Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/226257d4-f43f-3f67-b662-d0922b1e31e3.roa
File:                     226257d4-f43f-3f67-b662-d0922b1e31e3.roa (raw, json)
Hash identifier:          CzoOmSOn/rHf1ZFOV/6BKtMMkAzuRCjjP8s/SVkCdW8=
Subject key identifier:   F2:2C:ED:08:DA:DD:BF:59:B5:48:B3:C7:15:A9:38:B0:B8:4A:3A:67
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584961B99B7607261DD74F179BE4
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/226257d4-f43f-3f67-b662-d0922b1e31e3.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     397543
IP address blocks:        207.23.96.0/20 maxlen: 20

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:9b:76:07:26:1d:d7:4f:17:9b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=aa1d93d1-ebd2-400a-8c7f-ab9b86254745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e9:4f:5e:57:32:70:a7:84:40:b2:90:cd:2d:
                    86:77:cc:4f:f1:89:5a:77:fa:d5:97:3d:25:13:5f:
                    9f:7b:86:2b:36:e6:c0:88:af:e9:83:bb:03:49:46:
                    8e:a9:45:ed:68:ae:a2:c7:83:a0:df:29:2e:f6:44:
                    1d:07:76:24:3a:c6:5c:09:f9:5f:b7:5e:f7:d8:d5:
                    82:80:03:77:a6:96:ae:b8:97:1f:aa:ab:df:ae:cc:
                    88:a2:55:9e:1c:3b:c3:84:b2:6a:8d:84:81:c7:4b:
                    64:d1:d0:12:4b:4f:cf:c1:d9:13:7d:fd:fc:bb:f4:
                    b7:d1:22:64:86:1a:8b:07:52:00:f7:49:60:a4:d9:
                    b9:c8:5e:be:14:d9:8c:04:24:38:0f:43:8a:68:50:
                    bb:71:5c:a3:b1:20:95:f4:14:f0:f9:37:b8:60:25:
                    6d:cc:9e:64:9e:ed:2a:4b:0b:96:1b:c2:14:18:60:
                    e2:d8:7b:fe:77:3d:2a:0b:3c:cb:90:00:c5:30:0a:
                    55:dc:f4:d0:43:1a:98:b9:3c:c0:32:c4:dc:56:35:
                    6d:5b:73:eb:bd:f2:23:f3:38:64:ca:d5:6b:75:69:
                    d8:18:9d:22:1a:0c:7b:70:f1:8a:e7:aa:0a:d9:31:
                    ef:8a:a6:44:02:18:07:97:25:a3:6c:59:15:81:07:
                    2b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2C:ED:08:DA:DD:BF:59:B5:48:B3:C7:15:A9:38:B0:B8:4A:3A:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/226257d4-f43f-3f67-b662-d0922b1e31e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.23.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:44:3d:7a:fa:bc:36:44:6d:48:21:28:79:ef:66:48:be:b9:
         bb:01:3b:5b:64:f2:ae:81:06:f1:31:6f:2e:69:80:8e:f9:02:
         5d:8c:e6:14:9d:92:a0:47:48:ab:ab:ce:1d:cb:b5:86:15:f6:
         0a:17:0c:00:81:34:5b:f4:bc:ca:10:84:9b:a8:8d:89:4d:3d:
         8a:c2:7c:78:6e:4e:9e:14:b1:3c:3e:0c:41:2a:b8:98:67:8e:
         62:76:e8:df:75:b7:47:50:4d:ef:00:bf:94:37:21:33:c1:c5:
         be:e7:a5:1f:92:16:bb:3f:96:e0:c3:2b:5d:f1:80:bf:2c:7d:
         3a:a6:f1:e0:f4:ed:9e:d7:12:8e:23:17:7c:a3:3e:4f:6a:68:
         58:9c:22:fa:d8:55:b5:87:95:23:2a:46:c2:82:c6:64:29:77:
         70:62:cc:83:41:a0:01:09:3e:c0:be:6c:14:44:68:e5:14:c7:
         ad:d4:0c:14:47:6e:83:bb:7e:73:6a:98:c5:2b:b6:af:a7:c5:
         c2:0c:b3:d8:d8:27:d3:1e:7a:59:c8:17:01:46:5a:56:9d:fe:
         29:b2:17:89:81:a8:11:df:d1:24:cd:e3:0c:93:d7:05:61:a0:
         9b:6b:f8:1c:89:5c:fd:e3:03:ae:33:7e:e9:29:13:65:2f:81:
         e2:b7:51:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:04 2025 by rpki-client on console.sobornost.net