Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c/2670296f-b353-309c-ad96-a0e12b7068a5.roa
File:                     2670296f-b353-309c-ad96-a0e12b7068a5.roa (raw, json)
Hash identifier:          W6aDSt6gyaO5pJNyLZ84JfkiDmrkW95nAmAD3NjsTBo=
Subject key identifier:   BD:79:87:26:B9:56:1B:72:B3:57:1D:FF:97:31:46:14:32:FB:66:8F
Certificate issuer:       /CN=86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c
Certificate serial:       010D0C9F432858496F547978C8773C9659EB3DE0
Authority key identifier: 3C:AB:4A:18:60:AF:91:D3:E6:3F:C9:E5:F3:FA:8A:06:82:25:C3:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c/2670296f-b353-309c-ad96-a0e12b7068a5.roa
Signing time:             Sun 06 Apr 2025 09:58:45 +0000
ROA not before:           Sun 06 Apr 2025 09:58:45 +0000
ROA not after:            Sat 05 Jul 2025 09:58:45 +0000
asID:                     8095
IP address blocks:        23.182.104.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:54:79:78:c8:77:3c:96:59:eb:3d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c
        Validity
            Not Before: Apr  6 09:58:45 2025 GMT
            Not After : Jul  5 09:58:45 2025 GMT
        Subject: CN=2ca70440-cbd7-4c84-a334-b2e1707e41c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1b:a8:49:ba:98:88:e4:dd:27:de:cd:ba:79:
                    cb:47:39:d4:62:98:32:7a:a2:03:03:3f:85:f9:30:
                    40:18:c2:2f:36:56:f8:e3:7d:bd:dd:9a:5e:36:d8:
                    eb:b4:54:a8:85:fb:5b:f7:23:76:b5:cf:11:16:a2:
                    26:d8:2f:eb:c7:65:9f:ac:81:2b:31:20:99:cf:14:
                    df:67:54:ce:55:2e:18:70:d7:dd:70:b2:7c:ef:7d:
                    ca:f9:1e:ca:84:43:7a:58:ad:85:c7:41:97:42:4f:
                    11:4b:e7:ca:e6:ea:3c:70:74:a8:74:36:cd:c9:8f:
                    8b:4b:c5:0f:1a:01:df:75:99:7c:5c:63:47:fd:9b:
                    8b:71:57:6f:e7:33:b4:59:e6:b5:2f:1d:f5:ab:90:
                    c1:c0:0e:83:c0:5a:36:b9:0f:4f:02:48:fa:c5:77:
                    3f:b3:80:d7:10:87:91:92:34:5a:4b:bf:91:44:e4:
                    b1:82:7f:94:f8:a3:bf:84:01:13:f0:28:bf:5a:a7:
                    81:db:f5:3e:58:80:53:ea:83:55:b7:17:82:d8:26:
                    f9:68:86:20:4e:0f:ed:30:ad:55:87:77:32:c9:ee:
                    34:4c:c7:7b:10:e9:8a:c4:59:31:7c:28:c0:0d:54:
                    f6:2f:bf:42:ec:12:89:a6:54:fc:4e:b6:31:73:87:
                    ef:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:79:87:26:B9:56:1B:72:B3:57:1D:FF:97:31:46:14:32:FB:66:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c/2670296f-b353-309c-ad96-a0e12b7068a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.crl

            X509v3 Authority Key Identifier:
                keyid:3C:AB:4A:18:60:AF:91:D3:E6:3F:C9:E5:F3:FA:8A:06:82:25:C3:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.182.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:ce:5b:6c:a6:4f:6b:7f:18:fc:ab:d6:17:71:64:c8:d2:2f:
         25:d7:08:b8:22:7a:fb:8b:a3:69:b8:a4:33:a3:20:56:c6:3c:
         95:e9:f7:c2:a3:9e:d8:b5:1b:c0:2c:5b:fd:9f:1a:85:13:46:
         13:6f:37:f1:99:24:e9:cb:a1:85:29:27:47:42:b8:6c:b7:68:
         c8:16:47:f0:22:60:39:a3:df:a5:5e:cc:22:0c:f5:bd:80:5e:
         de:24:94:06:68:da:3f:ee:11:d5:40:57:c3:5a:21:05:78:82:
         56:6e:af:f8:34:8a:87:20:fc:47:e3:15:33:8e:dc:06:ad:a5:
         1c:1a:7a:8c:6f:4c:09:df:ee:7b:78:87:9e:76:44:cd:13:11:
         eb:2d:c4:b1:23:c5:59:70:59:b8:6d:ca:48:d6:2e:f4:15:b7:
         01:1d:e7:a9:2b:f2:0d:ec:aa:98:5a:b9:59:52:b3:d8:73:58:
         7b:09:e3:82:12:6f:86:a0:54:eb:3a:70:96:58:c0:69:25:ce:
         94:49:e9:cf:e7:2c:f3:84:2d:26:57:52:57:cb:ab:29:75:e4:
         25:c7:a6:0f:4c:19:2e:c8:77:13:b8:94:0f:9a:27:3f:5e:2a:
         cd:ea:e2:e3:b2:f4:c5:03:67:3c:c7:07:49:e3:c3:5a:82:4f:
         df:3d:1c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:59 2025 by rpki-client on console.sobornost.net