Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c0c1427-027c-46e0-badf-264566cd16de/14f473a4-6c37-3710-93eb-0ece4af50889.roa
File:                     14f473a4-6c37-3710-93eb-0ece4af50889.roa (raw, json)
Hash identifier:          G5Jc5iSzERDJeKawJXRrYgbwt1cdk5S5YftjdqDlnYU=
Subject key identifier:   93:52:86:9D:6C:47:3C:E5:90:3F:C4:E8:8F:25:A3:CF:56:23:45:A9
Certificate issuer:       /CN=9c0c1427-027c-46e0-badf-264566cd16de
Certificate serial:       010D0C9F432858497AD9AC8A02CC78466B52F980
Authority key identifier: FA:E7:0D:DE:26:03:F4:B9:58:40:79:E2:88:77:68:0B:DF:B9:60:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c0c1427-027c-46e0-badf-264566cd16de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c0c1427-027c-46e0-badf-264566cd16de/14f473a4-6c37-3710-93eb-0ece4af50889.roa
Signing time:             Thu 10 Apr 2025 13:00:59 +0000
ROA not before:           Thu 10 Apr 2025 13:00:59 +0000
ROA not after:            Wed 09 Jul 2025 13:00:59 +0000
asID:                     7018
IP address blocks:        23.132.116.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7a:d9:ac:8a:02:cc:78:46:6b:52:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0c1427-027c-46e0-badf-264566cd16de
        Validity
            Not Before: Apr 10 13:00:59 2025 GMT
            Not After : Jul  9 13:00:59 2025 GMT
        Subject: CN=5c70fc56-1d53-48d3-8e6d-48c1bdf8ebdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ad:2e:51:85:e0:5e:91:5f:43:ec:85:36:44:
                    cf:3d:ff:db:ca:a8:10:24:c3:54:a6:c8:0d:a9:73:
                    b0:e7:d4:4b:bc:b5:87:9a:91:f0:69:3e:85:43:c0:
                    be:3b:8e:0d:d4:8c:3f:e0:f3:8c:aa:b7:92:67:11:
                    54:78:12:6f:a0:1d:ff:dc:83:df:aa:4b:69:f6:02:
                    81:8d:60:14:a5:09:86:94:29:e7:b1:9c:80:11:10:
                    7a:01:ac:31:c3:97:77:93:17:a3:c0:7c:a1:2d:55:
                    82:1a:27:44:d8:ed:2e:98:61:8b:13:e8:dc:20:04:
                    ef:f5:a6:c9:13:ae:af:5e:3d:bf:74:ee:62:d4:f1:
                    e8:17:78:3d:b2:ea:fb:b0:45:44:a5:58:00:f7:78:
                    b9:b1:f8:8a:7d:59:02:9f:03:94:3c:4d:a5:87:3b:
                    70:57:95:b2:c7:61:5c:ed:72:0a:91:e8:8b:a9:89:
                    72:e8:9c:3e:b8:18:fd:34:e7:c9:66:fd:38:25:bc:
                    ff:9b:9e:b5:f7:91:c1:d2:73:b6:95:69:0e:69:fd:
                    4c:fe:67:a9:ed:d0:22:81:92:3a:cf:5a:91:2c:b8:
                    6e:82:86:b0:16:9d:86:28:e1:0a:dd:d7:b6:bb:d1:
                    6e:8b:f3:7a:12:40:b0:29:3d:71:1e:03:ec:7a:c7:
                    f9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:52:86:9D:6C:47:3C:E5:90:3F:C4:E8:8F:25:A3:CF:56:23:45:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c0c1427-027c-46e0-badf-264566cd16de/14f473a4-6c37-3710-93eb-0ece4af50889.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c0c1427-027c-46e0-badf-264566cd16de/9c0c1427-027c-46e0-badf-264566cd16de.crl

            X509v3 Authority Key Identifier:
                keyid:FA:E7:0D:DE:26:03:F4:B9:58:40:79:E2:88:77:68:0B:DF:B9:60:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c0c1427-027c-46e0-badf-264566cd16de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:5f:c0:6d:e4:08:df:19:4e:6e:1e:96:b8:a6:8d:f9:b6:90:
         4b:67:3a:67:71:46:20:ea:ed:75:b9:24:01:0e:4c:64:d8:7c:
         50:e7:13:24:d7:2f:2e:ca:da:dc:e3:48:11:a9:91:ee:3e:84:
         61:5b:1d:68:73:56:db:ec:51:8c:37:70:68:6f:8c:a7:a8:d2:
         74:60:87:fd:72:5d:07:fd:1b:72:73:1c:46:50:ba:07:95:b9:
         7e:3a:46:cd:c0:79:d3:96:d0:1a:d4:87:18:de:f5:bf:c3:09:
         6c:53:29:46:65:06:e1:ba:e9:3a:48:35:bf:d8:ca:c2:ec:b3:
         5e:4b:84:59:47:c8:42:f7:40:e0:50:5a:e5:8c:f4:be:8a:a6:
         84:f7:fb:e4:5f:e6:df:2e:59:3d:20:36:79:ee:d0:71:ba:44:
         a7:24:19:5f:14:3e:0a:86:c1:b6:22:5d:53:bb:09:52:4c:63:
         98:5d:d4:10:98:4b:9e:b2:13:50:16:17:5b:08:4d:6f:c8:0b:
         4c:dd:f5:45:5d:8f:b0:1c:3e:ef:27:49:2c:fa:a5:8a:ae:70:
         9f:6e:34:fd:67:6a:92:27:8e:aa:63:d2:0a:34:a2:61:69:fa:
         99:86:19:bf:a7:e8:11:e8:ee:72:1c:dd:25:ab:77:f0:75:db:
         92:88:90:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 10:55:00 2025 by rpki-client on console.sobornost.net