Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/5d43ded9-5a0b-38ca-bc16-7e8d3bafa7f5.roa
File:                     5d43ded9-5a0b-38ca-bc16-7e8d3bafa7f5.roa (raw, json)
Hash identifier:          Evk+iBliejpimRcwLSK6TbtOC3eQlskmWzBBHs23jco=
Subject key identifier:   95:9C:C9:B6:40:22:0C:FC:5C:AF:FF:00:5A:E3:83:E5:A7:5C:77:5D
Certificate issuer:       /CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
Certificate serial:       010D0C9F43285849806F1EB0B571CF91AB37A0C0
Authority key identifier: E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/5d43ded9-5a0b-38ca-bc16-7e8d3bafa7f5.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     399122
IP address blocks:        72.172.72.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:1e:b0:b5:71:cf:91:ab:37:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=0d7aac07-8ab4-4649-a345-3cf13bc17219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:99:74:b4:10:18:14:07:f2:08:8e:cb:ee:e7:
                    9a:e2:29:3e:a4:a6:bc:3f:16:91:1d:5c:7e:59:e4:
                    7b:81:42:78:dd:2f:ba:3e:da:25:71:54:f3:df:84:
                    c5:61:d4:ed:2c:38:d6:97:d5:29:72:c2:f8:2a:26:
                    be:3d:01:ff:9c:91:aa:de:ac:6e:dc:d7:b2:01:3c:
                    23:0c:50:33:f8:14:59:30:40:3f:79:f7:56:65:de:
                    e7:0f:f5:bd:82:a9:22:df:c1:f8:a6:db:38:a0:33:
                    09:69:16:4b:b7:c0:a9:a3:34:98:bd:9b:28:73:72:
                    9e:4d:0c:5f:ae:03:15:dd:80:3c:e3:cd:4d:95:cc:
                    6c:c9:aa:b0:5a:ba:33:17:42:fc:6c:e7:86:35:82:
                    97:0a:88:11:35:4a:e7:e9:9d:a0:db:3b:85:d4:0e:
                    fa:8f:6d:28:71:16:cf:08:7d:ea:0e:0b:51:ec:43:
                    51:e2:c8:24:c4:a6:24:46:b9:31:f4:05:d0:15:2f:
                    e3:8f:c1:77:15:ed:ad:b0:5a:06:bb:3c:54:54:5f:
                    91:a2:f6:06:98:5c:e9:3b:aa:c8:b1:1e:88:32:ce:
                    6d:11:7f:e5:61:a8:70:2c:cf:29:7a:f0:ea:9c:9b:
                    b9:a1:76:d3:29:8f:7a:cd:1f:e6:1c:54:ab:9c:37:
                    97:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9C:C9:B6:40:22:0C:FC:5C:AF:FF:00:5A:E3:83:E5:A7:5C:77:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/5d43ded9-5a0b-38ca-bc16-7e8d3bafa7f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl

            X509v3 Authority Key Identifier:
                keyid:E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.172.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:24:32:fe:f9:ac:da:b5:74:2a:12:51:d5:1a:d2:20:91:13:
         b1:ca:70:e6:9a:76:77:02:ed:dc:61:17:15:a2:99:a1:b4:d7:
         18:72:7a:85:f9:9d:3c:21:8b:81:3a:dc:d8:9e:d1:6a:30:44:
         77:79:a7:48:72:6c:6a:c6:02:20:e5:2f:10:93:39:ed:a8:56:
         72:7e:73:bb:08:ff:aa:c8:ad:a7:3d:c8:60:d4:ff:09:60:11:
         98:86:d9:a4:b9:64:95:e8:d8:9a:98:ab:90:20:e1:23:a9:07:
         d1:12:f8:56:87:b3:ff:be:47:30:9c:85:1d:d6:a7:3b:78:81:
         60:5b:7f:b7:7e:5a:d0:7a:ee:af:72:e1:f5:23:07:51:0a:93:
         5a:4f:fd:ab:26:7c:a7:09:28:85:10:32:7d:c6:e2:ad:d9:42:
         65:80:e5:24:77:a6:4b:2e:4c:a8:06:53:4d:01:ab:c5:1c:e2:
         6e:38:6f:e2:3a:3f:af:e9:96:99:af:47:b5:b9:96:c3:27:b9:
         21:1e:dc:10:f1:26:5c:64:b2:c1:63:8f:91:2d:69:0b:7f:c2:
         c4:92:15:66:ec:8e:07:1c:0f:55:da:bc:5a:a3:6f:26:92:d9:
         ec:83:f7:22:d8:be:43:36:13:de:ad:09:6b:9b:bd:75:74:ad:
         41:c8:21:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:27:26 2025 by rpki-client on console.sobornost.net