Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/4a03bb71-d8cc-38ec-8234-2d7210c7144c.roa
File:                     4a03bb71-d8cc-38ec-8234-2d7210c7144c.roa (raw, json)
Hash identifier:          CKA1QfTLIKe4wcdaFak2zK62il7//OgSpEtWC4ItMXw=
Subject key identifier:   44:D0:A4:52:6A:96:27:96:A5:7D:87:0C:70:B2:58:CF:56:99:4D:1A
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F432858495ABEC8386C0D425BDAACC400
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/4a03bb71-d8cc-38ec-8234-2d7210c7144c.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     7992
IP address blocks:        80.86.16.0/20 maxlen: 20

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:c8:38:6c:0d:42:5b:da:ac:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=5c99b886-2b3a-44b6-b59e-01bb0a8e9538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ff:8d:62:07:05:c6:2d:67:19:e4:79:d0:5e:
                    01:06:fc:64:bd:ec:a9:ee:6f:41:20:c1:1c:0c:f6:
                    82:b6:c9:0c:98:71:2b:54:1e:e2:2e:5c:62:04:a8:
                    29:1e:35:00:05:78:19:84:7d:67:d7:8f:03:8a:a8:
                    a9:e1:04:ef:dc:24:dd:08:96:36:90:b1:39:83:eb:
                    06:74:77:73:da:56:b9:a0:58:1b:0e:2b:4c:e8:39:
                    87:80:ca:69:1d:30:99:82:1e:e5:30:ab:99:de:aa:
                    bf:91:2c:d6:e5:df:f1:64:c9:9f:3e:76:b1:b7:0c:
                    dd:62:39:22:87:9f:32:a5:7b:60:fe:0f:86:e1:d5:
                    ab:ee:7f:7d:0f:62:d3:8b:bd:89:c0:2c:55:78:e0:
                    6d:33:cc:d5:90:9c:8f:6a:7c:b2:da:49:3c:c4:c4:
                    d3:4c:fe:54:60:01:29:cf:28:1f:20:57:93:5d:17:
                    22:26:a9:e3:85:dd:3d:45:cc:a5:b1:9f:18:85:b2:
                    e2:53:4e:70:2f:51:98:89:80:9b:1a:40:57:87:f8:
                    31:de:94:65:ab:a4:e9:00:b3:de:a0:7b:d9:e7:98:
                    f7:e8:03:d8:2f:94:89:99:26:c3:25:b3:b8:91:30:
                    93:e7:1f:6f:df:1a:a4:f4:2c:95:cc:5a:f6:dd:17:
                    db:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D0:A4:52:6A:96:27:96:A5:7D:87:0C:70:B2:58:CF:56:99:4D:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/4a03bb71-d8cc-38ec-8234-2d7210c7144c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.86.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:b8:b2:a2:8f:e0:70:f8:a5:99:8b:95:54:60:9d:90:5a:d2:
         5d:e9:76:32:a0:66:7c:b4:9c:eb:e9:bf:7a:8d:b2:95:20:75:
         5d:04:b8:75:7a:e1:61:3a:62:79:c7:bd:b2:ff:f3:61:24:0d:
         99:b6:7c:ad:fd:81:ba:fc:73:b1:68:1b:8f:fe:74:54:c8:6a:
         f7:8c:97:74:03:31:fc:47:63:67:69:1f:78:25:76:ac:84:00:
         de:71:2e:23:0f:94:82:fa:60:34:5a:3b:27:10:07:a2:92:d1:
         95:0e:54:b4:85:f5:48:5b:31:4c:81:17:c4:86:46:fc:f0:c2:
         39:a7:8a:cc:6e:8a:a5:70:f4:ff:22:2d:32:67:62:7a:89:19:
         c2:14:a1:e4:b6:86:72:a5:b0:8f:ef:92:63:3a:d1:4a:d8:ae:
         63:a6:18:c9:a9:cf:2b:f0:8b:4a:c5:a8:56:2d:a1:b3:9c:89:
         85:25:22:f0:da:d8:e4:e5:0f:8a:dd:ea:3d:bf:5c:7c:cc:74:
         70:37:6e:03:72:e8:cb:ce:c7:5b:43:2e:ab:5a:26:72:7f:a7:
         52:d6:18:2a:41:3b:4e:f5:8f:78:fc:42:34:75:d8:63:11:72:
         b4:eb:59:14:48:1e:28:21:32:24:60:34:cc:7b:38:da:74:0c:
         fb:ac:6e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:27 2025 by rpki-client on console.sobornost.net