Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f1099499-e865-4a58-89d5-0df023af2376/b1343bd7-f187-31ce-837b-42ff238b920b.roa
File:                     b1343bd7-f187-31ce-837b-42ff238b920b.roa (raw, json)
Hash identifier:          w9TuXde3VDJc5UJ025k3kdN3HVr/rgppCfIQ/NB4Ojk=
Subject key identifier:   F4:28:EF:99:B1:0A:84:67:D7:CC:DD:4A:D0:39:5E:E3:10:AD:9B:99
Certificate issuer:       /CN=f1099499-e865-4a58-89d5-0df023af2376
Certificate serial:       010D0C9F432858493BBC6277BB7222FFF716E680
Authority key identifier: C4:83:95:BC:07:81:7D:1D:AE:34:86:BC:A2:03:C2:30:72:E3:46:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f1099499-e865-4a58-89d5-0df023af2376.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f1099499-e865-4a58-89d5-0df023af2376/b1343bd7-f187-31ce-837b-42ff238b920b.roa
Signing time:             Tue 18 Mar 2025 22:26:05 +0000
ROA not before:           Tue 18 Mar 2025 22:26:05 +0000
ROA not after:            Mon 16 Jun 2025 22:26:05 +0000
asID:                     32030
IP address blocks:        45.45.168.0/24 maxlen: 24
                          192.40.141.0/24 maxlen: 24
                          2620:128:7000::/48 maxlen: 48
                          2620:128:7003::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3b:bc:62:77:bb:72:22:ff:f7:16:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1099499-e865-4a58-89d5-0df023af2376
        Validity
            Not Before: Mar 18 22:26:05 2025 GMT
            Not After : Jun 16 22:26:05 2025 GMT
        Subject: CN=fe2347bd-85f7-4b2d-8971-56a51c4eb94e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bb:d5:76:f8:ba:75:f9:20:ba:16:9f:71:f1:
                    53:18:0d:5e:84:c0:e2:1f:82:a4:45:26:57:4a:77:
                    ce:ab:a3:b2:5e:21:28:97:88:36:a0:62:c7:28:36:
                    40:b9:4d:fe:a7:2b:43:e2:35:e6:b1:0c:f2:6e:9a:
                    c9:1e:6f:fe:d9:09:52:47:93:7f:59:05:26:e8:e9:
                    01:16:69:0f:1d:b6:44:35:a3:b7:85:ad:b3:96:68:
                    86:f9:8c:cd:9e:30:3f:22:37:59:4e:fa:0b:61:02:
                    d5:bb:b2:46:4c:ee:11:81:cf:af:a4:c7:15:e3:aa:
                    6f:14:b8:ea:2d:5f:1d:a4:e2:97:97:50:1a:4b:6e:
                    f4:7f:96:e5:b5:6a:db:1c:45:51:50:08:44:5f:f5:
                    1e:44:ac:17:75:9d:62:41:67:11:4b:8e:94:82:11:
                    3e:81:6e:15:a7:b0:46:96:d4:a0:da:b0:dd:03:37:
                    b6:52:87:12:55:ee:c7:5b:84:84:f0:46:5f:20:90:
                    49:61:18:87:3e:9d:99:be:82:c3:54:b0:f0:81:16:
                    df:26:29:8c:8f:70:c8:d7:41:bf:1e:eb:6e:20:05:
                    1d:75:60:33:0a:eb:42:4a:e0:a0:69:00:5f:32:93:
                    0c:3e:fc:51:49:f4:4b:e0:7e:d2:97:dd:ec:d6:67:
                    64:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:28:EF:99:B1:0A:84:67:D7:CC:DD:4A:D0:39:5E:E3:10:AD:9B:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f1099499-e865-4a58-89d5-0df023af2376/b1343bd7-f187-31ce-837b-42ff238b920b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f1099499-e865-4a58-89d5-0df023af2376/f1099499-e865-4a58-89d5-0df023af2376.crl

            X509v3 Authority Key Identifier:
                keyid:C4:83:95:BC:07:81:7D:1D:AE:34:86:BC:A2:03:C2:30:72:E3:46:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f1099499-e865-4a58-89d5-0df023af2376.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.168.0/24
                  192.40.141.0/24
                IPv6:
                  2620:128:7000::/48
                  2620:128:7003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:d7:fd:0c:7d:89:ef:81:99:81:12:09:eb:83:4c:8f:82:25:
         12:97:d3:5d:86:98:fd:b4:c7:b6:db:37:6f:ec:d7:d0:08:12:
         10:7b:22:59:39:10:2d:79:a8:87:3b:3f:20:1a:c9:68:e4:58:
         f0:2a:b2:92:d8:2f:2a:a1:69:cd:f8:59:35:ae:60:4b:98:ff:
         b5:47:9a:87:14:d5:46:6f:69:d4:b9:71:d6:c4:c7:14:5d:0a:
         6e:6c:d9:d1:2a:37:00:c0:ae:f8:a9:16:e8:ff:6c:63:80:d7:
         1d:b3:a6:e5:73:67:7e:67:a2:52:f4:47:15:01:c4:13:f5:00:
         e7:c4:f6:8f:dc:e3:47:d5:1a:c3:3a:9b:a8:cb:3b:d9:33:84:
         8c:61:4e:56:b9:0a:23:21:7d:aa:76:47:9b:2f:a9:b7:15:a6:
         42:df:ca:35:28:2b:8f:31:31:16:6d:93:9d:9c:a9:97:dd:96:
         ef:21:40:0d:b1:c0:46:aa:6e:6b:0a:e8:1c:88:02:04:7f:53:
         5b:87:5a:93:f8:42:fb:fb:35:79:86:9d:b1:e3:ef:b8:49:77:
         33:da:65:ba:16:7d:aa:dc:d3:d5:f7:6a:3d:8f:67:d0:94:f5:
         d4:5f:56:47:f9:72:c1:ac:78:8d:b8:9b:e2:df:8c:7f:b9:f8:
         a7:76:76:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:31 2025 by rpki-client on console.sobornost.net