Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/6e09fdd9-00d0-3702-813a-d8ac79c366bb.roa
File:                     6e09fdd9-00d0-3702-813a-d8ac79c366bb.roa (raw, json)
Hash identifier:          SGJtBqzaeD6mgvszaJXPYkqaRGyKN9txbMPjk0nvOh4=
Subject key identifier:   1F:DB:52:BE:DF:CD:7E:E1:28:38:81:AA:2A:62:CF:41:59:3B:D1:F8
Certificate issuer:       /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial:       010D0C9F4328584965E979925DF1ECBBFD9AE700
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/6e09fdd9-00d0-3702-813a-d8ac79c366bb.roa
Signing time:             Thu 03 Apr 2025 01:00:46 +0000
ROA not before:           Thu 03 Apr 2025 01:00:46 +0000
ROA not after:            Wed 02 Jul 2025 01:00:46 +0000
asID:                     14477
IP address blocks:        98.159.208.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:e9:79:92:5d:f1:ec:bb:fd:9a:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
        Validity
            Not Before: Apr  3 01:00:46 2025 GMT
            Not After : Jul  2 01:00:46 2025 GMT
        Subject: CN=f8113a4f-b5ad-4674-b0b3-e2725d09ffae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8b:dc:11:28:5a:d2:5a:52:69:ba:eb:15:48:
                    2b:c6:83:5f:f8:d6:0f:3e:e4:0e:bb:3b:4c:fc:4a:
                    c9:1a:72:fb:dd:56:1f:2a:e8:ac:89:74:6d:d9:8c:
                    2d:6f:bf:23:05:26:33:9f:f0:d5:e2:16:63:e4:d4:
                    4f:30:e0:59:7c:7b:aa:b8:14:43:56:9b:f3:6d:2c:
                    df:e4:55:66:6c:24:aa:37:af:fe:48:2b:44:ac:90:
                    83:bc:36:cd:2d:6e:8c:e1:2a:f3:2a:21:28:43:be:
                    bb:e8:ce:07:76:37:e9:ea:f7:e1:41:96:8c:18:d5:
                    ed:3c:d7:f7:4a:b7:49:f4:e2:f7:b1:df:e3:b5:9b:
                    19:24:48:01:2f:7f:39:a2:1b:cb:e9:92:4c:b7:74:
                    eb:8d:2d:95:09:a0:fe:a5:9a:f2:08:18:3c:f4:5b:
                    c5:47:09:17:ab:2a:4b:ad:39:ff:98:de:0a:01:26:
                    19:16:87:47:de:77:04:25:77:54:94:6d:d8:4d:d4:
                    7d:33:e0:c1:db:86:45:1d:3a:58:ff:12:49:0a:a3:
                    e7:f4:a6:71:f7:bd:af:e9:93:25:ec:eb:8a:1b:0d:
                    08:7f:a3:d0:f5:f8:54:cb:ed:cc:b4:c7:88:96:15:
                    aa:a9:21:7a:fd:d7:68:c0:cf:c3:9a:f5:6b:13:77:
                    60:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:DB:52:BE:DF:CD:7E:E1:28:38:81:AA:2A:62:CF:41:59:3B:D1:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/6e09fdd9-00d0-3702-813a-d8ac79c366bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.159.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:87:4e:03:a7:9d:c1:51:b8:46:76:3d:5f:ae:12:10:37:65:
         da:a5:e8:43:75:46:86:89:54:0d:58:79:8a:04:bd:08:a8:e4:
         ce:73:69:53:1d:a7:cd:a1:37:68:48:32:d6:e7:6b:7c:13:a7:
         a7:e4:41:91:38:84:e9:90:69:de:ee:4d:73:0f:27:64:49:08:
         cf:0b:fb:f8:0a:bc:89:64:86:ab:1c:ce:e1:51:3f:3e:2e:9b:
         b2:09:f2:c1:0a:94:4c:de:de:b5:fe:85:ac:73:e9:06:7e:36:
         c6:54:41:a5:e0:ed:4b:4a:a9:b4:82:01:01:48:66:de:52:eb:
         58:28:6c:73:af:48:d3:ba:32:96:4b:df:f3:30:70:04:a5:88:
         ef:5d:52:04:31:84:68:2e:45:1f:89:4b:77:b4:b1:c0:94:ae:
         8f:41:9c:90:d3:2a:85:8b:93:3b:76:9f:8a:06:a3:07:0d:e8:
         0c:9b:cd:fb:c7:95:5c:1f:47:84:3d:34:f2:1d:61:0f:93:8a:
         45:32:e2:da:61:2d:64:39:98:f8:e5:da:d0:54:6a:be:60:84:
         75:7f:59:33:e4:c9:eb:ef:c9:b5:33:c1:b1:73:2c:a8:c2:aa:
         a4:31:d4:7e:f5:bb:37:f7:f5:17:37:65:f4:50:9a:e1:82:0c:
         f1:45:66:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:13 2025 by rpki-client on console.sobornost.net