Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b7514374-52b7-36b6-8de5-31109f195d14.roa
File:                     b7514374-52b7-36b6-8de5-31109f195d14.roa (raw, json)
Hash identifier:          DyxRhHjDIr1R8TGyRLEQHsQ9Po/x3YCzieGX1Xx45u4=
Subject key identifier:   03:3A:00:DC:99:65:CB:A2:9F:AF:E0:BF:EC:97:27:CE:D3:15:B9:6F
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285849605418B449235D224964F800
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b7514374-52b7-36b6-8de5-31109f195d14.roa
Signing time:             Tue 01 Apr 2025 01:00:47 +0000
ROA not before:           Tue 01 Apr 2025 01:00:47 +0000
ROA not after:            Mon 30 Jun 2025 01:00:47 +0000
asID:                     51847
IP address blocks:        198.89.126.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:60:54:18:b4:49:23:5d:22:49:64:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr  1 01:00:47 2025 GMT
            Not After : Jun 30 01:00:47 2025 GMT
        Subject: CN=f616474b-c468-4918-972a-ed79d3f4aaa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fc:be:0b:ae:53:6a:e9:1e:e6:8b:72:1d:ab:
                    cf:1b:98:0a:51:e6:b8:98:71:f8:96:85:a9:11:af:
                    7d:b8:79:b4:c9:96:ba:fc:5d:96:c9:b3:db:42:69:
                    e9:07:ea:33:75:3a:ba:bb:6e:45:9d:9a:3a:a3:b6:
                    35:4c:a7:84:91:c4:0f:0c:6d:cd:74:cf:51:c1:99:
                    88:18:0b:6f:93:f6:69:62:1a:60:aa:34:a9:63:0d:
                    ae:13:42:40:6a:3f:d7:f2:71:be:ea:a7:51:34:91:
                    06:ac:2e:c5:17:af:3e:9c:a0:fb:25:1b:05:32:ab:
                    29:91:73:ea:b1:3f:54:4d:99:8e:9b:ba:5d:74:b0:
                    d3:ed:e6:d4:92:49:1e:06:99:7a:b8:46:6c:67:17:
                    de:33:86:c1:77:3e:8b:9d:74:d0:10:2b:09:fc:80:
                    65:fc:8e:6a:4c:34:c4:66:68:42:f5:f8:07:11:20:
                    9d:59:74:fd:91:75:ca:37:51:1f:b6:04:7e:6a:b7:
                    10:72:77:20:5d:9f:b2:fd:7a:cf:7e:d7:55:84:92:
                    37:70:df:2a:68:95:8f:8b:b2:df:1d:4e:b5:f9:83:
                    9b:e3:57:e4:f4:41:dd:5b:2b:3e:c8:48:0a:50:31:
                    1d:21:0e:9a:cf:ab:0c:28:e6:52:d6:d6:f4:5a:8d:
                    d8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:3A:00:DC:99:65:CB:A2:9F:AF:E0:BF:EC:97:27:CE:D3:15:B9:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b7514374-52b7-36b6-8de5-31109f195d14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.89.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:c0:78:e1:74:9a:29:a2:b6:e2:c5:09:3d:cd:03:df:9d:4f:
         9b:9d:91:4b:36:5b:6b:76:41:c8:9f:03:53:27:08:d5:40:98:
         fb:78:8f:13:01:d2:f9:f4:bb:b2:72:47:85:23:b2:a7:3b:15:
         ca:ae:55:fa:89:a1:04:07:d9:ab:40:03:21:ad:ef:aa:20:3e:
         24:ca:06:e4:78:f2:18:83:2d:f7:66:3f:d5:cc:eb:3a:41:18:
         37:82:ad:e1:04:38:43:bc:57:db:a0:ed:ca:fd:61:35:27:61:
         8b:73:a7:dd:fb:2e:9b:82:54:35:f8:ad:cc:a2:f9:7c:10:b9:
         b5:da:ab:2a:70:8a:09:c4:9c:9f:b0:61:28:0e:67:26:62:8b:
         8e:05:57:9f:20:0b:2f:1b:4f:cb:1e:02:5a:74:06:00:7a:c0:
         35:77:7a:cd:26:1f:7d:b6:4c:52:c2:65:19:26:ec:7d:d4:29:
         89:6e:5a:26:14:f8:6a:6a:7d:1b:e7:28:1d:d2:7c:f2:53:de:
         70:e6:75:db:96:6a:51:e3:a3:b2:59:4b:3f:d5:e0:ed:96:fd:
         02:ff:e2:aa:7b:ed:29:b4:92:9d:10:40:83:7a:d6:93:47:ab:
         ef:35:ed:70:be:d2:56:16:f4:74:ce:1a:67:3d:c4:1e:1e:be:
         b9:bf:2f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:48 2025 by rpki-client on console.sobornost.net