Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8258a0c9-dd70-3ddb-8fc8-b42b8543eae3.roa
File:                     8258a0c9-dd70-3ddb-8fc8-b42b8543eae3.roa (raw, json)
Hash identifier:          WynamhuQUA7YDtkl3ZJ2T1X+ik4vdctDCVVGEL7K+4Q=
Subject key identifier:   5A:95:C8:F6:02:92:06:68:B0:9E:6B:6F:A3:E3:EF:8F:59:49:16:B5
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285849631EC5BEDB35EDC2C77CBA00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8258a0c9-dd70-3ddb-8fc8-b42b8543eae3.roa
Signing time:             Wed 02 Apr 2025 01:00:46 +0000
ROA not before:           Wed 02 Apr 2025 01:00:46 +0000
ROA not after:            Tue 01 Jul 2025 01:00:46 +0000
asID:                     7922
IP address blocks:        173.214.184.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:63:1e:c5:be:db:35:ed:c2:c7:7c:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr  2 01:00:46 2025 GMT
            Not After : Jul  1 01:00:46 2025 GMT
        Subject: CN=f35fdcb1-0ca2-4753-a0ab-824b53aea3b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e8:e3:b9:29:bb:61:48:5f:df:46:62:1b:a4:
                    db:6c:10:77:80:22:53:a9:88:9f:8f:74:00:d4:fd:
                    3b:3a:f7:9e:9b:66:62:5d:57:66:b8:f1:48:ea:48:
                    33:1c:d2:65:cb:11:9c:33:63:05:8a:98:47:7d:1c:
                    b9:79:c5:ce:c1:9e:3a:9c:4d:51:4e:90:85:d9:ea:
                    8c:5f:30:1d:a2:03:33:35:ac:30:11:0e:c5:5e:cb:
                    9b:01:c8:24:a6:b2:b9:ce:04:5a:5a:42:00:06:66:
                    f0:18:03:37:d9:9a:1a:9b:65:8d:e4:2e:00:73:15:
                    a0:ab:c6:13:48:5f:ec:50:27:15:9d:97:96:31:70:
                    81:64:a5:80:c3:5b:d2:f7:c8:0a:d9:9a:0f:96:1d:
                    d2:f9:22:b3:72:b3:96:a7:9d:6e:68:34:59:8c:b7:
                    3a:b1:5e:ef:97:cf:6a:6f:7b:16:d9:94:79:3a:fb:
                    1a:7b:e0:73:29:28:49:29:38:dc:18:4a:70:b5:4f:
                    ba:80:e5:81:3f:fe:d6:69:8f:3d:d2:f3:26:c1:a4:
                    0a:42:5f:28:a9:86:36:d0:ee:bb:8b:a7:b6:f8:64:
                    87:04:d4:37:33:0c:83:44:83:ad:aa:2e:6c:6f:31:
                    fe:8d:d0:68:d0:d9:4f:0e:11:a9:96:a9:f2:6b:eb:
                    a4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:95:C8:F6:02:92:06:68:B0:9E:6B:6F:A3:E3:EF:8F:59:49:16:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8258a0c9-dd70-3ddb-8fc8-b42b8543eae3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.214.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:16:f8:1d:07:04:5d:87:d2:51:94:3d:64:c4:41:b0:b8:7a:
         34:94:43:61:d4:49:c7:cb:1e:8a:db:51:db:6a:ab:d6:2b:f2:
         86:ef:58:c4:1f:ba:5f:61:b2:b3:16:c1:86:48:f4:a3:7a:b0:
         b2:fc:bd:d3:f0:bb:97:20:f9:0a:4d:a7:78:35:bf:20:d5:79:
         90:da:74:6e:6b:36:f2:ac:73:4f:de:b6:47:c3:4c:cc:dc:29:
         8f:24:b1:42:9f:9f:2d:17:d3:19:ee:07:ec:32:4d:a0:9f:40:
         0d:3a:c5:d1:19:13:3d:2e:11:71:63:fc:ac:81:9f:76:b8:d8:
         2a:9d:57:4e:0a:e4:3f:a2:2d:c8:6b:7e:4e:9b:d0:50:a0:09:
         89:2a:5c:b3:69:03:41:f4:ba:3d:82:58:47:a1:5d:7b:cd:ef:
         c7:fe:d5:85:00:75:ad:81:07:af:b5:94:22:a1:91:f1:c0:8f:
         17:15:6d:8f:b2:f2:f8:93:7b:bc:d4:55:89:e3:7d:32:b1:b0:
         1b:7d:3d:a2:c2:7f:50:9f:07:1a:60:ec:92:9a:7d:10:38:0d:
         43:f4:fa:1f:1f:8e:46:69:03:43:01:68:ed:eb:35:5a:4b:62:
         b9:25:93:ed:19:dc:5f:05:c3:24:d6:53:18:8d:7f:47:a8:9b:
         2b:99:5a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:48 2025 by rpki-client on console.sobornost.net