Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a4892964-6f46-32fa-b6a9-27369929a5ba.roa
File:                     a4892964-6f46-32fa-b6a9-27369929a5ba.roa (raw, json)
Hash identifier:          IJEGe3GQpcz20WeAzhiVCE3535gv1p3GOZGcpZv+g8A=
Subject key identifier:   CF:A4:D9:CA:5E:99:33:99:25:5F:0E:F3:69:C0:27:E1:CD:22:83:F6
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584960541A5C33E38B237FAAE200
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a4892964-6f46-32fa-b6a9-27369929a5ba.roa
Signing time:             Tue 01 Apr 2025 01:00:47 +0000
ROA not before:           Tue 01 Apr 2025 01:00:47 +0000
ROA not after:            Mon 30 Jun 2025 01:00:47 +0000
asID:                     17252
IP address blocks:        67.227.16.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:60:54:1a:5c:33:e3:8b:23:7f:aa:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr  1 01:00:47 2025 GMT
            Not After : Jun 30 01:00:47 2025 GMT
        Subject: CN=342f63ae-918b-4e03-889e-eaf597bcec47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:af:83:15:b3:8d:b2:4e:7d:89:b6:03:55:e3:
                    95:c9:6e:4d:7c:dc:f4:5d:f0:c4:ee:19:92:c5:0e:
                    cf:c6:6f:01:b2:7f:16:ff:50:ff:a3:51:8f:f1:be:
                    b7:9a:e3:f9:b4:73:22:c1:b5:dd:06:76:07:9e:03:
                    b1:c3:00:a2:ba:98:cd:72:3e:ed:d7:55:d0:89:09:
                    a0:4a:c0:1d:c8:9b:e0:77:12:ad:d2:53:f5:b8:46:
                    a5:52:7e:c5:47:b4:52:da:ce:7e:0e:ce:fc:4d:a1:
                    a8:98:d7:08:ba:3c:84:30:dd:7c:39:02:91:47:f9:
                    e3:99:5e:22:9f:c1:34:d0:ea:3b:e9:79:ed:d6:82:
                    38:75:dc:3c:53:af:55:5d:fc:b5:38:88:11:ea:c8:
                    6b:51:4e:5d:a7:ed:8c:44:29:96:16:9a:8f:75:69:
                    7a:11:67:f1:c3:ac:46:39:dd:d3:b1:a8:0e:02:31:
                    11:df:3a:06:df:48:06:98:85:75:96:f3:7c:13:bb:
                    9b:55:73:f4:37:63:22:b9:eb:b8:cb:5c:2c:b5:a6:
                    e0:b5:40:c1:62:7c:a0:21:65:64:24:03:b4:1b:de:
                    2d:a3:80:be:90:12:b8:19:8a:c6:b0:a9:21:b9:30:
                    b2:5a:e4:22:1b:7b:44:b3:67:c0:6b:68:58:6d:31:
                    31:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A4:D9:CA:5E:99:33:99:25:5F:0E:F3:69:C0:27:E1:CD:22:83:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a4892964-6f46-32fa-b6a9-27369929a5ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.227.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:e7:93:54:2a:6d:c9:77:d9:8f:d5:80:85:4c:14:6c:bc:0f:
         1d:ad:9b:30:39:ad:ca:af:9a:94:97:2c:d2:ea:0a:c3:24:03:
         1d:ae:fa:2a:33:5c:81:97:fe:0d:aa:e8:d4:24:2a:84:6b:04:
         9d:e2:b1:a9:a4:b6:b0:51:50:26:db:98:f9:34:67:fb:a5:b8:
         2f:19:b9:87:27:a5:8b:80:ad:be:6f:96:d8:8e:53:d3:4a:45:
         e9:a0:da:cf:da:5e:a7:2d:14:d0:43:ba:00:bb:20:4b:c9:e4:
         e3:d2:43:ba:90:48:0b:48:40:33:30:04:8f:4b:46:0a:3e:2b:
         19:d8:72:b7:11:f9:1f:0a:26:46:22:c5:9e:1a:aa:3f:52:6c:
         df:56:e5:27:f2:8d:a8:7c:ad:07:9f:c9:d0:4f:27:38:7e:f5:
         5d:58:32:64:a0:f5:24:ad:15:dc:70:08:97:0c:92:4e:20:e0:
         d9:bc:03:b2:eb:22:80:83:ae:79:ee:43:6b:7d:25:72:c1:cf:
         5e:d8:a4:e6:7c:24:e1:63:4b:80:37:c0:4e:eb:83:4b:fb:ff:
         8f:29:24:d6:63:f6:85:27:61:88:31:bf:7c:20:a5:3a:50:f2:
         ff:91:f4:44:b5:37:fe:d1:13:11:ef:9e:77:4a:78:79:50:dc:
         e7:f2:08:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:48 2025 by rpki-client on console.sobornost.net