Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/15d3685b-a7d7-3a80-b431-2e7b74bade90.roa
File:                     15d3685b-a7d7-3a80-b431-2e7b74bade90.roa (raw, json)
Hash identifier:          HoshUnmpS8UBjZKEy4euuxijUoQcVPFFPm65UoAkI1g=
Subject key identifier:   F0:00:0E:21:73:20:2F:CF:81:69:9E:EC:EA:37:37:D1:71:B7:C8:61
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F43285848FD56C9F9C70C53A705537280
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/15d3685b-a7d7-3a80-b431-2e7b74bade90.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     53508
IP address blocks:        206.255.192.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:c9:f9:c7:0c:53:a7:05:53:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=68367a05-3678-4a19-bf41-d1a95a9e99a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:36:86:60:4c:12:f6:a1:75:c5:2c:fe:81:d0:
                    66:50:21:2d:11:f3:24:6b:3c:92:25:e7:5c:b6:3e:
                    09:4f:02:e4:57:7c:a2:64:94:b2:03:b5:ad:9e:d1:
                    21:e3:61:05:24:ca:fa:7d:c1:53:46:5c:9a:92:ac:
                    2e:2d:f4:e8:52:6c:30:d4:74:f8:6c:1e:b5:e2:3a:
                    67:87:e9:0e:4c:a8:5a:63:10:39:9d:44:f2:94:82:
                    3f:bd:31:de:18:61:a3:73:4d:e3:3b:ce:31:33:31:
                    0a:14:16:fa:24:5f:94:4a:10:35:2a:03:6e:89:ef:
                    6c:8e:a9:d2:d3:d0:ab:32:65:ee:4c:b2:ee:31:c8:
                    fd:2b:65:bd:99:45:3d:ac:75:47:36:ca:98:86:05:
                    28:22:c9:af:e8:71:8a:d6:16:30:2c:7a:2d:f0:03:
                    68:31:c9:24:12:37:9f:a6:67:8d:8b:ba:d7:54:2e:
                    a4:d6:a9:66:4a:6b:96:f4:d0:da:05:e8:98:bc:31:
                    59:d8:d5:48:0e:d5:c7:df:6d:07:c1:30:90:5a:df:
                    2a:81:3e:f0:d8:35:ad:fd:2e:57:8f:c3:c3:c9:f5:
                    3f:37:bf:cc:8b:32:35:8c:47:08:96:e7:4d:45:66:
                    1b:7e:20:eb:98:86:74:cc:bb:31:ec:f3:9a:19:cf:
                    6e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:00:0E:21:73:20:2F:CF:81:69:9E:EC:EA:37:37:D1:71:B7:C8:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/15d3685b-a7d7-3a80-b431-2e7b74bade90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:91:5d:20:da:da:a7:a3:1a:f1:20:01:fa:de:f5:f1:ea:8c:
         b5:64:62:74:e9:90:10:a8:f1:9a:9a:27:1a:59:f7:18:20:2e:
         cf:0b:fd:3a:94:78:13:59:80:16:2b:66:c5:26:4d:59:f9:cd:
         2e:87:ff:be:41:37:d3:53:a8:8e:86:5b:03:18:c1:01:d9:41:
         80:82:c2:de:e5:c3:e6:79:be:de:68:70:1b:9a:93:7e:31:36:
         5c:2a:f6:0a:97:e5:40:22:8d:c1:2b:dd:84:47:89:78:fe:c7:
         6a:e1:9c:07:9d:4a:4a:dd:ab:5b:0b:0b:48:2b:40:e6:2b:29:
         e3:27:46:05:f3:7f:8f:89:61:25:43:3f:76:a9:2b:f4:b5:eb:
         ac:8c:76:c4:a6:1c:bd:69:c7:92:d2:83:0d:39:b6:03:60:07:
         68:68:54:41:11:ac:13:27:1c:9c:d6:eb:63:46:32:21:18:c1:
         ea:fc:ea:27:9f:2a:6e:99:39:c4:e2:29:ed:06:38:d6:7a:8b:
         4d:8a:d2:fa:61:ea:f5:92:e7:24:ac:cf:51:eb:7f:38:50:48:
         65:a2:f9:5e:41:cb:2a:0d:d5:29:a9:e4:f8:f2:69:a2:bb:61:
         26:b4:62:0b:7c:46:97:f6:db:ee:60:f6:0b:d6:f9:b0:98:c7:
         74:61:9b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:03 2025 by rpki-client on console.sobornost.net