Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/3de4ece1-72bc-3220-bd19-54f3e9a4b335.roa
File:                     3de4ece1-72bc-3220-bd19-54f3e9a4b335.roa (raw, json)
Hash identifier:          LWleuONcpliq44hsjLNySGqRCwxQMN8QIgeHXOk/0cY=
Subject key identifier:   39:DB:64:EF:BD:67:F2:19:60:AC:3F:F6:D3:A0:54:A1:88:61:53:55
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584971143150539D0B322CF24080
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/3de4ece1-72bc-3220-bd19-54f3e9a4b335.roa
Signing time:             Mon 07 Apr 2025 01:00:47 +0000
ROA not before:           Mon 07 Apr 2025 01:00:47 +0000
ROA not after:            Sun 06 Jul 2025 01:00:47 +0000
asID:                     395075
IP address blocks:        216.113.48.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:71:14:31:50:53:9d:0b:32:2c:f2:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Apr  7 01:00:47 2025 GMT
            Not After : Jul  6 01:00:47 2025 GMT
        Subject: CN=73fd4760-d536-4064-9607-739ba151cd5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7b:44:15:ba:7c:0c:62:f3:c3:56:5a:a1:bf:
                    81:94:ea:f2:11:c0:a2:42:09:89:15:ef:53:e6:93:
                    8a:d1:8b:18:4a:fc:a4:c7:69:b5:b5:68:e3:9b:45:
                    07:4a:28:ea:bf:f7:c0:71:6c:a1:ae:b3:14:a6:aa:
                    d6:8b:6c:2e:3b:19:6b:84:93:a0:17:f4:96:0d:9c:
                    be:ae:0b:ef:c4:88:16:d6:06:72:dc:7f:65:d5:51:
                    4f:68:0a:8b:bc:3a:1a:10:d0:9c:dd:fe:42:f4:fc:
                    0d:e6:45:f6:e0:7e:8b:80:b8:b7:38:07:1e:d9:e0:
                    f3:a7:23:9c:49:7e:07:4a:a5:63:27:45:c1:5b:fa:
                    9f:2f:56:f6:70:6f:fa:97:15:5e:cd:81:89:3e:c2:
                    0a:32:12:67:3d:92:c6:39:8c:91:ee:27:cd:44:b9:
                    ce:28:ac:b3:c8:64:93:ce:f6:38:b1:a7:4e:cb:67:
                    dd:ad:44:49:8d:c6:eb:58:bd:03:cc:0c:b3:ee:f0:
                    21:1d:72:90:d5:f6:05:ed:c4:fa:df:a4:5d:4b:21:
                    01:67:aa:9d:4d:e5:29:7e:7c:f2:9c:e0:de:74:9d:
                    c4:3a:d1:7b:95:ad:7d:3d:83:db:42:15:0f:f5:b5:
                    13:e8:51:61:4c:f4:e6:68:f0:d0:f4:12:a4:69:f9:
                    c7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:DB:64:EF:BD:67:F2:19:60:AC:3F:F6:D3:A0:54:A1:88:61:53:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/3de4ece1-72bc-3220-bd19-54f3e9a4b335.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.113.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:0d:12:c1:ef:16:0a:dd:54:3a:3f:a9:c5:42:68:19:59:d2:
         24:2d:d4:67:ed:7b:7c:8d:a2:8a:f3:27:c7:fd:f0:7b:38:26:
         bf:ed:ef:a3:15:46:d2:29:d9:c5:95:ad:2e:8d:97:30:8d:64:
         91:e1:30:91:80:0b:ce:08:81:87:8e:0d:b9:ff:de:22:78:c9:
         47:b4:5d:c5:a9:48:f8:1d:83:82:b9:f9:c7:ff:01:9d:a3:05:
         f3:17:33:00:aa:fc:ed:d9:f4:f5:63:ed:34:74:b9:d5:1d:f2:
         71:9a:9f:3a:eb:aa:fe:d6:66:92:65:5d:24:0f:28:18:c5:4f:
         36:db:b9:7b:cd:e3:a6:47:ab:1a:48:60:0b:40:bd:3b:2c:d3:
         e4:ef:35:5f:1a:c3:a1:7d:9b:97:14:9e:9a:e3:90:44:a6:4b:
         28:e3:95:29:05:4a:08:c5:4a:fb:2d:ce:ef:0a:58:3d:82:57:
         29:53:70:02:8e:37:68:d9:a8:88:5f:2b:09:92:7c:7a:d7:74:
         11:a8:81:3a:92:f0:6a:db:eb:2e:fc:7b:12:d8:0d:38:14:51:
         3c:06:af:9b:ca:84:00:b6:6f:4b:69:b8:e4:fc:38:6f:bb:f2:
         36:62:bc:a1:5f:13:a8:61:8a:bb:44:74:6c:ed:d4:09:62:e4:
         a0:c0:48:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:29 2025 by rpki-client on console.sobornost.net