:5c:7b:8e:75:5e:62:2d:c8:c1:dc:ac:da:d0:
         fb:fa:22:26:cb:8b:b4:86:ec:86:94:1b:6b:ad:87:7c:9b:ec:
         5a:f4:35:3e:73:f7:b2:ea:3e:8e:c0:bb:66:81:a2:a3:01:d3:
         2c:28:20:d1:88:40:7e:04:8a:1c:4d:25:00:ce:46:1e:b6:30:
         d4:63:63:a0:44:ab:44:7d:57:78:65:3b:20:d8:7e:f6:76:2f:
         5b:8a:ee:be:35:56:69:e6:e0:a1:45:8d:7d:49:d3:95:0f:2e:
         d1:f4:47:9d:1a:3d:b3:ad:1b:98:c6:71:d2:4f:06:ad:9d:96:
         db:f3:58:1b:bc:db:39:6f:01:f2:89:73:b5:ec:8d:8a:3d:c6:
         ce:c6:0c:99:7b:5a:07:60:11:a8:fb:74:c8:72:5f:f0:de:67:
         37:94:a2:9e:16:25:2e:df:83:cd:e4:ce:bb:ad:d2:93:39:84:
         8d:8d:e5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:17 2025 by rpki-client on console.sobornost.net