Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/d6394bb2-f8e1-30ff-8fc4-7244caf0c9a0.roa
File:                     d6394bb2-f8e1-30ff-8fc4-7244caf0c9a0.roa (raw, json)
Hash identifier:          95yNYLKyadUtzXu28Iy5qSal9Vgul0fBLluZDTczpSM=
Subject key identifier:   1E:DC:6F:6F:FE:C2:9F:AA:E2:1F:98:00:DD:CA:AD:70:D2:05:17:FC
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584968B4267E03E7422E01B556D0
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/d6394bb2-f8e1-30ff-8fc4-7244caf0c9a0.roa
Signing time:             Fri 04 Apr 2025 01:00:47 +0000
ROA not before:           Fri 04 Apr 2025 01:00:47 +0000
ROA not after:            Thu 03 Jul 2025 01:00:47 +0000
asID:                     19871
IP address blocks:        72.22.92.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:68:b4:26:7e:03:e7:42:2e:01:b5:56:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Apr  4 01:00:47 2025 GMT
            Not After : Jul  3 01:00:47 2025 GMT
        Subject: CN=a59835ef-5192-4f12-80e5-023fada53d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d6:bf:26:98:9d:bc:60:7f:7b:6d:e2:ce:81:
                    3e:df:b7:86:43:7f:80:f8:1c:cd:50:c5:1a:8c:10:
                    c5:03:2f:26:95:5a:f8:a8:7b:9d:ff:ec:16:b5:7f:
                    22:38:b2:bc:23:9b:e9:58:a3:c3:50:9c:fc:13:8a:
                    1c:6d:7f:03:83:48:c5:c5:5c:d5:a7:cb:76:cc:35:
                    71:64:ce:a5:ab:b2:2b:44:4a:a7:87:b5:57:5c:91:
                    d7:a5:06:3b:1b:98:6e:33:15:4e:e1:9e:d8:7c:2a:
                    16:e5:b3:66:80:55:a8:77:69:87:c9:b8:56:8c:59:
                    2e:4a:5e:15:31:3f:98:e2:64:ca:23:b9:61:8b:11:
                    cd:dc:52:2d:31:b3:88:e2:df:25:2f:54:d3:81:ba:
                    d6:95:de:e1:4c:fc:15:c7:3d:29:76:a2:24:d0:f3:
                    8a:cb:99:e4:3c:13:5d:94:27:c6:7a:f7:f1:f6:6e:
                    13:9a:2f:21:e1:f3:c3:8c:7d:d1:bf:69:c1:fa:0e:
                    84:3a:68:3f:8b:e1:3b:ad:d1:61:73:e1:2e:65:11:
                    51:e1:d4:57:ac:73:99:88:a6:95:4f:b7:06:a9:0a:
                    be:b2:d4:b6:13:f9:07:72:41:88:aa:08:40:6d:c8:
                    ac:8e:d4:13:01:86:1c:3e:47:32:ee:2f:21:66:14:
                    57:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:DC:6F:6F:FE:C2:9F:AA:E2:1F:98:00:DD:CA:AD:70:D2:05:17:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/d6394bb2-f8e1-30ff-8fc4-7244caf0c9a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:69:d6:2f:3a:4a:bf:67:ea:e6:16:1a:6a:bc:bf:03:18:ee:
         5b:62:51:33:18:f9:79:e2:78:5f:cc:1f:05:da:d2:3b:3f:3b:
         74:1f:da:8b:a1:50:37:c1:4c:3a:b3:56:f1:1e:67:8e:dd:bf:
         14:a0:05:f0:14:c7:2c:12:32:c2:36:48:8f:47:f4:f0:a8:a6:
         37:c8:ce:b3:f5:e0:cb:4b:ee:ef:d2:9d:b0:73:8e:49:90:25:
         b8:5a:97:b8:f1:95:7c:69:a1:e1:36:c1:29:68:b9:45:b8:96:
         a8:6d:86:24:3c:29:23:4d:d4:d7:31:a5:cb:ec:e7:78:c4:ee:
         71:f0:14:aa:a6:95:2f:6a:90:30:90:15:04:e6:77:b8:45:58:
         7e:ba:ab:c5:4c:8b:52:0c:ff:64:1e:a9:da:48:f8:93:79:cc:
         64:f6:a8:8b:0c:dd:de:4e:7d:ee:1e:9f:67:f9:2f:ef:db:59:
         13:fd:83:c7:88:6f:25:fc:a6:dd:9e:97:42:ec:ba:29:c6:f8:
         3f:13:7b:2e:05:36:b1:b9:e8:dd:e4:09:54:ca:4d:fc:4a:97:
         a7:ff:98:31:bc:27:16:ee:1b:59:a3:ad:d7:8c:46:ae:8d:64:
         62:e6:28:6d:f3:df:ca:d5:8a:96:44:29:f2:20:23:05:52:54:
         b0:f5:d7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:38 2025 by rpki-client on console.sobornost.net