Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0/a77ae9fd-9f71-34b2-9a8a-6aaf017cf447.roa
File:                     a77ae9fd-9f71-34b2-9a8a-6aaf017cf447.roa (raw, json)
Hash identifier:          mOF9Or9x93HaBqySOCNl0X75gyZR3CQOF1wlMk5lNMo=
Subject key identifier:   1A:AC:6C:5A:54:48:EC:BB:32:44:C9:AD:0D:70:7A:DE:C1:01:83:00
Certificate issuer:       /CN=fb993146-757e-4177-9a61-207cb7b716c0
Certificate serial:       010D0C9F432858495D896330BDA7EEF666E55080
Authority key identifier: 3F:C3:E4:8E:45:9B:3B:1E:30:3A:C1:62:5F:9D:FA:55:8B:BD:F0:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0/a77ae9fd-9f71-34b2-9a8a-6aaf017cf447.roa
Signing time:             Mon 31 Mar 2025 01:00:47 +0000
ROA not before:           Mon 31 Mar 2025 01:00:47 +0000
ROA not after:            Sun 29 Jun 2025 01:00:47 +0000
asID:                     32598
IP address blocks:        23.150.136.0/24 maxlen: 24
                          2607:2fc0::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5d:89:63:30:bd:a7:ee:f6:66:e5:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb993146-757e-4177-9a61-207cb7b716c0
        Validity
            Not Before: Mar 31 01:00:47 2025 GMT
            Not After : Jun 29 01:00:47 2025 GMT
        Subject: CN=39a90dab-c45b-4664-8d8a-b857de5cf48e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b6:31:0b:59:03:da:96:0c:40:cc:8c:8b:05:
                    f1:34:d6:b0:92:1a:ad:ce:82:9e:a8:2b:f6:1f:0c:
                    79:38:15:52:8b:65:c5:79:a9:3f:02:dc:34:04:f5:
                    ad:23:e2:f0:69:ab:b2:e4:6b:d5:71:38:68:42:5e:
                    26:ca:c4:f6:ff:f9:0a:41:53:4a:3e:1f:e5:d7:86:
                    f6:a3:1d:0f:58:23:c0:e5:9d:e9:47:7c:cb:6b:8f:
                    80:00:46:88:3a:b4:22:ae:9f:c0:0d:dc:41:10:ac:
                    e2:20:e7:f1:e0:8d:3f:c0:d2:97:47:4e:51:26:b6:
                    37:26:b5:7c:9f:d3:9b:16:57:6a:db:0f:b9:28:05:
                    a1:ce:43:f1:a4:fe:08:c4:9e:8e:ce:f0:0f:2e:01:
                    df:0a:e5:4a:5e:1b:6f:39:34:81:cf:0f:1e:ba:1f:
                    d8:e8:14:aa:b4:27:8d:b5:f7:8b:4f:37:b6:1e:01:
                    02:5a:5d:72:0b:37:43:e6:4f:a3:f2:a4:cd:10:91:
                    52:c9:73:8d:66:c1:fb:06:c6:b0:25:90:ac:f1:22:
                    d6:1a:03:1a:87:d9:b2:53:e6:a8:8b:42:53:a7:87:
                    22:ac:ab:4a:9c:c8:35:ea:25:0a:ad:8f:e8:f0:8f:
                    97:e2:77:8e:f5:92:9c:6a:7c:b8:d5:81:fb:d8:89:
                    3a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AC:6C:5A:54:48:EC:BB:32:44:C9:AD:0D:70:7A:DE:C1:01:83:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0/a77ae9fd-9f71-34b2-9a8a-6aaf017cf447.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0/fb993146-757e-4177-9a61-207cb7b716c0.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C3:E4:8E:45:9B:3B:1E:30:3A:C1:62:5F:9D:FA:55:8B:BD:F0:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.136.0/24
                IPv6:
                  2607:2fc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:f2:8f:ec:8c:a6:00:14:83:dc:f8:0a:c1:47:e9:5c:24:62:
         34:df:48:3f:03:f9:f5:df:4c:82:09:65:3a:5d:43:b5:51:3d:
         6a:b7:3a:ea:f7:f1:7b:59:12:6b:1f:2b:43:32:63:c6:df:19:
         34:d2:5c:83:99:c9:be:b2:3c:89:d9:d7:8d:8b:76:4e:b1:09:
         8f:93:0c:50:2a:c6:65:91:fb:cc:c6:c2:24:c1:c3:cf:ae:55:
         81:ac:f4:bc:e9:a8:d5:19:32:f2:4d:57:29:b1:71:5a:43:06:
         e4:94:45:af:3e:bb:10:85:f3:64:3e:00:43:88:d4:4b:6e:6e:
         6d:0d:0a:2b:1b:ae:dd:e3:fb:dd:89:71:c9:a8:f5:8c:7e:b6:
         1a:b1:b3:0c:e1:b5:fa:d8:b4:9d:65:83:dc:4d:6f:e3:40:d1:
         02:48:8e:77:87:60:a9:01:7d:e0:22:c7:a4:f4:c2:80:34:b9:
         fa:1c:eb:35:72:39:ed:d1:b8:9d:85:ed:ee:10:31:1a:81:ba:
         1a:c2:9e:c1:9c:e3:96:6e:03:95:41:3b:ec:cd:37:0e:95:8e:
         77:2d:db:87:d9:d7:0b:8b:85:78:9d:81:b8:fd:91:e6:1e:a7:
         40:38:82:d1:00:67:05:55:b3:bb:09:2c:78:e0:a9:81:96:76:
         d4:3f:f7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:32 2025 by rpki-client on console.sobornost.net