Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/2b5716e5-347d-3e1a-aa5a-a864182857e3.roa
File:                     2b5716e5-347d-3e1a-aa5a-a864182857e3.roa (raw, json)
Hash identifier:          OJ5YirAtJpQuJVVnZIgfW8O/MT4yh4rAmYIeYwCdjk8=
Subject key identifier:   B7:F6:C6:59:7B:97:6B:57:A2:BB:23:74:88:5E:A2:45:32:FA:F8:C9
Certificate issuer:       /CN=b32df622-e1a5-4db3-ad43-9b54a4586e4f
Certificate serial:       010D0C9F432858496222FAC1A6114318589EAA00
Authority key identifier: B1:65:BC:25:E9:9C:02:29:A8:E2:EF:A3:D5:A7:1F:26:B8:E8:3D:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/2b5716e5-347d-3e1a-aa5a-a864182857e3.roa
Signing time:             Tue 01 Apr 2025 16:33:31 +0000
ROA not before:           Tue 01 Apr 2025 16:33:31 +0000
ROA not after:            Mon 30 Jun 2025 16:33:31 +0000
asID:                     395267
IP address blocks:        162.27.232.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:62:22:fa:c1:a6:11:43:18:58:9e:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32df622-e1a5-4db3-ad43-9b54a4586e4f
        Validity
            Not Before: Apr  1 16:33:31 2025 GMT
            Not After : Jun 30 16:33:31 2025 GMT
        Subject: CN=21be9786-dc9f-4516-8aea-be788ad299c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4d:ed:4d:f1:b7:bb:b2:5b:6b:5d:1c:97:25:
                    0a:b0:f5:d0:dc:c9:0b:9d:dd:7d:c0:02:72:16:f2:
                    31:45:6a:ae:1d:c1:4d:5d:c7:c1:44:26:40:b0:4f:
                    61:3a:80:47:5f:1e:61:8f:ab:98:4f:bb:1a:d8:22:
                    68:20:7e:3c:c1:a2:a4:08:07:5e:13:19:5d:22:e9:
                    a4:03:b6:54:e3:98:d1:1a:3c:20:c9:c0:41:8d:dc:
                    a3:ca:99:cb:c4:d3:26:79:55:bd:a7:7b:53:99:ae:
                    50:32:bc:15:07:92:b7:38:ab:8b:99:a3:da:74:cc:
                    d6:37:df:28:e1:65:b2:f7:9a:e4:b9:f1:f0:b2:03:
                    ca:78:45:42:6e:bf:4d:40:7d:32:87:07:5b:06:f9:
                    55:2b:b7:7f:bc:55:d3:a6:f5:45:13:5e:49:a9:1a:
                    e9:8a:55:4a:96:c6:6c:4a:f8:a3:ea:81:8d:45:dd:
                    3d:57:a2:6a:80:d1:7a:a3:3f:3a:88:52:de:5a:5e:
                    a1:e4:bb:86:1e:75:aa:29:ac:b8:eb:71:2f:ca:f8:
                    93:08:4f:29:9c:5f:73:5f:a1:a1:b6:c3:32:26:55:
                    eb:e4:54:b9:3d:ea:60:2d:c0:f9:36:c4:c9:f4:32:
                    1d:fb:5d:d6:c1:b2:a3:5a:b7:4e:31:02:57:72:f9:
                    5d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F6:C6:59:7B:97:6B:57:A2:BB:23:74:88:5E:A2:45:32:FA:F8:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/2b5716e5-347d-3e1a-aa5a-a864182857e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/b32df622-e1a5-4db3-ad43-9b54a4586e4f.crl

            X509v3 Authority Key Identifier:
                keyid:B1:65:BC:25:E9:9C:02:29:A8:E2:EF:A3:D5:A7:1F:26:B8:E8:3D:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.27.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:e4:b6:e2:98:69:90:ca:f3:1e:b5:50:48:71:7a:40:7b:68:
         54:b0:f8:ea:0c:26:d8:36:ce:53:92:c8:cc:a8:f7:a6:cf:08:
         61:78:ca:d1:c9:e0:5f:5c:ec:d5:31:ca:38:94:f6:e7:39:2e:
         84:17:f8:7f:dc:80:45:84:b4:f0:dc:bb:1a:bb:25:2b:be:e7:
         a1:31:9c:ee:ea:84:9e:16:fd:f4:a9:e9:9d:83:cf:30:ec:d4:
         1d:73:0d:61:02:de:c9:a7:bc:3b:41:a4:7e:3b:13:d3:f9:13:
         6c:b0:31:9c:08:e3:3e:6b:7c:2e:38:2b:08:14:73:5e:3e:69:
         d1:5e:e6:b6:36:ed:86:b0:f7:71:3c:ca:3b:3d:e9:b2:eb:a0:
         75:26:d4:37:fb:b4:3c:58:60:57:be:01:fc:6d:30:cc:2f:1a:
         d0:5f:0b:83:f5:ed:2b:ff:c2:96:e2:53:a5:f0:28:46:40:e3:
         d3:2b:c2:0c:3b:91:49:22:c2:b4:5c:a8:b0:19:76:66:93:34:
         6d:6a:7c:49:9f:86:4a:3a:97:ae:dd:44:f6:fd:dc:77:58:28:
         45:bc:60:3b:f1:72:d6:39:5c:50:ca:51:d7:b6:a9:82:17:e3:
         5b:ca:77:43:15:54:05:ad:80:b5:ac:e2:57:74:2a:a1:71:0f:
         62:66:39:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:03 2025 by rpki-client on console.sobornost.net