Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f5354d62-8c66-4153-8fd6-c06a9dacd989/6f41c0fc-102d-35bd-b167-1fa50d0900fb.roa
File:                     6f41c0fc-102d-35bd-b167-1fa50d0900fb.roa (raw, json)
Hash identifier:          WFZIcnIouXrPeJULrWi1Grk1B60+LDrd5kK1KwMNkZw=
Subject key identifier:   7B:DC:A2:82:57:63:D8:C9:87:E6:75:67:4E:91:B3:14:A3:17:C8:C6
Certificate issuer:       /CN=f5354d62-8c66-4153-8fd6-c06a9dacd989
Certificate serial:       010D0C9F4328584975379EAE98C8E96409744940
Authority key identifier: 27:7F:52:E8:44:B7:9E:C3:0D:D7:87:5A:3E:AB:C3:54:41:53:FD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f5354d62-8c66-4153-8fd6-c06a9dacd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f5354d62-8c66-4153-8fd6-c06a9dacd989/6f41c0fc-102d-35bd-b167-1fa50d0900fb.roa
Signing time:             Tue 08 Apr 2025 12:35:28 +0000
ROA not before:           Tue 08 Apr 2025 12:35:28 +0000
ROA not after:            Mon 07 Jul 2025 12:35:28 +0000
asID:                     2914
IP address blocks:        192.84.48.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:37:9e:ae:98:c8:e9:64:09:74:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5354d62-8c66-4153-8fd6-c06a9dacd989
        Validity
            Not Before: Apr  8 12:35:28 2025 GMT
            Not After : Jul  7 12:35:28 2025 GMT
        Subject: CN=f1bd1146-0d41-4c78-b603-b2bf962bc8a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3c:c8:e0:50:06:45:69:56:78:4a:08:16:dc:
                    56:35:6d:01:a4:cd:6a:73:1e:a7:11:07:18:00:a0:
                    2c:dc:3d:28:ef:82:7a:e8:76:86:22:29:82:31:f5:
                    83:1f:41:58:b4:50:8c:29:d2:99:c3:6e:4c:3d:d5:
                    eb:39:af:87:c0:9d:f4:ed:5e:39:40:b3:62:56:12:
                    55:65:e7:cb:5f:ff:58:36:b6:aa:30:21:a2:c9:2b:
                    80:dd:c7:50:2b:a7:84:2a:8f:20:03:8c:68:08:26:
                    36:96:31:6f:d0:16:90:03:ad:4a:35:a7:ba:31:bc:
                    cb:73:8a:f3:fd:13:52:cc:b3:b1:b5:2e:b2:b6:86:
                    00:45:81:a4:89:8b:4e:4c:ab:0c:bf:fe:e1:43:fa:
                    10:8f:ab:d3:20:82:e4:9a:2a:d9:a1:d3:fb:58:0e:
                    3e:fa:4a:14:58:2c:a0:53:0d:ef:d8:37:0e:64:a1:
                    a0:4c:1f:c6:0e:4a:26:62:18:13:15:f5:51:78:97:
                    e7:ea:94:45:8f:9c:c4:f1:7a:84:42:3f:db:f1:11:
                    9c:82:08:a9:22:a0:46:b7:6b:9d:36:7f:5d:f6:bb:
                    97:91:5f:84:c0:d9:1b:a5:06:08:12:af:cf:c0:5c:
                    01:d5:e3:d1:d4:10:ca:fb:65:67:9d:ab:62:96:1b:
                    6e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DC:A2:82:57:63:D8:C9:87:E6:75:67:4E:91:B3:14:A3:17:C8:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f5354d62-8c66-4153-8fd6-c06a9dacd989/6f41c0fc-102d-35bd-b167-1fa50d0900fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f5354d62-8c66-4153-8fd6-c06a9dacd989/f5354d62-8c66-4153-8fd6-c06a9dacd989.crl

            X509v3 Authority Key Identifier:
                keyid:27:7F:52:E8:44:B7:9E:C3:0D:D7:87:5A:3E:AB:C3:54:41:53:FD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f5354d62-8c66-4153-8fd6-c06a9dacd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.84.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:eb:96:21:21:4b:8d:2f:0a:0f:9e:a3:cd:15:fa:3b:70:d0:
         83:88:fb:fc:9b:58:0d:46:7f:74:fa:89:cd:33:54:a6:c3:87:
         77:8d:0c:5e:8c:ef:da:fe:ac:a2:76:5d:ea:4b:ab:cb:32:f3:
         f6:3b:b2:ee:48:d5:1a:9a:7c:85:b4:54:de:7d:4f:bb:a1:07:
         9d:f2:26:a4:31:13:f5:ba:c5:af:6f:b0:4d:11:dd:ec:d8:81:
         bf:b6:c9:d3:11:06:b5:66:d5:a3:92:90:15:01:22:74:88:27:
         7c:43:ae:b2:0d:87:1e:73:73:6b:8b:7d:28:e8:4b:40:4c:62:
         78:7d:8f:b8:3a:44:b1:36:cf:cb:96:b0:3d:c8:72:59:da:9e:
         50:cc:08:00:2b:9a:08:84:73:bd:47:24:91:22:ad:b1:00:63:
         ce:74:17:6a:77:c9:46:c3:9d:fc:1c:91:c8:bc:20:62:2d:27:
         e7:b9:50:aa:7e:2d:57:66:79:74:66:2f:a0:9d:7a:14:5a:90:
         22:0f:14:e4:3b:7f:bc:da:ca:34:86:8a:88:f2:5d:b2:da:ce:
         d4:0f:12:03:a1:0c:bb:bf:cb:10:89:2f:8c:bd:b4:30:4d:5e:
         bc:70:95:71:79:29:cd:e7:7d:7a:29:a4:2a:69:44:e9:ff:5f:
         74:2a:84:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:59 2025 by rpki-client on console.sobornost.net