Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/70064767-b7ea-3b84-89fd-3f7be4753d8f.roa
File:                     70064767-b7ea-3b84-89fd-3f7be4753d8f.roa (raw, json)
Hash identifier:          QtsSY541h6/PX1VtJtmbNxC/zmSZoofNYQOEoEX7Fr4=
Subject key identifier:   19:A9:BA:9C:38:7F:BD:F9:FD:58:2E:3F:FA:0A:7A:B9:EC:B4:37:81
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584961B99A1BA06D347B142CF3A8
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/70064767-b7ea-3b84-89fd-3f7be4753d8f.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     16462
IP address blocks:        206.87.64.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:9a:1b:a0:6d:34:7b:14:2c:f3:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=7f489a86-1eae-4739-ba41-83945af36df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a8:69:f3:ef:ed:14:3b:ad:f0:a0:03:5d:39:
                    03:e0:7e:fc:32:c6:b6:cb:6c:81:6a:ad:e3:28:3d:
                    e1:10:65:f3:47:7c:b6:6d:92:57:7f:c0:b0:d1:0a:
                    36:96:26:4d:fb:75:93:e0:56:7b:cf:ca:15:32:be:
                    05:2f:f0:9b:92:92:13:3d:39:77:91:c2:23:15:c7:
                    e9:81:e0:60:1a:9b:4c:fc:af:20:da:85:69:c0:d9:
                    f3:8d:71:92:65:bd:6f:d2:c7:4f:3c:bc:a3:66:21:
                    e8:27:64:8f:82:81:b8:a2:c1:fe:20:af:2a:b5:64:
                    a6:23:b3:35:54:9a:40:d5:96:6f:99:70:02:72:65:
                    76:ff:a8:92:23:21:b8:ef:cd:68:5e:5f:18:69:c0:
                    e7:a5:d7:03:b1:4b:3f:9c:75:ac:a6:16:78:d8:87:
                    8e:62:9d:98:37:4b:2d:97:36:60:55:7c:29:ee:54:
                    5e:16:ad:3c:17:a8:f5:3d:4d:6a:7a:f6:42:41:0a:
                    53:df:77:99:80:d9:1b:b1:d7:3c:ff:fb:f6:39:7d:
                    30:a7:8f:ce:2e:ca:da:80:b4:b9:dc:65:1d:49:11:
                    0c:e6:a9:1c:0c:dc:f2:1b:2a:cd:7b:10:a3:19:f3:
                    c8:fc:f1:f6:b3:0a:bd:4e:5b:0a:0c:88:1e:c4:07:
                    61:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A9:BA:9C:38:7F:BD:F9:FD:58:2E:3F:FA:0A:7A:B9:EC:B4:37:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/70064767-b7ea-3b84-89fd-3f7be4753d8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.87.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:14:61:3d:9e:90:fd:f0:65:f1:04:94:7e:d1:44:75:6d:55:
         17:0b:20:d4:01:8d:21:dc:bf:f4:1f:af:2f:4d:2f:fd:60:90:
         ee:de:7a:65:96:71:ed:05:6a:69:4e:aa:7f:80:6c:de:4d:b3:
         d1:46:59:33:86:d4:00:04:7f:3b:4d:d6:ac:c3:aa:1b:2a:ab:
         32:33:0f:84:aa:3e:58:06:ef:43:07:11:54:ab:6f:98:e8:78:
         dd:5b:c1:5d:21:66:16:59:bf:0b:e0:06:6b:4c:07:eb:39:54:
         e6:a5:61:22:10:fc:ab:23:4c:43:81:3c:df:a1:2b:65:0d:bb:
         40:b2:b1:a5:cd:b7:af:2d:83:5a:42:66:2b:80:0e:df:bf:17:
         3f:84:fd:a2:99:c5:a5:06:7b:6b:4e:94:05:2f:44:05:7e:9a:
         a0:b7:3a:c1:88:fb:96:e9:04:74:2f:1e:57:7a:74:b8:ae:ad:
         95:75:e7:45:92:b6:2a:1c:25:ed:c4:c1:33:f0:4f:c5:d7:80:
         cf:d3:2f:50:6c:e6:f0:3d:56:fe:67:98:b2:2a:8f:58:ca:30:
         f2:c6:69:df:2c:62:3a:3c:ec:a9:6e:12:9c:43:e5:20:d6:48:
         e0:69:85:ec:80:d9:e0:26:7d:03:7f:48:60:b1:01:73:91:1e:
         93:ed:44:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:04 2025 by rpki-client on console.sobornost.net