Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a9276ee7-1828-3f24-9f07-1f18f89277bb.roa
File:                     a9276ee7-1828-3f24-9f07-1f18f89277bb.roa (raw, json)
Hash identifier:          EskXYP2AzKQh20sKaDrpCv5C6HMmqlU2+B2P9n8aYsw=
Subject key identifier:   5E:D1:A8:D1:4F:CC:6D:07:C9:7D:81:65:E6:DA:A6:BB:71:68:3D:12
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285849806F18AFDDDE8798D5500880
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a9276ee7-1828-3f24-9f07-1f18f89277bb.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     211439
IP address blocks:        199.182.170.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:18:af:dd:de:87:98:d5:50:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=5a5e9e86-e9b5-4cff-b7de-6f19c9cc4a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:94:63:d8:ae:08:f7:83:f8:30:66:ca:0c:95:
                    69:b1:22:db:d6:f4:4c:c0:aa:a1:8f:f2:1f:5e:58:
                    76:6a:f5:18:3b:d2:6b:fa:ef:9e:eb:c0:d4:f2:88:
                    00:d3:d3:41:56:5c:5b:ce:28:05:1d:10:35:df:2a:
                    73:a2:da:4a:52:e3:15:c2:5d:76:c6:58:af:a0:58:
                    ed:df:c4:08:3c:3b:f1:58:2f:68:a6:a3:c5:d4:10:
                    8f:dc:4a:8f:e2:50:65:1f:1f:9b:1e:7e:7c:35:a6:
                    8b:bb:22:34:43:e3:fe:2e:51:a2:49:1d:ce:82:42:
                    91:05:da:49:24:26:ad:39:4b:85:e0:20:ef:1d:7e:
                    5d:90:7e:8c:7e:ae:b7:fc:e0:0e:fb:a8:69:56:44:
                    23:a2:d2:d3:51:45:e2:29:04:35:60:ea:2e:73:12:
                    0f:01:b0:e8:03:72:58:fc:23:d8:7a:aa:4f:49:18:
                    8f:7d:da:c3:f3:2a:04:40:3d:10:a5:22:05:ea:4f:
                    5a:50:cc:e2:45:4a:e0:e3:b0:7b:08:55:00:44:24:
                    b9:23:43:ca:e4:7c:7e:58:4f:1e:da:48:d7:11:5c:
                    0d:ae:af:2e:6e:a6:14:7f:1a:fb:54:6d:b8:1b:35:
                    cc:4b:ce:69:49:6b:51:d9:ff:68:a4:c2:9a:bd:65:
                    b1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D1:A8:D1:4F:CC:6D:07:C9:7D:81:65:E6:DA:A6:BB:71:68:3D:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a9276ee7-1828-3f24-9f07-1f18f89277bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:41:23:c0:15:e1:6e:56:16:3c:1e:3d:a6:c6:ee:cb:df:cf:
         c4:ce:56:6a:da:55:44:12:b2:45:75:1c:0d:fe:1d:77:1f:fa:
         6d:d2:2b:b3:4d:e4:ee:2c:d4:18:2a:96:b3:fe:85:7d:77:a5:
         40:10:a1:3d:ed:7f:33:5d:4d:20:46:f5:ab:d0:2c:ce:c9:ec:
         56:a8:f7:64:4e:ce:72:bf:3e:cb:06:a8:8c:f3:95:4e:6c:53:
         0c:fa:1d:69:19:e0:64:35:e3:0d:a3:eb:bb:f3:e2:6d:06:ad:
         d9:04:c1:fa:c6:47:9d:b6:c1:93:7c:cd:f4:ad:f9:ce:6c:21:
         62:26:d8:15:fc:3f:ca:84:3a:f8:fa:72:a6:36:66:97:7b:58:
         80:d2:c3:24:12:d3:d1:2b:53:02:f9:46:78:f5:f0:16:57:88:
         a0:f6:d6:27:5b:5d:35:f5:b0:6b:0c:9d:73:16:91:8c:67:d5:
         42:b2:d3:f4:7c:21:52:ff:1a:ef:05:78:0e:7d:e9:c9:05:c9:
         34:8d:3d:ea:4b:12:54:57:c8:52:79:09:49:0a:96:c9:1c:46:
         88:77:5f:df:85:b3:16:4a:f1:f0:eb:86:c3:da:bd:65:14:38:
         1f:f0:8c:ff:21:0c:25:42:89:82:1c:04:d5:2e:38:be:d2:32:
         d8:c9:dd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:48 2025 by rpki-client on console.sobornost.net