Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8a8f2560-b58e-3d8c-9e88-f99bb38e9ad5.roa
File:                     8a8f2560-b58e-3d8c-9e88-f99bb38e9ad5.roa (raw, json)
Hash identifier:          mMw04Q5tUDWT+8d6FJF6vr486p8tUnbGo2Jq56610xA=
Subject key identifier:   30:3A:97:5B:01:65:F9:E6:06:F8:8C:AE:A1:9F:CC:C4:65:47:62:18
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285849786AA171B030174D8CE57C00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8a8f2560-b58e-3d8c-9e88-f99bb38e9ad5.roa
Signing time:             Wed 09 Apr 2025 16:05:40 +0000
ROA not before:           Wed 09 Apr 2025 16:05:40 +0000
ROA not after:            Tue 08 Jul 2025 16:05:40 +0000
asID:                     397606
IP address blocks:        208.94.224.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:6a:a1:71:b0:30:17:4d:8c:e5:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr  9 16:05:40 2025 GMT
            Not After : Jul  8 16:05:40 2025 GMT
        Subject: CN=50589fef-d853-44bb-bae0-4ac387325a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:82:f5:6b:25:eb:6c:8a:9b:f9:83:5b:44:c3:
                    fc:58:d3:e7:1c:73:fa:3a:04:3f:58:ea:7f:d8:f2:
                    f0:bd:42:59:47:44:b9:96:5d:3d:29:2a:1e:5f:8f:
                    83:08:48:9c:73:59:1a:9c:f6:82:8e:d6:f8:aa:c3:
                    1c:09:44:6c:ea:96:8f:e4:f7:94:c8:12:09:7e:90:
                    0a:bf:ee:3a:a2:37:52:d2:90:23:7f:43:80:b0:65:
                    df:05:95:67:84:60:39:07:5a:01:04:68:7f:cb:34:
                    37:26:7f:71:ed:01:13:30:87:e0:b8:b5:e4:ca:e5:
                    f0:c6:63:10:88:14:32:7e:c1:37:d7:6f:7e:ad:b6:
                    72:41:b3:0e:d2:14:6a:ca:ec:6b:dc:19:37:7e:1f:
                    af:1d:f9:10:8e:c6:41:d9:05:11:f1:91:de:a9:ee:
                    a1:71:2b:b1:95:d1:76:d9:8a:45:75:f0:20:f8:24:
                    b8:bd:2b:84:a9:68:ec:4e:d2:c7:fb:a5:9d:5f:96:
                    8d:8b:c0:91:a2:c9:0e:b9:b0:bb:ab:65:88:53:93:
                    7c:f2:7c:71:e5:62:86:9c:5a:ff:45:86:d8:bf:9c:
                    e0:3f:9e:cb:74:67:37:b0:54:d4:b7:37:16:55:2e:
                    95:30:d0:c7:86:10:c6:aa:11:78:32:8b:66:f3:e4:
                    eb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:3A:97:5B:01:65:F9:E6:06:F8:8C:AE:A1:9F:CC:C4:65:47:62:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8a8f2560-b58e-3d8c-9e88-f99bb38e9ad5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.94.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:7d:f3:03:80:e5:52:37:d5:82:60:89:9c:0c:58:f4:b0:ce:
         47:88:8d:b8:d9:cc:ab:b1:be:bf:b7:ac:18:cb:3f:01:99:01:
         16:5f:cf:ae:8a:b8:18:68:e1:b3:1d:07:1d:a5:da:ef:43:21:
         0f:07:d8:e5:82:7e:2a:de:e7:b0:7a:f0:48:e2:e3:91:95:56:
         98:4c:a2:3d:2f:00:9d:6c:b1:f9:78:ec:ef:e7:56:c8:53:bb:
         f5:81:23:e4:1d:1e:6c:f7:96:60:44:19:9c:4d:96:01:f0:fa:
         7c:4b:de:72:6f:c1:95:09:69:e9:69:04:c9:74:c9:1e:a7:e5:
         17:1a:5c:93:bb:21:64:eb:64:ce:a9:ae:b4:fa:4b:ff:92:65:
         a9:36:e6:20:8d:ef:b9:4c:a8:7a:99:13:68:2f:28:d8:23:0a:
         a2:ee:b0:b2:32:7c:e9:8b:a5:a9:ba:ad:5e:62:0b:dc:f9:67:
         60:7d:df:9b:0a:e8:50:f1:16:5c:ed:71:51:2d:67:2b:dd:e2:
         bf:6d:b3:cd:4e:e4:41:f0:f3:f9:b3:69:fd:9d:b9:23:68:5b:
         1d:b2:e7:fc:15:21:ef:c7:81:de:e0:be:66:ee:64:3f:5e:1b:
         f5:40:3e:18:98:65:ec:6e:66:36:87:fe:1e:09:83:88:d4:e5:
         40:a7:a5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:48 2025 by rpki-client on console.sobornost.net