Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/917864a2-cdeb-3f69-a0e6-d44314dd39cc.roa
File:                     917864a2-cdeb-3f69-a0e6-d44314dd39cc.roa (raw, json)
Hash identifier:          WYYP4nv9xe2Qi+rsiCW5Gx4Ha/Pzq0S1vUG6G5UB448=
Subject key identifier:   C1:0A:2D:C2:84:F5:F4:F0:43:77:65:13:69:A7:A6:F6:B8:E4:BA:2B
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584979A4228818A9995887DD5B40
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/917864a2-cdeb-3f69-a0e6-d44314dd39cc.roa
Signing time:             Thu 10 Apr 2025 02:37:21 +0000
ROA not before:           Thu 10 Apr 2025 02:37:21 +0000
ROA not after:            Wed 09 Jul 2025 02:37:21 +0000
asID:                     15169
IP address blocks:        216.252.220.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:a4:22:88:18:a9:99:58:87:dd:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Apr 10 02:37:21 2025 GMT
            Not After : Jul  9 02:37:21 2025 GMT
        Subject: CN=162568e3-80a7-4e3a-8bce-620010cf2c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:77:e5:c6:2d:0f:60:70:a0:ea:b6:20:11:ca:
                    bf:29:db:e0:bd:7f:bc:2e:23:bd:28:d4:96:d3:9d:
                    fe:a9:64:76:10:d4:0f:bd:ce:fe:f2:76:47:6b:f5:
                    b5:d4:f1:d6:ad:36:51:b7:f9:8e:0e:43:0b:1e:5d:
                    9b:2d:28:5e:03:29:46:eb:3b:ea:ad:fa:7b:7e:15:
                    9e:d6:8c:b3:df:26:86:bf:5c:a6:04:3d:71:35:d7:
                    c4:1e:50:42:78:0a:d9:7f:c2:fe:7f:ae:20:18:f4:
                    da:e2:5c:60:d9:63:66:57:9b:97:e6:55:db:71:ea:
                    a2:88:9f:76:8b:3d:7a:38:cd:b2:8d:db:51:b8:49:
                    74:06:cb:c9:5a:9e:38:44:4f:6c:fb:34:b0:4b:a9:
                    32:e8:be:32:af:0c:ce:f0:89:bf:f8:05:e6:7b:a7:
                    a3:c6:16:ab:64:19:17:79:84:0b:16:27:2e:98:0f:
                    02:9e:ed:4c:c8:28:73:46:13:c6:40:e6:f6:d6:e7:
                    10:df:90:dc:96:fb:e5:42:2b:b1:39:5d:48:58:23:
                    64:c0:0b:34:fb:a4:cb:0e:bf:33:a3:1b:1e:b1:10:
                    20:7b:ea:0f:a2:3d:b0:db:59:c5:6b:c0:3a:83:fd:
                    4b:ab:8e:7a:0a:1c:29:ed:83:dc:16:11:fd:5c:fd:
                    d9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0A:2D:C2:84:F5:F4:F0:43:77:65:13:69:A7:A6:F6:B8:E4:BA:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/917864a2-cdeb-3f69-a0e6-d44314dd39cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.252.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:0d:3a:59:b8:e4:42:7f:ea:24:08:61:fa:ed:cb:ac:42:a2:
         b5:37:8f:80:8b:52:19:46:be:4b:4c:ba:1d:30:db:bf:1c:b2:
         18:45:33:28:86:50:b6:03:a4:9d:c2:8f:01:98:81:3e:d4:47:
         d6:a4:b9:8a:f9:f3:7d:4b:7a:4b:d9:70:ab:76:f3:33:36:fe:
         1f:9c:87:7c:2f:04:48:83:89:92:af:12:ff:89:8d:11:c4:8e:
         14:55:67:78:6e:59:b9:c4:5b:8b:e9:43:87:ad:14:06:a3:ef:
         29:96:c1:e1:8c:08:33:1b:79:0c:94:10:4a:8a:3e:0f:ce:6d:
         78:77:28:db:85:1d:fc:5e:bc:79:0f:e0:85:a5:97:7f:89:cd:
         a2:bb:63:bc:ae:e1:3b:4a:1d:dd:24:f7:6c:9f:ee:30:08:71:
         db:c2:0b:81:e4:f2:e4:46:5f:5c:63:79:50:34:69:c6:d0:fd:
         b9:94:0c:5f:ab:e1:3d:0d:0f:b2:10:f7:64:77:d9:f7:be:48:
         30:12:ea:9d:f0:4c:62:a7:17:70:e9:4f:ae:b7:00:fd:bd:66:
         09:dc:6c:c7:97:3c:c2:98:24:ce:d0:63:04:1c:a1:f0:51:f2:
         47:b9:7b:76:f0:22:39:f3:01:58:b7:8d:d3:21:cc:da:3a:52:
         9f:10:ee:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:25 2025 by rpki-client on console.sobornost.net