Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5c65a2db-0da6-34ad-a0f3-1e6760344465.roa
File:                     5c65a2db-0da6-34ad-a0f3-1e6760344465.roa (raw, json)
Hash identifier:          pzFkUc0rKt2COH6jGnueHXatYhZAUAPIleKwsy/rWwU=
Subject key identifier:   C3:A4:B1:9E:31:18:72:1C:09:B4:36:1F:19:06:20:8F:90:D0:9C:EA
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F432858492183FCF8DECAA0F8CC14B0C0
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5c65a2db-0da6-34ad-a0f3-1e6760344465.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     7922
IP address blocks:        202.165.72.0/21 maxlen: 24
                          202.182.64.0/20 maxlen: 24
                          216.185.220.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:fc:f8:de:ca:a0:f8:cc:14:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=342fe7a8-09aa-4e03-9c4b-181805e09c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:53:9d:48:a8:12:c6:71:ad:a6:be:73:97:80:
                    ef:d1:53:41:ef:d7:4c:a0:52:e3:83:62:ae:60:5e:
                    61:eb:de:c0:31:60:9f:43:05:01:a8:f0:62:48:d5:
                    df:6a:4c:65:0d:5f:a2:db:87:19:d4:89:d1:5a:27:
                    0a:6e:6c:f4:68:61:4f:8d:52:85:2f:94:21:03:ae:
                    47:7a:a4:fd:8c:62:80:59:f7:f7:2b:43:7e:7d:92:
                    83:f6:03:4c:28:9e:79:ec:88:fa:a8:10:b1:cf:60:
                    2c:d4:03:8b:9e:93:74:d8:7d:6c:7d:cd:9f:00:af:
                    3e:e6:5e:ca:f5:b0:1b:93:4a:32:4a:94:22:3d:8c:
                    9c:44:28:75:bd:55:dd:6e:05:6c:fe:a5:e5:1d:64:
                    9b:47:f8:26:f0:aa:63:0f:ce:0c:18:14:d4:f9:60:
                    b1:dd:9c:4e:bf:74:f9:cb:8f:b9:06:bb:18:f8:65:
                    d4:20:5e:d5:7f:ff:da:19:6c:9a:5f:60:f8:c8:d6:
                    55:bc:58:4f:26:53:e4:ed:bf:4d:0e:a2:22:82:b0:
                    ff:79:5f:bb:bb:f7:cb:7c:37:b5:6a:f9:82:6f:f3:
                    b1:17:ff:2a:7c:6c:5d:ca:4a:cc:32:cb:9f:a4:9c:
                    ac:9b:20:80:8a:c5:7a:4e:f6:8d:ee:0e:37:a4:e1:
                    9e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A4:B1:9E:31:18:72:1C:09:B4:36:1F:19:06:20:8F:90:D0:9C:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5c65a2db-0da6-34ad-a0f3-1e6760344465.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.165.72.0/21
                  202.182.64.0/20
                  216.185.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:74:45:23:cc:62:a3:54:13:88:8c:db:79:93:6d:f2:64:a5:
         5c:ab:60:19:f0:d8:01:2f:38:e5:6e:e0:85:fb:50:81:3a:d5:
         99:8a:37:8c:9f:25:a6:17:58:74:7c:62:46:f7:a6:2f:01:62:
         28:b8:4d:9b:0a:f0:7d:87:64:60:0a:b5:35:98:cb:72:19:e6:
         ce:60:2b:0a:cc:d6:22:4a:12:47:f8:7b:3b:32:dd:e0:17:38:
         1b:d0:68:08:ed:2c:e0:68:01:55:9c:2f:f0:58:0c:6c:3e:61:
         88:44:d5:a9:df:cb:f0:82:41:1c:26:a7:26:a2:57:e2:6d:e3:
         33:c3:30:18:7e:28:54:ef:35:ff:0e:89:26:6d:44:2b:9c:c5:
         ce:65:19:1d:34:7e:cb:25:21:51:a1:c6:1a:58:b6:5c:f0:f9:
         4e:c2:6c:ac:e4:12:83:52:20:6d:d3:b2:77:f2:3e:f6:17:6b:
         1b:f7:7d:20:38:cf:cc:d6:04:b2:46:0f:b5:ed:05:1b:da:df:
         68:5f:f0:90:69:1a:e4:18:74:d1:f2:7d:eb:a2:93:0e:cc:56:
         ee:2a:b4:2b:40:a9:73:3c:88:9d:7f:66:07:c9:ec:5d:e7:38:
         01:f2:64:57:45:78:77:d4:88:3d:78:ad:34:bf:44:58:fe:13:
         36:6b:70:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:27:25 2025 by rpki-client on console.sobornost.net