Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1ebc4253-a653-3a14-a72c-9ff36af7730e.roa
File:                     1ebc4253-a653-3a14-a72c-9ff36af7730e.roa (raw, json)
Hash identifier:          JvXj3Eyh+WjQEVCMCmdv1+1i0b7eJfcJh3rMaYcTxUo=
Subject key identifier:   EC:F8:09:C4:31:45:37:E4:C8:FA:5A:79:2B:94:EC:39:70:D2:40:6B
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285849759F6450623BFF96C4381440
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1ebc4253-a653-3a14-a72c-9ff36af7730e.roa
Signing time:             Tue 08 Apr 2025 16:04:33 +0000
ROA not before:           Tue 08 Apr 2025 16:04:33 +0000
ROA not after:            Mon 07 Jul 2025 16:04:33 +0000
asID:                     212335
IP address blocks:        67.227.22.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:9f:64:50:62:3b:ff:96:c4:38:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr  8 16:04:33 2025 GMT
            Not After : Jul  7 16:04:33 2025 GMT
        Subject: CN=a1703c31-eaaa-4330-888f-dc52856de39d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7c:89:07:a5:d5:69:f0:be:15:da:3e:ec:4d:
                    06:37:96:29:f1:fa:03:08:93:9a:b6:1d:81:41:d6:
                    bc:73:56:12:08:5d:5b:67:9f:ec:3c:1c:ad:03:a1:
                    1b:47:67:81:29:3b:ba:5d:a3:f6:42:ac:d4:98:38:
                    1d:9a:1b:4f:fd:84:c8:1d:ab:6c:43:bb:b1:44:de:
                    a7:04:27:5b:09:7d:30:39:1b:7d:29:fe:15:98:35:
                    c7:05:2e:d6:6c:b8:44:db:fe:90:e5:6d:bf:a4:d1:
                    36:27:3b:5d:27:2b:c8:46:99:1b:f6:7c:44:76:93:
                    3c:31:c1:41:72:15:d3:2e:6f:bb:b5:36:90:54:9e:
                    3e:ce:0c:5f:fe:81:a9:29:5c:d4:31:82:03:19:8c:
                    55:ca:bb:16:a9:6f:f4:76:22:4a:5a:59:e4:68:c5:
                    2a:0b:23:27:be:0c:ec:6c:43:10:1f:57:a9:ef:05:
                    ed:7b:0d:c1:53:5b:55:56:24:a3:26:28:eb:7f:f2:
                    64:45:bf:a1:9a:65:2c:bd:75:1a:5d:18:82:bd:05:
                    c9:72:58:9d:73:61:c5:b5:6b:44:c1:b5:a2:59:c1:
                    05:d1:81:4b:79:14:2d:9f:c7:60:46:5d:64:92:51:
                    99:52:08:a3:fb:b3:20:b2:e7:e8:c1:32:a2:6f:94:
                    c1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F8:09:C4:31:45:37:E4:C8:FA:5A:79:2B:94:EC:39:70:D2:40:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1ebc4253-a653-3a14-a72c-9ff36af7730e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.227.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:bf:4b:48:6e:85:3a:70:15:be:3f:cf:af:70:9d:0a:e3:44:
         dc:d4:4f:3c:fd:a9:03:dc:b6:32:c6:62:4d:2b:b2:fb:36:1b:
         ad:a0:f3:79:fe:9d:2a:b7:49:f5:e8:52:fe:2b:5e:a4:ff:cc:
         5e:1d:0e:32:f9:7b:1f:a2:8c:36:40:39:aa:f8:f9:8b:34:d8:
         87:7c:e5:f8:3f:de:eb:13:ea:c1:2d:d4:fb:3f:5b:a1:a3:0e:
         ca:72:94:7e:4a:97:69:b3:b2:01:e8:19:11:0a:0a:bb:1a:6a:
         e5:5c:86:40:3a:56:a9:13:7c:30:7f:3d:44:44:04:08:ed:b5:
         30:4b:b3:88:d8:c5:6d:2c:7a:e6:ed:99:de:49:ec:cd:c2:a7:
         2b:be:7b:93:c3:9d:58:14:ec:17:49:9f:a7:e9:bf:fb:c3:8b:
         ba:6e:76:4d:be:e3:0d:19:c8:97:bc:6d:47:5c:18:a9:36:de:
         88:f1:c0:ca:2f:c4:7e:8d:be:4a:ba:ca:95:09:fd:00:fe:8c:
         65:74:1d:86:59:43:96:24:67:e4:0d:af:20:02:35:e7:32:56:
         49:4d:6b:1e:90:3f:19:91:6a:ed:a0:ad:97:b2:98:1f:4a:08:
         b9:6c:19:ec:3a:54:82:42:71:49:51:22:42:b0:05:7e:1d:3f:
         a8:0a:65:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:47 2025 by rpki-client on console.sobornost.net