Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/0ad64713-402c-3924-953d-172630874932.roa
File:                     0ad64713-402c-3924-953d-172630874932.roa (raw, json)
Hash identifier:          Fvt0NAYx1DY1m9XSmrHclCpTjrbLTP7r2kC45Gcfd6U=
Subject key identifier:   8A:91:57:D9:58:DA:B2:78:B9:72:13:A0:C0:46:DF:23:10:F9:F8:02
Certificate issuer:       /CN=94550438-10ef-444f-b785-f7bc6eba08e7
Certificate serial:       010D0C9F432858497279AC4D27204F9B75B86780
Authority key identifier: 34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/0ad64713-402c-3924-953d-172630874932.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     15267
IP address blocks:        72.18.112.0/22 maxlen: 22
                          72.18.112.0/23 maxlen: 23
                          72.18.114.0/24 maxlen: 24
                          72.18.116.0/23 maxlen: 23
                          72.18.117.0/24 maxlen: 24
                          72.18.120.0/21 maxlen: 21
                          72.18.120.0/22 maxlen: 22
                          72.18.124.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:ac:4d:27:20:4f:9b:75:b8:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94550438-10ef-444f-b785-f7bc6eba08e7
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=8b4a9a46-d7db-4dde-8e32-ad5ff6ebfe3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1d:d4:16:9c:66:a6:e5:55:47:8e:cc:5a:2e:
                    ac:ef:b9:36:05:4b:06:58:5f:07:a9:ff:d4:f6:66:
                    71:f9:ba:80:39:5e:7b:fd:4a:6b:6d:86:a2:37:67:
                    2a:fa:e7:ea:9e:5f:bc:3b:23:b1:5c:ed:7d:b4:e8:
                    9a:b9:6d:ee:23:08:1c:bc:53:c7:cd:b5:1f:5e:99:
                    9d:84:24:10:88:1d:3b:34:00:8e:b5:cf:6e:f3:db:
                    e5:e1:43:e6:4e:5c:7a:8c:b6:0a:36:8b:a8:c0:11:
                    ff:ad:05:44:0a:2e:21:28:4d:ec:a4:f8:49:bb:0c:
                    ca:12:d3:5e:8b:48:c8:0b:8f:e2:9b:97:b8:d7:6a:
                    c4:2c:7d:42:a8:d1:a4:08:71:7a:56:0f:d5:42:ee:
                    29:2c:94:60:2f:13:da:81:28:0d:ba:9d:e7:46:4c:
                    41:ca:23:a2:e9:55:87:a6:c4:4c:ab:cd:57:0e:16:
                    6b:e9:cb:6c:32:9f:5c:c6:c5:b5:e9:3c:e0:03:14:
                    3c:7a:94:95:13:26:b5:76:07:20:32:3d:b4:7f:18:
                    34:e2:87:b9:6d:e2:7d:dd:a0:da:61:8d:8f:ee:56:
                    c8:a0:18:56:91:c5:88:d8:22:b4:1c:a7:b2:c3:52:
                    a7:0d:3f:ed:63:e4:8e:c4:34:8d:0f:b8:49:a0:c0:
                    8e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:91:57:D9:58:DA:B2:78:B9:72:13:A0:C0:46:DF:23:10:F9:F8:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/0ad64713-402c-3924-953d-172630874932.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl

            X509v3 Authority Key Identifier:
                keyid:34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.18.112.0-72.18.117.255
                  72.18.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:61:47:2a:d6:28:2a:58:41:2e:d2:a0:ef:7e:59:fb:1e:05:
         dc:7a:51:15:28:f2:19:1d:25:bc:26:c1:f3:6c:8a:99:76:c2:
         a1:d4:c1:c9:a0:aa:f5:0d:e7:97:e9:93:77:f8:ed:fb:8e:ad:
         d9:02:03:3b:76:1a:ab:18:a1:b7:87:64:a4:3a:81:33:fc:72:
         78:16:be:c2:5c:f6:d1:97:66:8b:a1:6a:bd:f1:50:a8:9b:e3:
         6a:cc:20:5b:3b:72:83:74:9c:8c:35:7c:cd:fa:dc:96:87:8d:
         3d:0f:6e:4b:ff:3d:81:85:d1:f5:5d:fb:82:6d:62:5e:22:14:
         3b:b3:53:60:92:c3:f4:54:d7:ac:ff:7d:f2:52:bf:81:9f:6a:
         b1:85:17:3f:f5:43:b8:ad:e2:43:84:66:50:1d:b3:21:8f:21:
         90:ef:07:49:34:aa:ad:e7:28:ed:56:53:13:de:dc:69:46:b0:
         75:0c:c0:68:5f:c4:c6:07:e9:6b:10:1d:83:97:27:68:7b:f7:
         47:b6:1a:f2:3a:c4:76:e3:64:ba:b6:05:0e:a4:e0:2e:c2:80:
         8e:5e:81:87:0f:9b:f4:e3:2e:3a:73:3d:d3:cf:55:26:f6:f7:
         a4:19:08:a7:d7:9b:89:da:e6:0d:53:30:a8:05:86:96:5a:26:
         a5:61:b2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:50 2025 by rpki-client on console.sobornost.net