Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/578adb16-4a4b-32cd-8347-9e1f27e38740.roa
File:                     578adb16-4a4b-32cd-8347-9e1f27e38740.roa (raw, json)
Hash identifier:          4DSwc5o/WicOFqMAlMScFu6DXg4ljFJHCQIBQZ20yMU=
Subject key identifier:   8A:5A:87:62:40:5B:57:B5:5D:04:76:B3:F5:D7:2A:B8:45:30:05:B2
Certificate issuer:       /CN=6f599815-aa39-4cb1-86b8-df65da50cb35
Certificate serial:       010D0C9F432858497AB6D337AE3EE3C6A4FB7C80
Authority key identifier: 00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/578adb16-4a4b-32cd-8347-9e1f27e38740.roa
Signing time:             Thu 10 Apr 2025 11:50:49 +0000
ROA not before:           Thu 10 Apr 2025 11:50:49 +0000
ROA not after:            Wed 09 Jul 2025 11:50:49 +0000
asID:                     214189
IP address blocks:        2607:eb40:beef::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7a:b6:d3:37:ae:3e:e3:c6:a4:fb:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f599815-aa39-4cb1-86b8-df65da50cb35
        Validity
            Not Before: Apr 10 11:50:49 2025 GMT
            Not After : Jul  9 11:50:49 2025 GMT
        Subject: CN=5bff1a50-67ae-40bf-b60e-0cba54242e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d6:07:b5:7c:43:c3:f9:ad:aa:92:3f:da:a0:
                    a9:1f:f5:c7:72:ac:2b:e4:96:6f:5f:ae:79:c1:94:
                    c2:a7:36:5e:7a:74:c2:a7:e5:9c:10:ff:ea:df:66:
                    43:20:7a:d3:49:21:43:67:7c:f9:c1:01:74:97:18:
                    9f:b9:39:ff:18:82:a4:9f:f3:37:af:7b:c8:e0:64:
                    87:8d:22:a5:94:f6:af:60:6a:ec:81:04:94:dd:dd:
                    5e:dd:c4:0b:dc:06:b2:26:87:9e:b2:1e:9f:c1:19:
                    e7:cb:d0:4e:fe:a5:d5:5b:88:37:10:d7:4d:06:14:
                    4c:56:5f:a4:fc:12:38:2c:20:11:22:ed:c3:24:0e:
                    9c:1a:d6:42:ea:55:a1:4f:06:0d:4c:d0:02:f4:2f:
                    9b:86:56:84:55:90:db:3f:13:5c:d6:08:27:72:35:
                    5b:06:a3:3e:8f:24:de:20:f9:9b:8a:d5:dd:92:d1:
                    39:17:8c:bd:16:7d:03:c6:89:8b:3e:aa:f3:be:ea:
                    c2:df:41:d0:38:36:6c:9f:7c:94:70:13:4f:7e:66:
                    7f:a4:3e:3e:07:98:51:ee:ce:26:b7:bd:1a:9c:de:
                    e2:f6:69:a6:6e:30:f6:47:1b:87:9e:ce:87:39:98:
                    e1:d5:6c:b0:8a:ae:0b:7c:76:c8:4e:88:5f:c0:dc:
                    49:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5A:87:62:40:5B:57:B5:5D:04:76:B3:F5:D7:2A:B8:45:30:05:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/578adb16-4a4b-32cd-8347-9e1f27e38740.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.crl

            X509v3 Authority Key Identifier:
                keyid:00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:eb40:beef::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:99:2b:61:b9:79:01:31:a8:f5:f5:8e:7b:c4:5d:c6:00:60:
         68:0e:f4:2f:63:d1:71:4c:10:35:3b:b9:8b:81:2f:8a:cd:4b:
         2c:84:63:3e:f0:ef:fe:59:03:41:8f:bf:90:e7:89:a3:65:81:
         e6:d0:fa:b6:04:3a:1b:aa:97:f6:2c:f0:17:ef:d3:c9:58:7c:
         e8:1a:03:c5:2b:26:70:ce:7e:d4:b6:db:7b:80:6b:c5:e7:a7:
         67:b9:e4:74:bf:f3:88:44:ad:93:77:52:83:50:b1:77:71:37:
         d0:ba:d3:7c:0e:ad:e2:e9:13:bb:9c:5f:e6:35:2b:fd:95:73:
         07:63:b1:f2:70:c0:11:06:2c:32:5b:d5:d4:e2:da:34:f6:7b:
         fb:8e:f9:db:ad:da:7f:78:23:e0:e3:35:f9:80:d8:18:56:40:
         10:3d:5c:e4:2e:53:fd:1d:b6:ff:d5:79:17:df:d7:c6:de:54:
         a4:88:2e:f3:63:27:d7:e6:3a:ee:98:22:2a:51:0f:c7:72:63:
         7b:8d:5b:00:21:be:47:ca:83:8b:0c:7e:1c:ac:00:f0:30:bc:
         cf:97:85:57:65:e0:7a:29:c3:1a:72:e2:31:d4:01:07:28:7f:
         e1:e6:fc:5b:0f:64:d4:a1:5b:1e:eb:8a:d5:ce:b1:d9:f9:81:
         8f:c3:7b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:21 2025 by rpki-client on console.sobornost.net