Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/7fc32d22-651e-3067-93d1-ce576e67cc21.roa
File:                     7fc32d22-651e-3067-93d1-ce576e67cc21.roa (raw, json)
Hash identifier:          t3ql9/d8N7R1KKV+/2p+sNpHAXuXoDOze9kmT3S/D9A=
Subject key identifier:   08:BE:D3:19:D8:34:6B:19:0B:B3:26:3C:E2:51:7C:B6:6F:BA:D1:F0
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F432858496A19AEB10A724A9BF0F1C580
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/7fc32d22-651e-3067-93d1-ce576e67cc21.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     109
IP address blocks:        204.69.200.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:ae:b1:0a:72:4a:9b:f0:f1:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=aaf5c855-4d43-455f-9389-4510bfcb05a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0b:14:a4:5c:93:f3:ea:59:e6:5e:10:38:7f:
                    d2:13:fa:5a:a8:02:c3:0d:8c:fb:63:d9:02:2f:be:
                    ef:1c:a3:a1:74:09:f4:5b:0b:05:f8:1e:19:60:75:
                    43:55:50:e3:3c:74:af:b1:74:73:9f:38:ac:39:14:
                    c7:12:25:77:c9:af:96:6a:53:85:c3:8c:35:59:50:
                    e8:69:d4:88:28:43:cd:6c:a8:53:76:53:51:a1:d1:
                    ff:43:51:b5:16:01:ee:4c:1d:0d:f3:bd:4d:46:bd:
                    75:43:87:6c:76:22:2d:18:b6:8f:da:2b:01:8d:47:
                    64:1d:cc:0b:18:21:f9:81:0e:27:34:8d:78:d5:44:
                    f7:0b:eb:da:ad:85:fd:1d:0e:dd:ed:fe:32:a2:1b:
                    33:8f:c2:d4:8a:63:5b:3d:7f:e3:61:75:9a:50:cc:
                    66:9c:96:ac:5b:d9:b5:81:da:21:c0:b7:86:68:e2:
                    80:74:7b:1e:ed:00:d2:eb:95:16:cc:8d:9b:75:f1:
                    40:72:09:e5:b5:fa:fc:c4:57:be:29:56:d4:b2:83:
                    8c:e6:c2:4c:c1:76:82:98:e5:45:b9:e5:d1:34:ef:
                    56:bc:14:61:59:1b:54:11:f2:35:b4:3c:3e:b9:44:
                    98:62:30:23:ca:f9:69:02:13:66:3b:30:d3:93:78:
                    18:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:BE:D3:19:D8:34:6B:19:0B:B3:26:3C:E2:51:7C:B6:6F:BA:D1:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/7fc32d22-651e-3067-93d1-ce576e67cc21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.69.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:d5:da:40:b1:30:3b:8b:a3:2f:cf:a5:ff:fc:b2:60:d7:82:
         55:20:a9:43:0f:61:9c:c9:14:04:14:89:a8:35:c9:4b:78:27:
         28:79:29:8b:0c:b1:16:77:62:c4:28:78:cc:e8:b9:40:b9:ac:
         db:c5:93:12:71:ad:ec:42:cf:13:c7:5e:ed:ef:3a:80:e3:79:
         6d:ed:55:4d:a5:b8:48:ff:97:4f:f2:a3:74:9e:5a:5d:12:1d:
         34:85:d3:2d:f3:f4:84:9a:7e:a8:c7:a0:22:75:3e:a4:3d:06:
         92:e4:70:61:74:08:30:57:fc:b5:0d:c8:2e:9b:ed:d5:86:de:
         3a:95:3d:cb:72:7d:09:2a:23:27:12:c1:69:8d:70:7f:07:fa:
         51:f1:39:3a:86:5c:87:6a:6f:6a:bc:d5:db:d0:aa:d6:dc:c9:
         9b:67:79:60:17:49:11:be:55:40:e2:48:d6:75:1b:ee:0e:a5:
         8c:28:09:4b:2e:98:25:fb:59:f2:28:f2:45:02:2b:d2:41:d8:
         09:cc:9c:62:01:40:b1:48:0e:bc:18:2a:27:7d:5f:45:73:93:
         03:db:6e:c9:66:ab:78:9a:df:d0:91:02:3e:05:65:3f:b1:93:
         91:3e:87:15:23:88:51:4f:dd:3b:7f:1d:30:42:af:57:bf:44:
         b8:fe:13:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:02 2025 by rpki-client on console.sobornost.net