Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/9284a1b0-e5d7-392d-b14e-7c98ee20c172.roa
File:                     9284a1b0-e5d7-392d-b14e-7c98ee20c172.roa (raw, json)
Hash identifier:          Jvx06wFa44j6ge5xwsCxJQb54HVrnqZQdDxCGcW9MWw=
Subject key identifier:   C6:EE:AA:06:B6:4D:2D:BC:AA:41:E6:28:65:B5:74:AE:87:03:43:15
Certificate issuer:       /CN=7746dca1-2236-41ce-ab1a-952e06f4769c
Certificate serial:       010D0C9F432858496AF9E9F389DF2C2622B89000
Authority key identifier: 0A:E6:84:83:00:60:D5:76:67:3F:01:3B:83:A3:7B:45:F1:C2:1B:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/9284a1b0-e5d7-392d-b14e-7c98ee20c172.roa
Signing time:             Fri 04 Apr 2025 20:33:03 +0000
ROA not before:           Fri 04 Apr 2025 20:33:03 +0000
ROA not after:            Thu 03 Jul 2025 20:33:03 +0000
asID:                     16725
IP address blocks:        192.104.3.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:f9:e9:f3:89:df:2c:26:22:b8:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7746dca1-2236-41ce-ab1a-952e06f4769c
        Validity
            Not Before: Apr  4 20:33:03 2025 GMT
            Not After : Jul  3 20:33:03 2025 GMT
        Subject: CN=ff18fb32-ce98-4ad2-b56d-e4e3b38dd875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2c:5b:b6:aa:f2:c9:9d:0c:c5:26:b8:f1:dd:
                    71:ac:e2:c7:f9:f8:82:9e:87:eb:29:15:6f:21:82:
                    ea:a0:8e:1e:c8:59:6d:c5:30:b7:20:3f:8f:b3:1c:
                    74:76:a5:83:c9:ba:79:86:9e:2d:87:5c:e8:98:6c:
                    75:9f:eb:0b:e2:b8:49:fe:98:0d:1d:c8:62:4b:76:
                    f3:83:bf:cf:19:4f:d9:e2:3c:17:47:94:b2:4d:c4:
                    17:e5:c1:95:4b:27:28:6e:65:80:e8:ff:31:7e:90:
                    9e:bf:1b:47:46:3d:76:fa:42:bc:a6:dd:90:f7:9c:
                    e0:c6:e9:97:a7:b1:91:55:ef:1c:49:e6:af:85:d3:
                    a6:ae:06:0e:40:6b:2e:fe:25:71:c9:32:37:2b:ff:
                    02:c6:ac:ca:01:16:30:5e:66:06:9a:01:74:7a:b2:
                    63:df:de:d0:99:d0:04:9e:cd:6b:0d:b4:0b:3e:ee:
                    2b:28:9a:b6:82:47:87:2e:66:51:52:08:b5:cd:ef:
                    ad:76:1f:b7:c2:ca:ed:d0:6a:cb:09:ea:ce:53:1b:
                    59:d1:66:e4:0b:ce:1c:d6:c9:15:48:55:0c:ca:94:
                    95:63:cb:92:e3:7b:7f:2d:c7:21:0a:67:31:fa:36:
                    90:53:61:ec:42:50:4c:0b:2a:6a:a1:65:0f:37:be:
                    f8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EE:AA:06:B6:4D:2D:BC:AA:41:E6:28:65:B5:74:AE:87:03:43:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/9284a1b0-e5d7-392d-b14e-7c98ee20c172.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/7746dca1-2236-41ce-ab1a-952e06f4769c.crl

            X509v3 Authority Key Identifier:
                keyid:0A:E6:84:83:00:60:D5:76:67:3F:01:3B:83:A3:7B:45:F1:C2:1B:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.104.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:73:5b:e3:5b:17:e4:d5:17:a2:a9:9a:ae:c9:e4:8a:e2:c1:
         9c:2c:1d:98:f4:bb:1a:69:9a:c6:b2:a5:47:29:51:97:75:ba:
         65:95:aa:4e:34:07:c0:71:05:c5:ba:8f:fb:1e:4b:5b:f7:4a:
         cd:7a:a4:c3:7a:02:8d:04:c3:a5:6b:58:b8:0b:19:de:c7:49:
         c1:45:32:a8:40:9c:4d:b9:7d:df:c4:ca:b0:ba:52:9a:fe:4f:
         a8:5d:88:03:cb:48:66:f1:3a:54:25:3f:a2:f2:85:ac:a6:a6:
         d1:75:34:9c:d8:cc:1a:99:1f:30:eb:1f:11:ed:ee:99:18:58:
         56:0b:4f:e5:6c:79:eb:1b:eb:89:24:6c:10:69:10:db:34:d5:
         4e:71:c5:81:14:25:c5:6a:20:38:cf:e8:38:ef:c1:46:5c:ee:
         77:b2:d4:fb:5c:54:09:14:a8:ea:50:2d:63:36:45:e5:94:85:
         de:20:6a:cb:f9:61:3d:6f:55:a3:ee:7a:d3:91:87:21:b8:61:
         1d:6a:4e:71:0a:9c:e3:0f:10:8f:ef:fb:ed:0b:13:53:52:8b:
         dd:15:1b:25:dd:1d:7e:fb:2a:45:85:49:15:94:a9:ce:80:ca:
         b0:92:a4:5a:62:9d:e8:a2:33:18:8a:fa:07:8e:b8:73:f0:40:
         47:c4:c0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:45 2025 by rpki-client on console.sobornost.net