Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/73e070ad-ae12-346b-bf5e-06f581d4e225.roa
File:                     73e070ad-ae12-346b-bf5e-06f581d4e225.roa (raw, json)
Hash identifier:          ef00iksYyheHCVDgG928K63d8UgzTYdUr/J39FeAQr4=
Subject key identifier:   9F:F5:52:61:61:C8:B7:CC:56:4B:44:22:61:6F:1C:A7:E6:B1:21:F6
Certificate issuer:       /CN=41810617-fa0e-48cc-badf-1b017add1f3e
Certificate serial:       010D0C9F432858496A2F7381F49229C9489EC500
Authority key identifier: 7A:26:81:C9:09:F1:CC:38:B7:DF:FE:A1:D0:20:6D:4D:0A:BC:F8:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/73e070ad-ae12-346b-bf5e-06f581d4e225.roa
Signing time:             Fri 04 Apr 2025 13:45:07 +0000
ROA not before:           Fri 04 Apr 2025 13:45:07 +0000
ROA not after:            Thu 03 Jul 2025 13:45:07 +0000
asID:                     23471
IP address blocks:        67.219.138.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:2f:73:81:f4:92:29:c9:48:9e:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41810617-fa0e-48cc-badf-1b017add1f3e
        Validity
            Not Before: Apr  4 13:45:07 2025 GMT
            Not After : Jul  3 13:45:07 2025 GMT
        Subject: CN=92abeda9-12cb-4394-bf25-17e1bd8c7ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0f:58:66:50:19:66:d9:13:66:73:0d:88:77:
                    73:ac:fc:50:c4:02:19:2d:58:fa:1f:b8:10:e1:ac:
                    c5:a0:f7:2b:8a:b4:ff:02:98:f2:ad:58:b7:18:4b:
                    f2:46:94:c6:d7:08:0f:40:68:68:2b:8c:b8:52:0d:
                    ec:b2:da:a8:ac:e7:d6:ca:7a:96:fa:c6:cf:fc:ef:
                    cd:3d:12:48:75:0e:b8:ec:42:fe:61:37:44:96:56:
                    2c:07:d0:88:2f:66:69:f7:44:2a:9b:c0:7c:1e:05:
                    9d:b8:7d:67:07:32:92:bb:cd:b5:b4:b7:68:a5:cb:
                    f7:a3:73:79:ec:5a:53:32:0d:69:ef:bc:22:5d:46:
                    2c:be:f8:5d:20:17:94:64:93:4c:56:8c:a3:2d:17:
                    0e:d2:83:07:48:ea:f7:b5:df:82:de:8b:85:84:ef:
                    2e:9b:08:ea:d4:d9:bc:03:1f:13:76:27:8a:f0:a3:
                    e9:45:e6:47:8a:25:11:18:78:4b:4d:a7:f2:82:97:
                    e7:82:0c:bd:2c:0d:f3:e2:c7:5f:2f:24:8d:bb:fa:
                    72:78:5e:61:77:2a:12:ee:6f:ff:bf:0a:70:dd:21:
                    0b:cb:6c:31:7c:84:c4:fd:bc:7b:19:c1:46:8c:07:
                    b1:a1:0c:af:53:24:90:72:87:ea:54:ac:60:58:83:
                    75:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F5:52:61:61:C8:B7:CC:56:4B:44:22:61:6F:1C:A7:E6:B1:21:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/73e070ad-ae12-346b-bf5e-06f581d4e225.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/41810617-fa0e-48cc-badf-1b017add1f3e.crl

            X509v3 Authority Key Identifier:
                keyid:7A:26:81:C9:09:F1:CC:38:B7:DF:FE:A1:D0:20:6D:4D:0A:BC:F8:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e1:c6:7e:fc:84:4c:8b:46:ad:6a:dc:0b:bc:3f:bb:73:c8:be:
         ca:cc:13:08:48:8b:72:08:90:f0:74:58:d8:66:17:01:d0:91:
         11:b5:2e:bd:f0:73:ee:ee:0e:76:0d:95:f3:c3:24:57:92:2d:
         c2:b5:44:fe:f8:ec:13:2f:f4:ad:37:c4:44:bf:5f:d6:70:bc:
         b2:e4:55:1e:22:e5:6d:06:5b:84:20:97:4e:72:4c:d5:81:f7:
         ab:01:84:37:2e:43:94:ad:2e:da:75:c1:24:91:84:94:d6:1a:
         c4:aa:e1:ae:1d:33:5d:e3:70:28:75:ca:e7:9b:13:24:8b:03:
         b2:4d:87:04:7b:1e:af:b9:fc:96:bd:58:21:27:16:22:bc:84:
         0a:f2:3b:79:6a:66:1d:6c:10:20:69:78:5b:2b:1a:cf:3e:d8:
         60:f9:d6:2e:67:65:96:09:21:9e:ba:c7:da:bc:7f:96:72:60:
         9a:0c:0c:ef:61:75:ff:e6:e1:d2:f8:53:8f:b6:f6:2f:8c:27:
         fe:3d:0d:dd:1a:f7:09:53:bd:5c:6d:49:21:b9:ba:c8:ae:24:
         30:96:ee:f9:dc:71:1a:d0:fd:d4:4a:54:95:04:4e:cf:6a:c1:
         f2:ba:8e:d2:a7:96:ba:ee:23:be:0e:9b:89:85:59:ca:a0:ca:
         03:62:76:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqL3OB9JIpyUiexQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDE4MTA2MTctZmEwZS00OGNjLWJhZGYtMWIwMTdhZGQx
ZjNlMB4XDTI1MDQwNDEzNDUwN1oXDTI1MDcwMzEzNDUwN1owLzEtMCsGA1UEAxMk
OTJhYmVkYTktMTJjYi00Mzk0LWJmMjUtMTdlMWJkOGM3Y2E5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwA9YZlAZZtkTZnMNiHdzrPxQxAIZLVj6H7gQ
4azFoPcrirT/ApjyrVi3GEvyRpTG1wgPQGhoK4y4Ug3sstqorOfWynqW+sbP/O/N
PRJIdQ647EL+YTdEllYsB9CIL2Zp90Qqm8B8HgWduH1nBzKSu821tLdopcv3o3N5
7FpTMg1p77wiXUYsvvhdIBeUZJNMVoyjLRcO0oMHSOr3td+C3ouFhO8umwjq1Nm8
Ax8TdieK8KPpReZHiiURGHhLTafygpfnggy9LA3z4sdfLySNu/pyeF5hdyoS7m//
vwpw3SELy2wxfITE/bx7GcFGjAexoQyvUySQcofqVKxgWIN1hQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ/1UmFhyLfMVktEImFvHKfmsSH2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80MTgx
MDYxNy1mYTBlLTQ4Y2MtYmFkZi0xYjAxN2FkZDFmM2UvNzNlMDcwYWQtYWUxMi0z
NDZiLWJmNWUtMDZmNTgxZDRlMjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDE4MTA2MTctZmEwZS00OGNjLWJh
ZGYtMWIwMTdhZGQxZjNlLzQxODEwNjE3LWZhMGUtNDhjYy1iYWRmLTFiMDE3YWRk
MWYzZS5jcmwwHwYDVR0jBBgwFoAUeiaByQnxzDi33/6h0CBtTQq8+HowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi80MTgxMDYxNy1mYTBlLTQ4Y2MtYmFkZi0xYjAx
N2FkZDFmM2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9uKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAOHGfvyETItGrWrcC7w/u3PIvsrMEwhIi3IIkPB0WNhmFwHQkRG1Lr3w
c+7uDnYNlfPDJFeSLcK1RP747BMv9K03xES/X9ZwvLLkVR4i5W0GW4Qgl05yTNWB
96sBhDcuQ5StLtp1wSSRhJTWGsSq4a4dM13jcCh1yuebEySLA7JNhwR7Hq+5/Ja9
WCEnFiK8hAryO3lqZh1sECBpeFsrGs8+2GD51i5nZZYJIZ66x9q8f5ZyYJoMDO9h
df/m4dL4U4+29i+MJ/49Dd0a9wlTvVxtSSG5usiuJDCW7vnccRrQ/dRKVJUETs9q
wfK6jtKnlrruI74Om4mFWcqgygNidrM=
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:06 2025 by rpki-client on console.sobornost.net