Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/88374a1d-fd36-32d4-98a5-465f80889ca4.roa
File:                     88374a1d-fd36-32d4-98a5-465f80889ca4.roa (raw, json)
Hash identifier:          cCx/AT4zcSjhX21S5YoPXX9RZK8UiD3F1MbAFHOqXes=
Subject key identifier:   D9:BB:D5:76:12:4B:F6:6C:22:C8:64:A3:7E:8D:0A:12:D5:0A:E4:F8
Certificate issuer:       /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
Certificate serial:       010D0C9F4328584967F68B96C4DD8EF983FC73A8
Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/88374a1d-fd36-32d4-98a5-465f80889ca4.roa
Signing time:             Thu 03 Apr 2025 18:38:51 +0000
ROA not before:           Thu 03 Apr 2025 18:38:51 +0000
ROA not after:            Wed 02 Jul 2025 18:38:51 +0000
asID:                     203020
IP address blocks:        104.232.193.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:67:f6:8b:96:c4:dd:8e:f9:83:fc:73:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
        Validity
            Not Before: Apr  3 18:38:51 2025 GMT
            Not After : Jul  2 18:38:51 2025 GMT
        Subject: CN=601a7cd0-4f70-46a3-9097-ff5181f28686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:1b:df:ed:b1:98:32:fd:ca:0b:c1:d1:0a:fd:
                    bd:34:e8:37:40:21:a0:2b:75:71:91:f5:46:c3:5d:
                    3e:fe:07:8a:85:45:6e:10:c9:77:9d:17:85:3a:a9:
                    bd:17:13:97:74:aa:d3:2b:ec:c1:93:8c:ee:59:91:
                    6b:3a:91:6c:1f:b1:9f:bb:d9:31:cd:f3:ec:d8:88:
                    51:34:eb:8e:32:bb:73:37:05:00:dd:76:5e:3d:1c:
                    1f:86:92:a6:f2:79:12:c3:bb:43:da:f8:29:4f:85:
                    cc:90:b5:ce:ad:0e:b5:45:45:78:85:fb:1f:80:5b:
                    27:89:66:c3:b6:3b:5d:d0:15:5b:84:d2:a8:30:06:
                    d2:4a:15:aa:6d:b9:ba:5c:d0:fd:92:09:8d:8b:12:
                    7a:38:08:fd:55:26:0a:ff:1e:bf:8d:3c:e8:0e:61:
                    41:d5:d4:39:db:69:3a:89:a5:f2:62:82:45:db:fd:
                    27:5a:36:b3:e0:7a:79:cf:b9:a3:55:4d:05:c3:55:
                    04:ed:81:b9:b4:7e:8b:21:a0:e1:d6:6a:84:2e:e8:
                    79:ab:b1:a1:dc:25:e1:f1:f5:7e:c1:e9:cc:7f:4f:
                    83:13:37:9f:15:98:8c:14:38:e6:25:c5:65:f9:f9:
                    38:66:1f:c4:25:89:3b:91:4b:05:15:6e:f6:dd:ce:
                    30:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BB:D5:76:12:4B:F6:6C:22:C8:64:A3:7E:8D:0A:12:D5:0A:E4:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/88374a1d-fd36-32d4-98a5-465f80889ca4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl

            X509v3 Authority Key Identifier:
                keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.232.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:74:aa:4f:2a:99:4c:ae:25:fe:19:d4:fe:be:9f:4d:98:bb:
         be:62:3d:a6:52:ab:44:26:a5:bd:55:37:9c:4c:42:0c:36:7d:
         13:5b:bf:a1:f8:f7:8c:38:6f:b2:27:dd:8f:23:f0:2b:6b:45:
         ba:b3:fd:cd:6d:b7:c5:e5:40:4c:f8:a2:ef:cc:dc:b5:14:7c:
         c0:ec:ed:3c:9d:11:99:90:b4:ba:47:84:68:29:98:f9:96:c4:
         8b:ae:d5:e3:f9:2f:83:b5:31:c2:70:46:8d:a4:81:a1:b6:00:
         e6:7a:a3:70:7e:0d:fc:d8:aa:10:39:14:fc:04:27:72:18:04:
         38:44:92:7b:ac:31:a5:f7:4b:b4:24:90:37:f9:85:a6:f9:52:
         88:bb:9f:a2:1c:88:42:3e:0c:0a:1c:ba:7a:4e:09:69:cb:d1:
         40:7b:03:07:9c:0c:08:79:3e:37:11:f1:e4:ce:25:a7:ba:11:
         fc:8a:35:ee:6f:e9:4c:4a:01:5d:4b:4e:16:82:54:9f:cd:1b:
         23:64:e7:7c:97:aa:cd:0d:47:71:38:5b:ba:d4:04:62:d9:52:
         4c:24:ba:57:4c:ba:4b:6e:81:0b:71:f4:6d:e9:cc:c1:c6:9d:
         91:a2:95:8a:ac:80:65:ef:7a:b1:cc:e6:ac:1b:7f:9b:50:ec:
         76:ed:86:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:07 2025 by rpki-client on console.sobornost.net