Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/18ee462e-71c1-3b44-84fc-d309b939e87d.roa
File:                     18ee462e-71c1-3b44-84fc-d309b939e87d.roa (raw, json)
Hash identifier:          SGL+D7pvYromiyCyBXIZGWJCItTCWNAWI5UUmuFubSs=
Subject key identifier:   48:85:E5:CF:72:6B:44:91:16:D2:0F:AB:95:40:D1:F2:60:51:63:B5
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858496A19B9573A26DBE8E798D540
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/18ee462e-71c1-3b44-84fc-d309b939e87d.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     7029
IP address blocks:        166.82.224.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:b9:57:3a:26:db:e8:e7:98:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=81899ee0-8e0f-43a4-9c18-c6626e42c61e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b8:bb:0a:ea:15:bc:41:a3:48:71:e3:10:15:
                    60:b2:c8:b6:65:c8:56:59:ad:37:36:e3:09:fa:d9:
                    26:9f:d7:22:db:5d:16:7f:74:0c:14:0b:e1:e1:5b:
                    70:d8:39:2b:36:21:da:d6:c3:a2:2d:12:98:7a:eb:
                    20:32:c7:98:42:48:aa:f4:78:a8:19:bf:37:eb:23:
                    87:4d:c4:1d:62:cd:94:ba:29:1e:12:6c:69:8f:9f:
                    ee:22:43:f8:16:ef:84:58:23:4d:e4:4d:be:37:6f:
                    be:1c:30:2b:f0:bf:81:11:8e:ba:e1:99:b1:5c:0f:
                    53:ce:25:27:b9:0c:3c:09:af:d3:06:d5:be:e8:44:
                    8e:d5:6b:b0:9e:8f:5b:25:72:68:19:4b:62:2f:22:
                    e4:40:99:87:53:57:27:b5:71:0d:79:f4:11:e5:77:
                    c4:a7:28:b6:6f:e5:74:f8:4d:ed:0a:ab:39:ab:09:
                    4b:ce:b1:2d:03:1b:4f:ba:43:9b:d9:0e:4b:35:6b:
                    65:1d:b3:08:50:e2:f7:2e:5b:47:01:9a:b4:c5:8c:
                    fe:a7:00:ad:8d:fb:94:26:1b:86:79:24:84:d7:34:
                    e1:a5:d5:53:10:7b:10:77:df:19:76:11:cd:42:93:
                    8f:c6:d0:fe:ea:f2:fb:bd:6f:ce:3a:be:e7:a9:1f:
                    34:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:85:E5:CF:72:6B:44:91:16:D2:0F:AB:95:40:D1:F2:60:51:63:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/18ee462e-71c1-3b44-84fc-d309b939e87d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.82.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:e3:75:94:15:2b:2e:ff:0d:a8:e8:80:95:f6:b0:6a:a4:eb:
         6d:58:11:4b:e0:be:b2:38:ed:24:75:a8:eb:60:ed:d5:87:d4:
         79:92:2c:39:fc:ea:5c:ab:52:ad:88:45:4f:9c:b2:2f:f8:34:
         b2:9e:ed:44:5e:39:d7:94:9f:39:50:19:3c:6d:43:51:2e:eb:
         69:ea:aa:33:71:fa:03:6d:44:ba:08:0a:06:f8:e2:8f:68:16:
         16:98:bf:3b:c4:28:0d:76:9e:b4:5d:9c:6f:a2:13:38:65:3a:
         b1:36:87:0b:ce:d2:13:e8:24:64:4f:b6:4a:9a:1f:e6:5e:fa:
         b9:e7:c1:23:8e:37:9f:c6:15:7e:67:5d:2f:b8:09:ac:40:0a:
         87:26:69:e4:42:e2:5b:d7:ec:73:0a:db:84:17:4a:8a:4f:11:
         6a:51:89:72:96:07:63:25:51:55:38:72:11:21:b7:4b:99:16:
         e2:56:95:f9:cc:95:e3:db:be:2b:01:11:6f:0c:63:73:2d:5e:
         82:69:b1:af:d6:2b:3e:07:cb:92:7b:a8:d6:54:b4:bc:1c:f7:
         7c:5d:a4:15:cb:cf:35:0e:d0:5f:0f:15:61:c8:29:0f:d4:eb:
         97:03:16:09:76:ee:26:de:09:96:37:6b:58:18:88:74:86:b0:
         ed:77:2f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:56 2025 by rpki-client on console.sobornost.net