Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/0ad7d478-4c06-3292-89e1-747777b4506a.roa
File:                     0ad7d478-4c06-3292-89e1-747777b4506a.roa (raw, json)
Hash identifier:          5OUPoJncufJy5IVTT6j2XSbTNaPLoF6B/Vv3WdktPQE=
Subject key identifier:   BC:35:88:F3:43:50:46:68:1F:BE:30:74:2E:3F:94:D1:9F:8B:F8:3B
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F432858496A19A86C64D496FCFA27F8C0
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/0ad7d478-4c06-3292-89e1-747777b4506a.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     13720
IP address blocks:        69.174.200.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:a8:6c:64:d4:96:fc:fa:27:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=a3f6693b-b716-4176-89d0-c4ce01054e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f7:84:9f:78:94:3d:84:94:d4:be:03:73:d6:
                    34:66:ce:ec:a2:21:57:c6:31:4c:85:01:23:42:81:
                    e1:9d:b2:05:02:e3:3f:a7:e7:96:ea:6a:24:8b:95:
                    5b:fc:4e:f0:d6:d9:57:be:a9:12:2a:c7:0d:8c:b9:
                    59:06:c9:8c:60:98:a9:1a:ad:0c:88:6b:aa:70:0b:
                    03:b6:a6:72:58:81:28:74:88:f5:9e:db:77:aa:1c:
                    b2:75:a7:21:d2:88:e9:c7:1a:96:a6:0d:74:41:b2:
                    6f:f3:a8:fd:40:01:a4:d2:cb:e2:90:cb:b4:6d:98:
                    a7:a1:23:27:03:5a:b2:f2:44:3c:4c:5b:03:02:e8:
                    96:ec:7d:93:c4:70:c6:77:81:d3:e3:f2:b4:ae:71:
                    58:c7:6b:32:91:fb:43:ff:b6:13:4e:3d:5b:c7:c3:
                    b1:13:be:db:37:73:ea:c5:d4:15:ff:19:58:f5:2c:
                    9f:70:f0:3f:a9:20:2d:7f:8e:18:97:b9:a4:11:01:
                    82:e9:83:e5:bf:f6:36:64:10:5a:e7:1c:cd:58:ca:
                    36:36:2d:4f:fc:5e:b9:5b:39:21:b5:cd:b1:c4:25:
                    07:ef:a1:34:2c:8e:dc:aa:88:6a:cb:5a:b3:f5:ae:
                    41:69:a7:05:e3:a2:ed:e1:1b:e8:f2:19:6b:49:1a:
                    ff:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:35:88:F3:43:50:46:68:1F:BE:30:74:2E:3F:94:D1:9F:8B:F8:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/0ad7d478-4c06-3292-89e1-747777b4506a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.174.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:20:51:26:95:f8:b2:d8:29:00:0c:bf:1f:09:25:56:48:ad:
         80:83:e5:27:8b:37:ad:36:45:bc:d6:36:a8:48:c5:c8:e7:36:
         2f:aa:0a:c8:38:42:3f:e6:c7:6c:3b:77:b8:84:57:06:48:fc:
         98:50:3c:d4:b0:ba:d1:1b:88:62:9b:bb:e5:21:01:3a:ee:83:
         a4:08:35:a8:36:58:3e:c9:58:f9:51:e8:28:65:74:29:a0:06:
         a4:f6:8a:00:72:7c:72:68:a4:18:79:b5:67:df:c0:0f:85:96:
         24:83:76:b2:3c:3e:ca:81:30:be:ed:89:c8:5f:13:c0:73:59:
         0e:24:a3:8b:93:8e:aa:dd:39:3c:3a:13:99:a2:b0:2f:53:2e:
         00:85:ca:5a:cd:19:2f:c2:0d:ee:88:4f:b6:0d:82:b6:94:0f:
         c3:35:83:21:11:e8:2e:6f:e3:db:a1:ab:3d:64:d6:5c:4d:93:
         c1:e5:b2:4d:e7:32:08:a3:81:04:31:61:82:5e:ca:b6:2a:e4:
         42:a4:2a:35:a0:c8:56:0f:df:e5:25:21:21:f1:f5:66:cc:07:
         7e:51:26:34:7b:1c:21:66:ac:be:18:5d:59:80:8e:32:8a:50:
         43:e9:8f:8b:74:a1:9d:b8:16:b3:e5:23:2f:fe:cb:95:4b:3f:
         b3:7a:b7:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGahsZNSW/Pon+MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM3YTZmYzgtMzVjMy00MTUxLWFhMmUtMjUxMzQyMGY5
MzQ0MB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk
YTNmNjY5M2ItYjcxNi00MTc2LTg5ZDAtYzRjZTAxMDU0ZTZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1feEn3iUPYSU1L4Dc9Y0Zs7soiFXxjFMhQEj
QoHhnbIFAuM/p+eW6moki5Vb/E7w1tlXvqkSKscNjLlZBsmMYJipGq0MiGuqcAsD
tqZyWIEodIj1ntt3qhyydach0ojpxxqWpg10QbJv86j9QAGk0svikMu0bZinoSMn
A1qy8kQ8TFsDAuiW7H2TxHDGd4HT4/K0rnFYx2sykftD/7YTTj1bx8OxE77bN3Pq
xdQV/xlY9SyfcPA/qSAtf44Yl7mkEQGC6YPlv/Y2ZBBa5xzNWMo2Ni1P/F65Wzkh
tc2xxCUH76E0LI7cqohqy1qz9a5BaacF46Lt4Rvo8hlrSRr/mQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLw1iPNDUEZoH74wdC4/lNGfi/g7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85Mzdh
NmZjOC0zNWMzLTQxNTEtYWEyZS0yNTEzNDIwZjkzNDQvMGFkN2Q0NzgtNGMwNi0z
MjkyLTg5ZTEtNzQ3Nzc3YjQ1MDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTM3YTZmYzgtMzVjMy00MTUxLWFh
MmUtMjUxMzQyMGY5MzQ0LzkzN2E2ZmM4LTM1YzMtNDE1MS1hYTJlLTI1MTM0MjBm
OTM0NC5jcmwwHwYDVR0jBBgwFoAUah/mTh0WOW2Gbpk7qGQprsNO/HgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MzdhNmZjOC0zNWMzLTQxNTEtYWEyZS0yNTEz
NDIwZjkzNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARa7IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEQgUSaV+LLYKQAMvx8JJVZIrYCD5SeLN602RbzWNqhIxcjnNi+qCsg4
Qj/mx2w7d7iEVwZI/JhQPNSwutEbiGKbu+UhATrug6QINag2WD7JWPlR6ChldCmg
BqT2igByfHJopBh5tWffwA+FliSDdrI8PsqBML7tichfE8BzWQ4ko4uTjqrdOTw6
E5misC9TLgCFylrNGS/CDe6IT7YNgraUD8M1gyER6C5v49uhqz1k1lxNk8Hlsk3n
MgijgQQxYYJeyrYq5EKkKjWgyFYP3+UlISHx9WbMB35RJjR7HCFmrL4YXVmAjjKK
UEPpj4t0oZ24FrPlIy/+y5VLP7N6txc=
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:55 2025 by rpki-client on console.sobornost.net