Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f/b5390a6e-8f5e-3278-a987-d95fd8b843b3.roa
File:                     b5390a6e-8f5e-3278-a987-d95fd8b843b3.roa (raw, json)
Hash identifier:          kqxSq2pvlBUx2/uzeBXVNvbZ/D00BMcb9rPLVazIYDM=
Subject key identifier:   2F:81:36:F4:C2:3D:60:A5:34:D9:4C:AD:BA:CA:2F:A0:E1:70:24:C0
Certificate issuer:       /CN=f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f
Certificate serial:       010D0C9F4328584962EAEE5AE0C911829B93D700
Authority key identifier: 7E:A1:A3:48:30:66:8B:7E:61:E9:CC:06:49:B4:5D:82:E1:88:5C:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f/b5390a6e-8f5e-3278-a987-d95fd8b843b3.roa
Signing time:             Tue 01 Apr 2025 23:16:24 +0000
ROA not before:           Tue 01 Apr 2025 23:16:24 +0000
ROA not after:            Mon 30 Jun 2025 23:16:24 +0000
asID:                     46384
IP address blocks:        23.171.64.0/24 maxlen: 24
                          23.171.65.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:62:ea:ee:5a:e0:c9:11:82:9b:93:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f
        Validity
            Not Before: Apr  1 23:16:24 2025 GMT
            Not After : Jun 30 23:16:24 2025 GMT
        Subject: CN=6a372d7a-b339-44db-bcab-8bb6b615efc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:69:a1:0d:9d:4f:e5:34:31:57:09:cf:ff:ee:
                    02:dc:34:0a:56:aa:4a:8b:51:75:47:10:70:02:22:
                    12:70:a0:17:65:d9:bc:99:c7:6d:9c:d9:92:17:0c:
                    27:04:cf:5c:b0:76:fb:08:8d:18:7b:a3:a4:fe:b9:
                    a2:b2:27:aa:0d:07:54:04:6c:cb:64:d5:ea:d9:6a:
                    45:84:f3:ac:26:b6:9c:22:a4:2e:ac:65:c8:8f:a7:
                    1f:b9:93:aa:6a:f9:1e:b2:0d:f7:d9:4b:00:3f:45:
                    a5:a0:16:2e:85:53:1e:2f:a5:a1:1c:b5:6d:33:68:
                    17:a4:61:9e:28:9f:ec:51:24:14:24:71:16:c3:bc:
                    ba:65:8a:c7:aa:ef:a1:a2:b3:94:15:e8:d8:6a:74:
                    e0:77:70:dc:eb:e0:af:a9:06:9e:81:1b:f4:ca:0e:
                    d2:d9:7f:73:47:51:9d:c2:46:d5:22:0a:53:e9:c2:
                    f4:01:68:ac:57:c2:c5:ef:c2:cd:1b:ed:79:ca:f7:
                    61:d2:83:97:ff:aa:ca:c7:e0:d3:78:6c:ce:54:59:
                    db:db:f8:30:ff:8d:4c:25:5a:40:a4:16:fd:15:9d:
                    a2:ff:88:d3:1e:67:c1:80:1a:e7:08:66:40:57:b7:
                    b6:41:fe:e5:bb:44:26:3e:48:e9:04:a2:07:9f:92:
                    4e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:81:36:F4:C2:3D:60:A5:34:D9:4C:AD:BA:CA:2F:A0:E1:70:24:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f/b5390a6e-8f5e-3278-a987-d95fd8b843b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f.crl

            X509v3 Authority Key Identifier:
                keyid:7E:A1:A3:48:30:66:8B:7E:61:E9:CC:06:49:B4:5D:82:E1:88:5C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.171.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:ab:69:ae:9f:fc:ab:fd:6a:cc:c5:9c:30:71:01:27:af:da:
         af:ad:ed:c5:12:31:9b:74:1b:92:a8:7b:c4:50:82:18:c8:24:
         b3:0c:9a:50:f9:f6:4b:17:d7:9e:5a:27:7c:b3:72:6e:05:13:
         0a:57:c1:41:91:5b:3e:45:8e:40:9c:4d:0d:ce:9e:f0:77:3f:
         a3:90:a0:70:1a:73:68:98:98:a8:89:7f:b3:44:49:29:de:ee:
         cd:e8:eb:99:bd:ec:09:c8:63:77:53:b1:a1:72:70:39:03:ce:
         83:37:29:ba:6d:ab:e0:11:8e:18:c2:2c:bf:ee:6e:50:9b:37:
         45:7b:b2:0f:24:37:28:4c:71:ba:03:6d:65:61:a8:b1:42:ba:
         a0:65:ea:1f:35:f6:0e:20:ab:55:89:28:7b:ec:ec:1c:95:c7:
         88:dd:25:aa:a4:2f:63:9f:a1:dd:d1:c6:c9:08:8a:fa:5d:a6:
         11:df:d5:0f:36:ef:e3:b7:63:e1:ab:f9:be:95:53:3d:3e:df:
         3d:64:ed:51:5b:84:18:be:da:70:0d:a5:75:7b:f3:be:61:cd:
         05:5a:85:9e:b2:04:bb:d9:6d:70:d2:34:51:9a:6e:7f:43:4d:
         3c:58:e9:ca:9c:da:6c:9d:a9:5c:78:0d:e5:cc:71:60:74:95:
         36:3d:5b:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEli6u5a4MkRgpuT1wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjRlY2JlOGYtOGIzOC00ZTY4LWJjYWMtMGViYWU0NzRi
YjNmMB4XDTI1MDQwMTIzMTYyNFoXDTI1MDYzMDIzMTYyNFowLzEtMCsGA1UEAxMk
NmEzNzJkN2EtYjMzOS00NGRiLWJjYWItOGJiNmI2MTVlZmMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmmhDZ1P5TQxVwnP/+4C3DQKVqpKi1F1RxBw
AiIScKAXZdm8mcdtnNmSFwwnBM9csHb7CI0Ye6Ok/rmisieqDQdUBGzLZNXq2WpF
hPOsJracIqQurGXIj6cfuZOqavkesg332UsAP0WloBYuhVMeL6WhHLVtM2gXpGGe
KJ/sUSQUJHEWw7y6ZYrHqu+horOUFejYanTgd3Dc6+CvqQaegRv0yg7S2X9zR1Gd
wkbVIgpT6cL0AWisV8LF78LNG+15yvdh0oOX/6rKx+DTeGzOVFnb2/gw/41MJVpA
pBb9FZ2i/4jTHmfBgBrnCGZAV7e2Qf7lu0QmPkjpBKIHn5JOIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC+BNvTCPWClNNlMrbrKL6DhcCTAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mNGVj
YmU4Zi04YjM4LTRlNjgtYmNhYy0wZWJhZTQ3NGJiM2YvYjUzOTBhNmUtOGY1ZS0z
Mjc4LWE5ODctZDk1ZmQ4Yjg0M2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjRlY2JlOGYtOGIzOC00ZTY4LWJj
YWMtMGViYWU0NzRiYjNmL2Y0ZWNiZThmLThiMzgtNGU2OC1iY2FjLTBlYmFlNDc0
YmIzZi5jcmwwHwYDVR0jBBgwFoAUfqGjSDBmi35h6cwGSbRdguGIXBMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9mNGVjYmU4Zi04YjM4LTRlNjgtYmNhYy0wZWJh
ZTQ3NGJiM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF6tAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFyraa6f/Kv9aszFnDBxASev2q+t7cUSMZt0G5Koe8RQghjIJLMMmlD5
9ksX155aJ3yzcm4FEwpXwUGRWz5FjkCcTQ3OnvB3P6OQoHAac2iYmKiJf7NESSne
7s3o65m97AnIY3dTsaFycDkDzoM3Kbptq+ARjhjCLL/ublCbN0V7sg8kNyhMcboD
bWVhqLFCuqBl6h819g4gq1WJKHvs7ByVx4jdJaqkL2Ofod3RxskIivpdphHf1Q82
7+O3Y+Gr+b6VUz0+3z1k7VFbhBi+2nANpXV7875hzQVahZ6yBLvZbXDSNFGabn9D
TTxY6cqc2mydqVx4DeXMcWB0lTY9W14=
-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:21 2025 by rpki-client on console.sobornost.net