Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8af443f5-675b-35e9-99e4-62722db39f39.roa
File:                     8af443f5-675b-35e9-99e4-62722db39f39.roa (raw, json)
Hash identifier:          OjShTdq1s3kHILTx4+ctzJ5QUU/q3lsbkf9zDsQY2gc=
Subject key identifier:   9A:43:74:E2:58:4C:D3:0C:0C:9F:F5:D8:96:00:A9:6A:84:05:C8:35
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584976A98E32240AE1078B1FBED0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8af443f5-675b-35e9-99e4-62722db39f39.roa
Signing time:             Wed 09 Apr 2025 01:00:47 +0000
ROA not before:           Wed 09 Apr 2025 01:00:47 +0000
ROA not after:            Tue 08 Jul 2025 01:00:47 +0000
asID:                     13768
IP address blocks:        72.51.60.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:76:a9:8e:32:24:0a:e1:07:8b:1f:be:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Apr  9 01:00:47 2025 GMT
            Not After : Jul  8 01:00:47 2025 GMT
        Subject: CN=e85122fa-4123-41c4-8b9c-d2beea1bf179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3d:65:f7:f8:64:c6:c6:bf:36:c7:2d:dc:c8:
                    90:97:7e:95:8c:b2:8e:57:73:0a:8d:fd:f5:4e:5a:
                    a4:26:54:9d:92:90:64:78:9d:59:86:ee:f4:0d:63:
                    ff:de:28:0f:99:80:f3:fe:18:5e:a6:1f:5c:cb:70:
                    c9:2e:68:03:f0:cd:78:5e:59:6b:96:81:17:5d:90:
                    c7:84:32:0d:7c:9c:8d:39:70:8f:90:48:c8:75:23:
                    be:2c:fd:0d:2a:a7:47:ef:b2:80:d5:94:4a:ef:1f:
                    94:ee:5a:90:cc:10:a3:7e:62:c0:5a:34:8b:5c:98:
                    dd:20:82:d8:eb:6f:ee:2c:60:4f:38:09:1b:d2:55:
                    57:e0:56:2c:e3:74:f1:d5:3a:e0:9f:f3:14:89:1d:
                    2a:eb:86:e9:92:55:dd:e8:e4:2c:1c:59:c2:09:f6:
                    c5:57:4c:7d:47:a8:ac:2f:02:fe:f9:63:63:86:48:
                    00:79:63:82:4c:9c:3f:74:18:93:b3:a4:ca:7b:83:
                    a9:68:34:f4:86:38:37:b9:3d:48:ed:f5:2e:6b:5d:
                    2f:fa:8e:af:44:77:60:cb:b8:be:8b:57:75:66:08:
                    e3:b5:9f:b1:26:64:15:ca:49:35:e8:2d:21:fe:d9:
                    ed:a0:1f:b1:7b:1a:d8:5b:c9:6c:be:c7:0e:c4:35:
                    af:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:43:74:E2:58:4C:D3:0C:0C:9F:F5:D8:96:00:A9:6A:84:05:C8:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8af443f5-675b-35e9-99e4-62722db39f39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:b3:fc:54:cb:77:4d:1b:7d:59:ff:f9:7d:8f:3f:8a:89:55:
         5c:c4:0f:86:25:91:66:95:ad:17:8e:16:5c:01:6d:67:35:cc:
         81:75:22:16:cc:4f:00:81:b0:32:62:84:48:16:77:28:94:98:
         14:a5:d4:41:25:2e:db:f3:3b:57:dd:68:33:ac:90:86:9c:5e:
         16:83:19:6d:69:2e:8d:e2:36:d6:f4:78:e9:cc:fb:96:47:bf:
         78:30:99:92:57:47:e0:cf:23:cf:c7:75:ec:ee:ee:13:bc:c1:
         59:88:b9:46:39:49:a5:d3:f1:dd:ee:8b:e7:6f:c9:bd:97:13:
         c0:a4:b9:67:9b:42:e9:9f:a6:10:c9:ae:f4:a4:57:92:7d:78:
         e8:b5:81:5e:b7:27:1c:6e:bb:e5:e2:3e:33:91:30:18:87:51:
         a9:ed:e7:c3:e6:54:d7:80:34:f2:15:0c:10:cb:99:c4:1f:3a:
         9d:c0:ef:d5:5b:88:10:e9:f5:19:d6:bc:df:57:72:ff:04:e9:
         84:be:f1:72:a6:d2:6b:61:f9:c5:e4:f3:14:2e:ab:7e:33:5b:
         cd:bb:55:92:64:21:d6:07:62:60:0d:ba:11:49:6c:1c:d4:6b:
         91:8b:b9:59:33:ee:ca:88:3a:35:7e:80:3d:8a:ec:b1:cf:d4:
         2d:41:43:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl2qY4yJArhB4sfvtAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk
YjEwMB4XDTI1MDQwOTAxMDA0N1oXDTI1MDcwODAxMDA0N1owLzEtMCsGA1UEAxMk
ZTg1MTIyZmEtNDEyMy00MWM0LThiOWMtZDJiZWVhMWJmMTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD1l9/hkxsa/Nsct3MiQl36VjLKOV3MKjf31
TlqkJlSdkpBkeJ1Zhu70DWP/3igPmYDz/hheph9cy3DJLmgD8M14XllrloEXXZDH
hDINfJyNOXCPkEjIdSO+LP0NKqdH77KA1ZRK7x+U7lqQzBCjfmLAWjSLXJjdIILY
62/uLGBPOAkb0lVX4FYs43Tx1Trgn/MUiR0q64bpklXd6OQsHFnCCfbFV0x9R6is
LwL++WNjhkgAeWOCTJw/dBiTs6TKe4OpaDT0hjg3uT1I7fUua10v+o6vRHdgy7i+
i1d1ZgjjtZ+xJmQVykk16C0h/tntoB+xexrYW8lsvscOxDWvTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJpDdOJYTNMMDJ/12JYAqWqEBcg1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3
OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvOGFmNDQzZjUtNjc1Yi0z
NWU5LTk5ZTQtNjI3MjJkYjM5ZjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0
YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1
ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl
NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDM8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADmz/FTLd00bfVn/+X2PP4qJVVzED4YlkWaVrReOFlwBbWc1zIF1IhbM
TwCBsDJihEgWdyiUmBSl1EElLtvzO1fdaDOskIacXhaDGW1pLo3iNtb0eOnM+5ZH
v3gwmZJXR+DPI8/Hdezu7hO8wVmIuUY5SaXT8d3ui+dvyb2XE8CkuWebQumfphDJ
rvSkV5J9eOi1gV63Jxxuu+XiPjORMBiHUant58PmVNeANPIVDBDLmcQfOp3A79Vb
iBDp9RnWvN9Xcv8E6YS+8XKm0mth+cXk8xQuq34zW827VZJkIdYHYmANuhFJbBzU
a5GLuVkz7sqIOjV+gD2K7LHP1C1BQwA=
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:02 2025 by rpki-client on console.sobornost.net