Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/ef421df9-34b8-3b5e-a7d2-ac13423717e9.roa
File:                     ef421df9-34b8-3b5e-a7d2-ac13423717e9.roa (raw, json)
Hash identifier:          qUcjv8Wc5IBmYIAiYwWMbldXzMnDx9Y9EVqzxQm+cpY=
Subject key identifier:   F3:91:01:1C:65:8A:22:71:63:26:46:5C:38:D2:54:BD:62:99:39:B4
Certificate issuer:       /CN=47c2a6e6-9681-4930-9d85-167ea7f611c2
Certificate serial:       010D0C9F432858497279B717AF1F2405AA1DF9C0
Authority key identifier: 09:B2:1E:6E:92:30:BC:66:84:26:F0:0C:C7:DB:C5:91:5A:AA:E9:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/ef421df9-34b8-3b5e-a7d2-ac13423717e9.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     394413
IP address blocks:        159.28.0.0/18 maxlen: 18

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:b7:17:af:1f:24:05:aa:1d:f9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47c2a6e6-9681-4930-9d85-167ea7f611c2
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=79df6531-c8b6-43ed-8ee9-e674f4cb50ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f2:c3:76:d2:70:cb:7b:20:99:fd:a4:88:31:
                    1d:d1:49:88:ca:4b:6c:0b:3f:5b:74:0d:57:d2:73:
                    3b:ad:d1:80:16:21:df:30:20:30:3e:3b:51:16:31:
                    85:a1:84:44:13:37:61:d0:05:e0:b7:ce:5d:cc:ee:
                    fb:b7:79:9a:00:38:c0:7e:63:3b:d4:d0:4f:07:f8:
                    a2:e0:de:db:71:fc:81:56:4a:ff:82:03:fa:f5:66:
                    1f:07:9c:23:eb:1d:1e:87:34:5b:79:39:b2:0b:84:
                    d2:b6:16:18:b6:7d:1b:27:e6:9f:24:a5:d9:e6:aa:
                    02:95:dd:88:c4:09:24:e9:91:63:19:07:ea:de:b8:
                    01:d0:26:69:c3:b0:55:cd:98:9c:67:8a:80:7f:89:
                    0c:02:5d:2a:3f:9d:83:ad:a6:03:99:54:cb:fe:2c:
                    ea:66:45:03:50:3d:5b:7b:18:94:b3:0a:ef:2b:d8:
                    92:e8:e1:63:1b:bb:67:ee:29:33:3a:5b:bb:ce:91:
                    1d:0c:13:de:f8:23:d6:d3:49:7a:d4:1e:54:d8:1d:
                    e7:d6:96:34:bc:d7:8e:0f:0c:38:34:fb:7c:58:b5:
                    3d:84:ae:b4:a3:81:f5:15:48:0b:8f:3a:ff:a9:6c:
                    a9:49:02:34:cf:2c:3d:89:7a:c2:c8:65:d4:8c:c0:
                    dc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:91:01:1C:65:8A:22:71:63:26:46:5C:38:D2:54:BD:62:99:39:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/ef421df9-34b8-3b5e-a7d2-ac13423717e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/47c2a6e6-9681-4930-9d85-167ea7f611c2.crl

            X509v3 Authority Key Identifier:
                keyid:09:B2:1E:6E:92:30:BC:66:84:26:F0:0C:C7:DB:C5:91:5A:AA:E9:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.28.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:1d:29:a9:54:7f:1a:ac:53:49:96:dd:4d:81:18:cd:9b:33:
         d7:77:02:04:6a:6f:fd:10:90:c5:c2:2d:48:7c:d3:49:b0:9a:
         2f:76:f2:a9:d5:96:a8:45:89:58:83:f9:60:3a:bd:97:21:ed:
         84:90:6f:3c:a0:23:90:6f:e0:06:e5:e8:3a:69:25:8f:ac:f8:
         3d:6d:10:d1:df:2f:e0:4a:64:da:93:13:e7:0f:d8:10:13:d8:
         e7:a5:d1:e8:ed:c1:ca:1c:d5:57:b9:cf:62:30:06:a8:57:d3:
         ad:2c:8d:67:95:58:24:9b:77:6e:22:34:2b:00:b9:86:b5:0e:
         bd:2a:a7:ae:57:bd:13:73:9c:e1:40:63:32:0d:b6:d2:8b:ff:
         07:2e:e2:69:97:74:9e:54:61:47:3f:3c:d8:4d:ba:72:1e:50:
         15:6b:b7:ce:f3:00:2c:2d:a8:89:b4:de:94:7b:a5:80:0b:85:
         bc:46:9e:b2:a0:db:17:d2:92:a7:ec:64:cd:d7:b2:2b:15:88:
         fe:95:1e:a9:b2:eb:3b:ec:75:97:fe:8d:3e:52:cf:34:5a:a7:
         e9:84:64:dc:fa:b3:90:7f:40:ce:4d:b1:4e:94:e5:3e:ae:f7:
         e0:d2:38:0b:32:03:c5:6e:58:43:2b:47:d7:b0:77:14:d0:a2:
         92:78:7b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:30 2025 by rpki-client on console.sobornost.net