Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/59de2d00-0639-3e99-91c7-22b2c69b6a0f.roa
File:                     59de2d00-0639-3e99-91c7-22b2c69b6a0f.roa (raw, json)
Hash identifier:          H92QcXAcDAhThXDBEfLIvZwSAlVPhyRB8wBXOVV7dWY=
Subject key identifier:   05:41:D5:B7:79:57:15:13:99:F9:45:22:07:21:B5:EA:5B:75:8D:99
Certificate issuer:       /CN=9ffa2885-cbaa-44e8-babb-180936652b5c
Certificate serial:       010D0C9F432858495D896417ACA1F13285288900
Authority key identifier: 1B:4F:10:EB:F9:FE:83:F4:AB:C9:86:D0:8E:57:63:BD:71:C6:0D:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/59de2d00-0639-3e99-91c7-22b2c69b6a0f.roa
Signing time:             Mon 31 Mar 2025 01:00:47 +0000
ROA not before:           Mon 31 Mar 2025 01:00:47 +0000
ROA not after:            Sun 29 Jun 2025 01:00:47 +0000
asID:                     400410
IP address blocks:        206.168.94.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5d:89:64:17:ac:a1:f1:32:85:28:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ffa2885-cbaa-44e8-babb-180936652b5c
        Validity
            Not Before: Mar 31 01:00:47 2025 GMT
            Not After : Jun 29 01:00:47 2025 GMT
        Subject: CN=56609b5c-10e9-4ebd-8b5b-ad4efeb6ea8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:89:94:f7:6b:29:54:86:15:24:71:2a:d8:fa:
                    86:a1:c8:f0:bb:ed:d1:c8:71:93:32:26:e1:f3:4c:
                    e1:e4:c0:a3:57:69:9a:5d:26:4c:53:ff:62:80:97:
                    e1:a6:ed:6f:83:44:28:23:f7:5f:21:4d:cf:3f:de:
                    e4:67:58:73:c0:ad:38:a7:f6:db:47:58:ee:1e:89:
                    8e:66:77:e8:23:c8:2c:1a:d3:35:55:05:bf:80:ea:
                    86:b9:d9:55:85:69:56:fd:8d:c6:f4:ed:7f:b5:6a:
                    17:02:4a:33:39:05:da:ec:5b:3d:d7:db:e2:d5:f9:
                    02:62:17:04:48:49:6d:fd:9b:5e:48:f9:92:6d:29:
                    50:23:fe:90:72:a4:39:35:de:cb:c3:ff:75:db:28:
                    25:d2:df:c6:45:ae:bf:7b:40:cb:d7:e2:aa:1c:d4:
                    b7:ad:4d:1e:54:06:18:a4:98:a5:64:fc:c4:4e:4e:
                    af:00:ff:e0:5f:96:10:69:05:15:77:f1:2f:8e:e4:
                    89:09:eb:2f:fa:8b:77:27:1f:76:b6:16:6f:2d:f7:
                    42:41:d3:6e:d1:26:e2:43:7f:e5:0d:70:bc:6d:4e:
                    9a:71:87:0f:5c:6b:a9:4f:1a:4c:41:5b:cc:90:de:
                    97:9c:c9:cd:03:0b:b2:13:66:79:26:57:c3:34:6e:
                    66:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:41:D5:B7:79:57:15:13:99:F9:45:22:07:21:B5:EA:5B:75:8D:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/59de2d00-0639-3e99-91c7-22b2c69b6a0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/9ffa2885-cbaa-44e8-babb-180936652b5c.crl

            X509v3 Authority Key Identifier:
                keyid:1B:4F:10:EB:F9:FE:83:F4:AB:C9:86:D0:8E:57:63:BD:71:C6:0D:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:9e:26:69:68:52:12:bd:f7:52:2d:80:ee:bc:70:80:d7:73:
         e0:20:1b:ae:69:92:0a:33:44:36:3e:7c:2b:bf:ca:61:85:6c:
         d6:a9:92:05:22:9f:80:f3:ec:b8:a2:4f:7c:c9:45:93:36:76:
         bc:f6:0b:c1:98:94:b7:4f:b7:fa:64:c3:b9:37:a1:f4:01:81:
         aa:84:c7:af:44:36:0c:0d:a3:7e:68:2b:6f:83:54:56:ab:26:
         58:79:c5:fe:fa:8a:58:0a:58:f1:00:c5:7a:ac:9d:44:37:f6:
         e9:55:8a:1e:57:e5:38:ce:86:23:a3:95:0d:5e:4b:dd:ee:56:
         76:86:d7:db:69:2d:f5:4c:04:10:7a:a2:b5:b3:1b:90:d8:2e:
         c6:84:02:f2:b8:85:5a:48:17:32:ca:9e:d8:62:8d:77:ce:8f:
         eb:90:84:b3:77:2a:73:51:9f:9b:11:72:eb:fe:c1:75:30:63:
         a6:46:7b:6e:21:d9:ef:ee:aa:4f:69:29:44:03:24:d8:ae:26:
         01:2e:b9:5a:f0:63:87:5c:3e:c9:83:40:14:79:8e:e8:5b:6b:
         98:29:45:6a:f9:fe:d9:e8:ca:e2:b2:d4:30:0f:29:45:e1:90:
         d2:af:69:5e:02:36:2b:c5:47:94:f1:d8:e4:55:0a:ed:23:c3:
         5d:bd:3d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:06 2025 by rpki-client on console.sobornost.net