Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/bc06121f-7d58-3041-9288-73896bb704a7.roa
File:                     bc06121f-7d58-3041-9288-73896bb704a7.roa (raw, json)
Hash identifier:          Q7Cf6WZ0A5CwzGoNOnn95BrARUtLzfsmy+3mEkej5Ek=
Subject key identifier:   13:43:D2:20:52:18:8F:5D:16:23:8F:E3:B0:D0:43:A9:BD:FD:58:52
Certificate issuer:       /CN=acc14dc4-6768-43c1-9d95-c89a552020c1
Certificate serial:       010D0C9F432858497F0998766589A44A4D9B2980
Authority key identifier: 22:E0:BD:D1:6D:77:45:BC:65:37:F2:40:C2:45:DC:3F:AA:A3:86:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/bc06121f-7d58-3041-9288-73896bb704a7.roa
Signing time:             Sat 12 Apr 2025 01:00:48 +0000
ROA not before:           Sat 12 Apr 2025 01:00:48 +0000
ROA not after:            Fri 11 Jul 2025 01:00:48 +0000
asID:                     49981
IP address blocks:        91.238.93.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7f:09:98:76:65:89:a4:4a:4d:9b:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc14dc4-6768-43c1-9d95-c89a552020c1
        Validity
            Not Before: Apr 12 01:00:48 2025 GMT
            Not After : Jul 11 01:00:48 2025 GMT
        Subject: CN=78575fd4-cbfa-4ecb-984a-85ba4ec80bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5b:38:55:61:7c:e2:01:d6:d3:0f:e7:9a:05:
                    26:46:96:81:68:2b:84:c7:67:f3:b1:65:0f:33:ba:
                    68:fc:04:d9:56:df:fe:22:1a:e6:d5:53:ca:48:0c:
                    57:c0:49:a9:db:3a:78:56:16:ae:64:e8:2f:7b:29:
                    cc:b9:52:d1:ea:c1:15:a0:4f:91:7e:55:e1:84:0e:
                    b4:d4:4c:c9:7b:b6:b1:e4:c9:36:20:46:e4:34:5c:
                    e2:48:52:a9:fe:ce:d5:12:8b:9e:c7:49:d9:ba:7e:
                    c3:d7:6b:0e:ca:d1:a7:5c:a9:1a:8d:b1:2a:7c:35:
                    49:57:38:8a:a7:43:6b:2f:c2:1e:f9:15:1f:b8:de:
                    95:bc:70:7b:a5:46:96:7e:7d:7e:b6:17:a9:81:f5:
                    5a:bb:68:71:da:fc:a9:22:20:dc:d1:03:df:5e:2c:
                    51:e0:6a:0f:ad:00:73:eb:fe:a9:c0:56:71:dd:31:
                    87:f0:ab:80:0a:18:16:f8:cb:c0:5e:31:f4:6f:03:
                    da:01:ef:6e:9c:a8:37:b4:43:ca:2c:2a:67:05:04:
                    6c:d8:83:51:99:e4:11:f6:0a:be:39:94:72:5c:5c:
                    31:47:36:04:0c:dc:86:87:12:4c:53:18:6a:e5:6d:
                    dd:6b:f3:06:f9:a4:47:26:3e:bf:e5:5e:59:90:0b:
                    3c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:43:D2:20:52:18:8F:5D:16:23:8F:E3:B0:D0:43:A9:BD:FD:58:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/bc06121f-7d58-3041-9288-73896bb704a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/acc14dc4-6768-43c1-9d95-c89a552020c1.crl

            X509v3 Authority Key Identifier:
                keyid:22:E0:BD:D1:6D:77:45:BC:65:37:F2:40:C2:45:DC:3F:AA:A3:86:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.238.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:7f:5c:b8:07:b3:e0:e8:63:01:a2:65:76:ec:0e:cf:ab:ee:
         3e:64:3d:32:5d:d7:46:26:27:67:b7:f8:3c:4c:fa:f6:35:7c:
         e9:1e:13:11:f8:3c:e3:67:d1:af:e8:03:fc:91:9a:cb:b7:2f:
         78:20:ed:e3:32:8e:79:40:44:75:22:7c:34:6c:27:f8:39:d1:
         79:9c:9f:01:57:03:9f:04:75:46:5c:db:22:50:52:87:fd:a1:
         9e:e6:e6:81:ec:ef:c9:e4:c1:20:0c:96:5e:6d:8e:b2:79:a7:
         02:5a:d2:e9:6d:14:e5:54:aa:46:fb:6e:76:cc:41:e3:74:ea:
         97:f0:77:9c:57:bc:88:63:a0:7d:5a:d5:1e:aa:69:97:07:3d:
         df:d7:44:31:3f:de:7c:b8:b2:41:45:55:08:cd:f0:8d:70:a6:
         3a:dc:7f:0d:65:fd:ea:1f:07:da:8d:e6:b3:80:c2:db:28:26:
         c6:00:c9:fe:4f:67:73:d1:50:96:a4:7d:42:07:7c:9b:69:d7:
         7b:af:5d:83:ca:4a:27:e7:85:a9:8e:91:5d:a0:a9:a3:5b:da:
         13:8a:7d:55:c3:a7:52:d8:42:a0:1f:33:46:9b:dd:c5:06:b7:
         50:65:8e:aa:30:3f:78:e3:48:a0:e6:31:af:b9:ae:dc:00:5e:
         6e:00:aa:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:06 2025 by rpki-client on console.sobornost.net