Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/4e01cf1c-b427-3d56-ab85-07dbd2ce44c5.roa
File:                     4e01cf1c-b427-3d56-ab85-07dbd2ce44c5.roa (raw, json)
Hash identifier:          Mj/6rKyLe/ITx6ziLkVI1kuH8BUJwvZdBpnHUroiLSk=
Subject key identifier:   74:1F:80:80:8F:2E:DC:EE:44:69:2F:91:0C:43:52:1D:2C:D8:EA:23
Certificate issuer:       /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
Certificate serial:       010D0C9F432858495EEEDE8F1DF0C5A0151B7600
Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/4e01cf1c-b427-3d56-ab85-07dbd2ce44c5.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     44486
IP address blocks:        134.65.192.0/22 maxlen: 22
                          164.152.160.0/22 maxlen: 22
                          169.155.44.0/22 maxlen: 22
                          169.155.168.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:de:8f:1d:f0:c5:a0:15:1b:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=bd3cb917-92b4-4691-81f2-f45db597427b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:39:b3:73:5f:36:19:34:e5:ff:25:69:1a:d8:
                    3a:f0:60:7e:57:17:62:86:fc:e8:aa:b5:3e:51:67:
                    93:87:e5:cb:05:93:10:fb:6f:d1:d4:1b:9b:70:d9:
                    c1:35:f5:ac:bb:ab:3e:80:08:2c:e6:63:c7:90:37:
                    94:92:22:f3:ec:18:79:6f:55:e4:9d:39:98:ee:be:
                    07:1f:1d:79:0a:a6:52:fa:28:12:b4:01:c2:60:0f:
                    0e:10:70:f8:95:ea:bf:4f:98:df:bc:0c:e5:90:56:
                    f3:c2:51:fa:6a:1b:a0:b6:72:a3:aa:36:98:21:88:
                    fa:11:8c:ea:7a:df:a2:52:a5:24:0f:92:d3:79:86:
                    8f:47:f3:8e:43:68:af:c0:fe:ab:02:11:22:9a:9e:
                    3a:bd:d7:4e:ab:71:a7:08:79:a3:c4:21:0d:89:14:
                    d5:79:39:4a:e2:f9:57:99:e0:1f:77:63:1f:76:6b:
                    42:f1:dc:e4:4a:d2:62:a1:05:0b:50:7f:6f:52:eb:
                    4a:95:04:69:e2:ed:ae:00:5c:c7:b7:78:96:f4:77:
                    26:57:b1:03:9d:b1:37:d3:30:fc:90:b1:d3:43:d2:
                    d0:75:a8:99:ba:f2:d3:b8:75:de:94:e4:96:66:06:
                    21:6e:24:3a:a7:9a:dc:bd:06:57:62:1e:89:c5:4d:
                    17:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1F:80:80:8F:2E:DC:EE:44:69:2F:91:0C:43:52:1D:2C:D8:EA:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/4e01cf1c-b427-3d56-ab85-07dbd2ce44c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl

            X509v3 Authority Key Identifier:
                keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.65.192.0/22
                  164.152.160.0/22
                  169.155.44.0/22
                  169.155.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:ed:f0:ef:f9:45:02:32:d5:6d:9d:19:33:b9:d3:cd:49:ed:
         b8:9c:e1:3a:7b:ea:37:04:11:d0:04:a7:68:b3:77:3c:b1:fe:
         5b:5e:3b:3b:dc:3b:e1:a5:2b:80:30:00:52:a2:a4:ee:2c:ca:
         63:9a:05:ce:23:9b:c5:75:80:98:27:ff:be:1e:85:95:b4:75:
         96:21:ba:02:8c:bf:1a:17:e0:4a:4e:10:97:e4:6a:77:dc:03:
         1b:04:e9:95:a6:67:56:ee:f4:25:ed:c6:1c:27:85:1d:c6:20:
         8d:73:a8:06:83:e3:1d:e0:53:43:8a:f3:72:2e:8e:ac:7d:e6:
         df:52:e8:84:ce:94:8f:3c:d7:10:a5:7a:56:8e:c6:9e:1d:e7:
         7a:4f:06:b0:dc:ed:ea:76:e5:90:9e:33:3d:a2:39:81:09:2c:
         9d:f4:b1:02:e0:93:1d:f0:28:af:a5:87:d1:6c:06:e9:b5:87:
         3c:2b:17:8a:31:a3:35:3a:97:94:85:93:67:3b:42:f9:9a:aa:
         f7:d5:e1:45:98:4f:17:1b:52:06:94:e6:de:b6:a7:70:fb:de:
         60:4b:9b:da:44:a3:79:24:11:81:dd:fd:17:76:d5:ad:b4:b1:
         99:52:03:e6:a1:66:f8:74:9d:95:57:81:2b:2e:d5:4e:b6:c8:
         d1:53:25:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:50 2025 by rpki-client on console.sobornost.net