Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/057ecdf7-55d6-3659-a4a3-5c1ca310cf6e.roa
File:                     057ecdf7-55d6-3659-a4a3-5c1ca310cf6e.roa (raw, json)
Hash identifier:          FQyOkjLAkLcMkrOFlBYI1zkV3C+fmpo5pxRHzVRi6yY=
Subject key identifier:   91:C9:E2:07:F4:D0:38:75:07:60:51:65:43:55:7A:6D:5A:AD:86:92
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584971143096EF24006BA5FEA400
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/057ecdf7-55d6-3659-a4a3-5c1ca310cf6e.roa
Signing time:             Mon 07 Apr 2025 01:00:47 +0000
ROA not before:           Mon 07 Apr 2025 01:00:47 +0000
ROA not after:            Sun 06 Jul 2025 01:00:47 +0000
asID:                     5769
IP address blocks:        216.113.120.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:71:14:30:96:ef:24:00:6b:a5:fe:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Apr  7 01:00:47 2025 GMT
            Not After : Jul  6 01:00:47 2025 GMT
        Subject: CN=e144904c-eef7-4ca0-a693-4dd7835ad6a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c0:ab:50:e9:51:bf:5d:c3:e6:fe:fc:05:b5:
                    01:2b:a3:fb:ab:84:2f:f8:68:b4:fc:62:76:f4:0e:
                    c9:86:50:b1:84:a9:32:13:fb:39:3f:bd:de:d2:03:
                    44:75:60:53:90:34:96:6d:56:e2:3c:ea:be:52:73:
                    b8:74:f8:1f:83:bb:be:42:77:fb:8f:13:dc:e8:70:
                    1f:5b:0d:1d:11:ab:68:ab:ee:35:2b:d8:e1:9f:f8:
                    8d:8b:b0:c4:a3:6d:d6:6b:a7:8a:6b:2a:ec:14:e5:
                    d2:72:30:dc:dc:51:17:a5:d7:be:ee:9c:e7:1f:0f:
                    b8:73:5e:e3:9c:c8:5f:72:09:b0:63:f1:3d:f4:a6:
                    71:49:d5:68:db:70:91:63:7f:6e:f9:99:4d:df:a1:
                    ad:9c:e8:e5:0a:66:0e:3a:47:8e:03:44:6f:55:74:
                    49:79:1b:65:51:f8:b8:27:0e:ed:0a:b0:f9:ca:8e:
                    6b:66:22:7f:63:24:cf:bf:83:4b:8f:17:0c:e6:e0:
                    0d:bc:18:cf:74:84:5c:25:69:ef:db:a5:ff:92:79:
                    54:b3:64:ab:8e:62:12:a8:91:0e:8a:da:e0:d4:78:
                    36:34:f2:c0:99:28:b5:7e:e4:e7:78:d1:4d:80:71:
                    c6:70:8f:f5:20:27:6f:1d:60:2c:fd:95:0d:a7:3c:
                    37:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C9:E2:07:F4:D0:38:75:07:60:51:65:43:55:7A:6D:5A:AD:86:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/057ecdf7-55d6-3659-a4a3-5c1ca310cf6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.113.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:d6:ac:5e:9e:ae:c5:4f:3b:05:4f:58:d7:d4:6a:db:78:a1:
         fd:bc:22:1b:ee:c7:94:04:e1:2f:6b:a1:af:20:c3:23:36:fe:
         c8:a3:6c:2a:dd:59:fc:d3:d9:db:e1:a7:17:b2:4d:7d:c0:5a:
         ff:0d:5a:1b:ad:ad:c3:52:b3:73:90:2e:93:79:f9:d5:64:1e:
         20:36:b9:7c:9c:a2:e3:df:9d:c4:b0:94:8d:b2:a4:80:32:80:
         d0:f6:c2:ac:a8:9d:55:58:71:82:ef:5f:49:77:ab:5e:ad:f0:
         11:5b:b1:61:22:db:f2:7a:ca:3c:90:8f:41:85:0b:fa:6a:ed:
         73:e5:c4:4e:6b:15:de:f8:71:0a:7f:45:3b:22:a4:6a:82:73:
         23:80:c3:8b:97:af:70:ba:bf:15:b7:de:b7:33:60:0f:cc:b9:
         14:e7:97:28:93:b9:dd:40:e8:27:fc:27:ad:bb:ef:d0:3c:0e:
         67:88:98:f1:7c:66:88:38:f5:40:5d:e7:ad:33:4e:e4:53:4a:
         6d:95:ff:ea:6a:73:0d:3c:3f:9f:cb:a9:03:aa:21:15:93:db:
         6c:d9:eb:6a:88:5d:f5:a7:0f:4f:4b:99:69:5c:1a:ae:39:ef:
         38:36:d7:af:01:e7:4d:b1:fa:34:b3:e7:bb:9d:29:e5:3d:c8:
         bb:b7:5d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:29 2025 by rpki-client on console.sobornost.net