Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/43dc40f1-723f-38ef-a7ca-cfc03a13a364.roa
File:                     43dc40f1-723f-38ef-a7ca-cfc03a13a364.roa (raw, json)
Hash identifier:          J9gFliS63n0OrIXe46C5ZMpxO7EL3t/NNBcSQzZzWmE=
Subject key identifier:   2D:78:A2:59:19:BB:0E:2A:21:47:70:EC:17:56:B4:F6:4D:4C:28:34
Certificate issuer:       /CN=acc14dc4-6768-43c1-9d95-c89a552020c1
Certificate serial:       010D0C9F4328584978822659E8B005B7B66321E0
Authority key identifier: 22:E0:BD:D1:6D:77:45:BC:65:37:F2:40:C2:45:DC:3F:AA:A3:86:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/43dc40f1-723f-38ef-a7ca-cfc03a13a364.roa
Signing time:             Wed 09 Apr 2025 16:53:04 +0000
ROA not before:           Wed 09 Apr 2025 16:53:04 +0000
ROA not after:            Tue 08 Jul 2025 16:53:04 +0000
asID:                     63025
IP address blocks:        95.214.176.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:82:26:59:e8:b0:05:b7:b6:63:21:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc14dc4-6768-43c1-9d95-c89a552020c1
        Validity
            Not Before: Apr  9 16:53:04 2025 GMT
            Not After : Jul  8 16:53:04 2025 GMT
        Subject: CN=f2a8e3e9-660b-41de-ba87-690d0053f0e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:51:20:d4:1c:25:c2:4f:1f:29:45:3b:7e:2c:
                    0d:77:54:b6:96:65:c5:87:9f:09:2b:90:27:1d:c4:
                    b1:c0:d0:62:b1:96:05:78:be:ed:e4:d9:52:e5:bb:
                    08:b5:39:39:9f:4b:6d:e3:c3:47:41:9f:18:00:90:
                    45:63:ba:f1:07:15:e3:6f:1e:c7:a1:41:b1:d8:33:
                    ad:62:47:e7:90:20:43:c1:07:78:8b:90:04:26:4a:
                    90:e1:1d:ca:c9:33:e6:14:ce:6c:ba:f7:3c:c5:e3:
                    aa:d3:b3:b6:e2:f8:71:6e:70:6c:4c:2a:f3:43:35:
                    7e:28:c2:e8:1d:82:7a:63:17:fe:8f:5c:fe:e6:d4:
                    ff:20:8e:0f:bf:cc:f6:fe:41:01:18:71:4b:15:80:
                    a7:68:94:53:1c:db:fb:3b:33:4c:93:ee:3b:fd:7c:
                    df:84:ad:89:58:de:dd:61:61:fa:23:91:89:c0:25:
                    78:30:06:ee:6c:be:fd:ab:3a:67:92:83:b4:ab:bf:
                    d3:27:07:12:75:03:03:a8:45:da:b2:90:23:88:0b:
                    5f:23:18:5a:fc:77:61:05:11:7a:56:cf:18:79:2e:
                    4a:c6:6f:71:46:9e:3f:17:4f:98:3f:65:ff:4f:1b:
                    46:54:01:3d:f9:85:d9:52:eb:4a:7a:2b:9c:04:88:
                    e7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:78:A2:59:19:BB:0E:2A:21:47:70:EC:17:56:B4:F6:4D:4C:28:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/43dc40f1-723f-38ef-a7ca-cfc03a13a364.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/acc14dc4-6768-43c1-9d95-c89a552020c1.crl

            X509v3 Authority Key Identifier:
                keyid:22:E0:BD:D1:6D:77:45:BC:65:37:F2:40:C2:45:DC:3F:AA:A3:86:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.214.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:fa:65:bd:41:ca:81:1c:6d:87:7c:5c:d3:31:75:00:28:3a:
         e2:d3:20:18:66:f2:d8:7b:db:f1:ba:86:41:b5:4c:bc:20:6c:
         1a:44:d3:ec:56:d7:b3:aa:62:ff:42:54:57:ab:eb:65:cc:72:
         30:4f:40:ae:53:2c:65:cc:57:95:f0:77:ac:e1:79:8d:6f:a0:
         8e:f1:c3:1e:2a:bf:51:3f:1a:09:fc:98:82:99:7a:3c:81:61:
         e7:5e:f3:ba:5f:ca:ea:33:10:ea:61:59:ff:35:2e:5c:8f:3a:
         e8:87:fb:cb:bd:48:41:44:43:6f:1e:15:2a:b5:d8:09:62:88:
         e6:28:14:bf:90:31:ce:38:c5:c3:21:8d:02:a1:7e:60:b3:67:
         a1:ef:92:bd:08:e4:ef:c8:75:fa:c7:55:d4:fc:73:fe:a0:1c:
         aa:4e:11:5e:23:42:ec:21:f5:ac:37:84:53:57:38:c5:f2:93:
         ec:62:a7:77:85:60:9c:68:70:77:2a:bb:75:cf:29:68:11:af:
         b1:23:ab:18:1f:41:99:36:d2:e7:16:70:c3:30:3e:95:f4:ad:
         58:21:48:47:c9:5f:79:40:c7:67:08:f1:c5:30:53:32:c6:40:
         e4:b4:2e:59:86:58:4a:84:1b:30:b9:9f:bc:67:93:36:b3:aa:
         06:c3:21:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:06 2025 by rpki-client on console.sobornost.net