Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/7f0a7d80-d167-30cf-ba27-53d404941cb1.roa
File:                     7f0a7d80-d167-30cf-ba27-53d404941cb1.roa (raw, json)
Hash identifier:          26/f3vhWw3z70uWgQVQN2GUZE0rtILZj6q/BFuqIRLE=
Subject key identifier:   2A:71:55:49:5C:AA:F4:90:B2:4A:68:80:56:B6:0A:C9:7A:A0:4F:4D
Certificate issuer:       /CN=19b60f9c-48d6-4515-ba9c-57166ac85e06
Certificate serial:       010D0C9F4328584975B62D12E8B72898CB7380A0
Authority key identifier: A2:70:59:6A:46:EC:90:D1:D2:A0:C5:FC:44:E1:DD:64:52:43:E8:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/7f0a7d80-d167-30cf-ba27-53d404941cb1.roa
Signing time:             Tue 08 Apr 2025 16:50:28 +0000
ROA not before:           Tue 08 Apr 2025 16:50:28 +0000
ROA not after:            Mon 07 Jul 2025 16:50:28 +0000
asID:                     7950
IP address blocks:        142.87.123.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:b6:2d:12:e8:b7:28:98:cb:73:80:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b60f9c-48d6-4515-ba9c-57166ac85e06
        Validity
            Not Before: Apr  8 16:50:28 2025 GMT
            Not After : Jul  7 16:50:28 2025 GMT
        Subject: CN=3478856b-9e0d-4b62-8054-e5488294a522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:30:6b:b8:35:3a:83:79:ba:a6:2d:1b:9c:af:
                    83:b8:62:90:78:98:ac:cf:0f:ae:d5:66:00:31:29:
                    ed:0b:64:9b:fa:cc:b6:65:ea:f1:52:76:77:2d:51:
                    6f:b8:0d:60:d9:58:54:22:e2:d6:a0:1c:57:06:e5:
                    a0:cb:e2:22:d9:d0:95:4c:51:f1:17:c5:63:3e:1d:
                    c3:b0:97:47:bc:97:1a:7e:7c:47:59:f4:3b:cf:de:
                    0a:5e:14:63:aa:64:ee:12:0e:93:71:7d:c9:ec:c7:
                    aa:37:8b:c9:cf:31:87:aa:d5:05:24:e4:63:b1:ab:
                    c9:94:c8:8e:46:40:4a:c3:e4:eb:18:ce:f4:72:6e:
                    48:7b:ee:40:5a:47:db:25:36:54:70:86:cb:22:fb:
                    14:f9:95:79:4e:dc:fd:ab:f9:7a:c0:e6:8f:f1:db:
                    05:a7:7d:ce:43:99:af:19:fc:dd:88:40:f2:18:4a:
                    5e:a2:56:a8:4f:15:38:67:17:51:92:47:a4:c3:66:
                    26:21:c5:ac:fa:d9:78:c3:d1:38:1d:e6:c5:0e:d8:
                    08:ee:77:c4:72:eb:b2:35:a0:62:2a:43:c9:28:91:
                    e6:5b:44:b0:fb:cf:ad:07:32:df:f2:51:98:6d:98:
                    1d:e0:1a:9a:0c:b3:d2:ba:db:2c:e5:f9:5f:18:2b:
                    35:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:71:55:49:5C:AA:F4:90:B2:4A:68:80:56:B6:0A:C9:7A:A0:4F:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/7f0a7d80-d167-30cf-ba27-53d404941cb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.crl

            X509v3 Authority Key Identifier:
                keyid:A2:70:59:6A:46:EC:90:D1:D2:A0:C5:FC:44:E1:DD:64:52:43:E8:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.87.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:61:9d:ee:f0:af:fa:ec:5b:c6:53:ce:67:1f:3c:4e:38:c8:
         7f:ad:72:3c:87:45:38:3f:82:37:c1:c9:e9:1a:0b:67:17:0e:
         a7:c4:19:20:fa:f6:b7:f4:36:78:d8:ff:40:2e:d4:41:9c:83:
         eb:6b:b4:62:33:e4:29:b5:4b:64:ac:04:4c:63:94:b3:e6:22:
         9f:27:5b:9c:f2:d7:cc:e0:f7:c2:88:ba:24:b9:7c:f0:b2:f4:
         b0:88:56:41:d1:db:13:93:90:08:8b:17:e4:57:6f:f1:63:a0:
         f3:a9:11:bc:5d:45:ba:38:35:18:eb:6a:b5:21:bb:63:0a:e7:
         df:60:ab:cd:8b:72:25:ea:f3:c6:5d:c0:6d:da:68:e2:ce:f5:
         c6:05:a1:1c:58:2d:7e:e6:c6:91:90:b4:2f:99:3a:dd:2b:ac:
         aa:26:bd:7b:d4:16:af:97:74:06:6e:53:c9:9d:ab:ee:ff:26:
         eb:21:99:22:cf:21:6b:1b:03:5b:97:03:48:3e:da:46:23:84:
         9e:94:a4:74:60:66:91:08:6c:4c:b7:10:53:a9:f8:6f:6c:21:
         e0:a5:71:cc:e7:e6:4b:2f:29:36:bd:cc:2e:ca:28:37:19:b0:
         dd:ad:fa:64:e9:8e:c4:b9:e4:4f:2c:13:e7:82:2f:40:38:e0:
         55:0d:1e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:41 2025 by rpki-client on console.sobornost.net