Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d2769a8c-10d5-3192-a695-6c63e5671d24.roa
File:                     d2769a8c-10d5-3192-a695-6c63e5671d24.roa (raw, json)
Hash identifier:          zc9e+jLCFLLCSQ5nFOO8Dp2Pz4ZU3lBGRvh7Ja4z/mk=
Subject key identifier:   2F:1F:70:D9:B1:D9:A7:2A:AD:3E:E7:A7:10:CE:80:F2:2D:9D:82:1B
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858494B6404D5E3A3E726A35BE6A0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d2769a8c-10d5-3192-a695-6c63e5671d24.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     19446
IP address blocks:        67.227.41.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:04:d5:e3:a3:e7:26:a3:5b:e6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=79430368-78f2-4dbe-85d6-b21a2d635e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:97:b2:fb:dd:e7:28:c5:1f:b3:36:53:0b:31:
                    6a:d6:92:f5:c2:e2:ce:83:db:0a:a8:61:23:f1:ec:
                    5e:67:7c:8a:82:a8:33:48:a8:be:9b:b1:74:a0:e1:
                    65:78:d9:33:3e:df:ba:d2:53:8f:6e:f6:b6:25:00:
                    33:51:d8:65:aa:33:ee:65:1e:0d:85:c4:8a:44:49:
                    09:22:5b:d9:c6:80:d5:f8:c3:25:31:12:1c:6b:f2:
                    b4:78:e5:7a:77:c7:2c:85:3c:42:20:ab:96:94:c0:
                    c1:b4:8b:96:0c:7f:c7:1a:34:ea:fb:67:7d:42:08:
                    81:03:73:8e:2e:75:42:da:b8:41:2c:7f:bc:6a:1d:
                    65:0b:d9:04:3f:85:3c:2a:32:2d:f1:95:07:b2:36:
                    61:ea:da:67:e3:47:6c:b5:9f:07:79:09:68:7c:10:
                    f9:44:fd:ff:ce:32:95:71:61:04:22:b7:c7:b1:a8:
                    62:e2:42:fc:dc:a1:1a:e8:9e:f1:0d:30:fc:c5:18:
                    98:49:0c:0e:30:34:56:10:af:7e:3f:7e:55:95:49:
                    80:9b:ff:ad:02:40:a1:bb:0e:1f:52:42:32:a1:f5:
                    0f:d6:32:07:cc:0a:2b:40:2f:6d:84:7a:b8:39:b1:
                    82:b0:be:01:43:eb:2b:47:38:d7:6e:99:7f:fd:92:
                    98:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1F:70:D9:B1:D9:A7:2A:AD:3E:E7:A7:10:CE:80:F2:2D:9D:82:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d2769a8c-10d5-3192-a695-6c63e5671d24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.227.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:36:12:51:10:93:d4:3d:ae:3f:ef:93:f8:ab:e2:1a:0f:ac:
         bf:f6:ee:81:97:2a:da:c4:08:2a:ef:31:93:1d:4e:c9:00:1e:
         95:da:21:93:3f:ac:ad:b3:00:e7:c3:e2:fa:ce:34:b1:65:fc:
         97:e0:cb:0f:dd:8b:70:31:47:43:f6:48:04:b8:e3:b2:dd:5c:
         b2:45:0f:a7:28:d5:83:5f:c7:bd:b8:0c:fb:3f:b9:21:bb:e1:
         df:3c:61:0a:26:ce:c4:61:7c:8b:f2:38:76:dd:be:97:07:c4:
         f1:a6:ee:a9:54:89:41:7f:80:24:1e:24:fb:17:a1:bf:37:17:
         71:6e:27:8d:10:76:9c:d7:15:db:1d:e1:34:1f:49:9b:d1:cb:
         3d:e2:f5:20:28:c1:7d:06:90:0c:f0:88:58:92:bf:0f:b1:e2:
         c4:bc:0d:3b:4d:44:4f:14:aa:5e:57:18:4c:21:cc:50:83:43:
         19:71:76:46:6a:0d:d1:aa:0a:2b:0c:d3:8a:ce:34:a3:a2:a5:
         42:57:24:1a:65:f5:da:e9:72:28:9f:21:8f:e7:74:28:0d:8c:
         9d:92:f6:84:9b:62:9f:2a:74:ad:02:bd:b3:f6:8d:c1:b8:6f:
         2e:51:33:f7:39:19:58:97:98:05:76:2e:e7:3e:e6:3f:d5:1a:
         d6:42:ac:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:48 2025 by rpki-client on console.sobornost.net