Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/52f4b4e0-3122-3fe0-8f17-4efb2d2acdc4.roa
File:                     52f4b4e0-3122-3fe0-8f17-4efb2d2acdc4.roa (raw, json)
Hash identifier:          7lBt6H0VTWNy4A/sGz/N4JnJXUml+Yt06XaUwrTarcA=
Subject key identifier:   2F:93:BB:20:D4:BE:91:5E:CF:B9:80:1C:3D:B2:59:D7:02:45:AC:D9
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F432858495C2444644CE83F38D1F04400
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/52f4b4e0-3122-3fe0-8f17-4efb2d2acdc4.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     393249
IP address blocks:        128.189.16.0/20 maxlen: 20

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:44:64:4c:e8:3f:38:d1:f0:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=0e7f7594-e8db-4e0a-bdcd-617a5eea6b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8b:a9:c8:f6:29:73:24:c9:85:d0:65:96:bc:
                    07:98:bd:09:4e:16:06:99:53:e6:36:93:68:0d:d2:
                    69:25:81:2f:14:21:b3:81:83:c8:bc:af:f5:8b:09:
                    dd:1d:c9:5e:95:92:ea:62:e2:c4:ad:09:fb:61:6b:
                    97:61:1d:f1:39:d9:7c:ca:b2:46:20:80:c9:8d:ba:
                    c8:eb:cf:54:b5:41:2c:67:b5:e3:23:21:1d:ea:23:
                    a2:dd:86:5f:be:bb:d2:89:e9:77:60:16:ba:52:1e:
                    89:55:37:37:a1:04:c1:24:3b:09:85:2d:9b:ce:65:
                    7f:23:50:85:05:7e:2d:01:61:2b:e7:a4:21:ba:a0:
                    c8:58:9a:d9:22:e1:db:2c:4f:e1:5e:ad:26:0e:9c:
                    f9:ff:e7:cf:3c:e5:b0:71:30:06:bf:7b:42:27:5c:
                    2b:23:05:61:49:61:18:04:62:2c:89:fe:7f:1f:91:
                    ac:b2:95:04:17:16:2f:9e:7c:b5:d7:8d:dc:8a:67:
                    5a:00:4b:e6:1d:9e:92:de:69:6c:73:db:de:24:7e:
                    ef:b6:4c:6c:27:7f:b7:44:58:8a:f7:fe:33:33:10:
                    c0:79:d8:9f:48:4e:53:61:01:5f:b5:98:42:9f:3f:
                    51:57:63:04:3c:a0:1f:64:ea:d7:95:e3:48:7f:a4:
                    17:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:93:BB:20:D4:BE:91:5E:CF:B9:80:1C:3D:B2:59:D7:02:45:AC:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/52f4b4e0-3122-3fe0-8f17-4efb2d2acdc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.189.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:08:53:c0:47:88:b4:78:09:96:cc:0d:dd:81:05:d0:10:c9:
         d9:1c:84:a7:0c:90:f2:34:29:f1:95:3d:e5:6c:38:ce:9b:77:
         f0:d2:8f:c4:65:dc:c3:3f:be:49:03:8a:34:2b:78:db:24:6e:
         8d:75:a7:0a:9a:0d:6e:85:c5:64:16:a9:26:3a:35:1e:af:91:
         5c:9d:d2:8e:7e:55:f6:c7:07:b6:da:88:a2:db:cf:3c:c5:29:
         d2:4d:8e:c5:62:14:22:a8:00:b0:f4:e7:56:b5:8e:4d:cc:b4:
         c1:ba:ca:8c:e6:8d:06:f8:99:99:7a:0a:1a:44:64:6e:9d:e6:
         55:f6:0b:86:f0:eb:1f:c5:1b:fc:73:48:87:88:4c:d4:f3:1e:
         66:a4:0e:3e:59:7a:d2:bf:41:a7:d6:e5:17:a1:b2:9e:de:76:
         af:09:06:36:4c:0c:0f:a4:1e:4b:39:53:dd:d0:82:d4:6b:8f:
         54:9a:ee:bd:f5:54:27:d0:b5:fe:d4:96:7e:dd:a0:4c:39:e4:
         80:a4:4b:59:61:e9:09:47:f2:14:59:2b:a8:bf:27:ca:43:8d:
         b8:b2:88:83:3a:74:8e:69:a1:30:5d:92:55:06:fe:21:7b:1f:
         b8:ca:05:69:5a:97:de:6a:ff:23:9a:ee:e2:80:4b:bd:98:3e:
         aa:9c:8c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:04 2025 by rpki-client on console.sobornost.net