Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/7fe96268-b787-3529-9f78-3e3d0ced15ee.roa
File:                     7fe96268-b787-3529-9f78-3e3d0ced15ee.roa (raw, json)
Hash identifier:          Gp3F+DMPsJd3tnOwX26rITSMO1xQ+QhuZSUeOKvvnMg=
Subject key identifier:   44:F7:8C:7C:22:F7:9D:23:E6:31:37:92:07:CE:EE:97:56:FB:6C:55
Certificate issuer:       /CN=52cae98e-9a01-4898-90d2-074cdeea24fa
Certificate serial:       010D0C9F43285848EF61408A7F8DCEEB5BFF96C0
Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/7fe96268-b787-3529-9f78-3e3d0ced15ee.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     13325
IP address blocks:        204.25.128.0/18 maxlen: 18

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:40:8a:7f:8d:ce:eb:5b:ff:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=af6d3619-2a82-4f8a-a6cb-9a4018914fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cf:6e:f0:ef:88:35:9f:65:fe:67:15:4c:98:
                    24:de:c7:67:c9:73:2a:64:aa:4a:4c:37:39:65:90:
                    5f:85:5d:36:a4:c8:14:2f:9b:61:bc:42:fe:54:76:
                    ee:d6:19:a6:e1:c4:c2:78:0b:19:d7:3c:2d:44:ef:
                    12:be:d2:3e:43:79:89:91:3a:80:68:e4:6d:eb:5d:
                    4e:71:fc:93:e9:b9:a5:be:41:4c:56:a2:51:c5:22:
                    e8:51:92:56:0b:46:44:58:4a:84:32:77:8d:98:f6:
                    69:99:0a:f0:d4:f8:a3:93:d7:67:91:47:22:2a:4e:
                    7a:9c:f2:3c:6b:60:71:e6:cd:0e:4a:d6:b4:4c:35:
                    a0:db:1c:55:c0:5a:b1:70:f5:50:e3:47:49:94:94:
                    3d:6d:46:11:ee:e3:1a:2c:bd:b7:6f:5f:30:f7:a4:
                    5c:ec:70:83:3c:46:af:67:b3:06:ff:dd:c6:ca:e5:
                    e3:4e:ca:1b:0e:fe:89:ec:28:02:f8:a1:d5:50:b3:
                    ab:a7:92:ac:72:fd:37:df:4e:d7:f4:6c:71:8f:be:
                    fc:df:aa:8f:04:16:83:f9:84:73:5c:4f:cc:71:b2:
                    1e:26:e4:1c:6d:f0:95:8b:40:84:36:16:3c:e5:d5:
                    c4:ca:f9:ef:d9:a5:f8:17:e3:ba:02:4c:32:3b:e5:
                    fd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F7:8C:7C:22:F7:9D:23:E6:31:37:92:07:CE:EE:97:56:FB:6C:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/7fe96268-b787-3529-9f78-3e3d0ced15ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl

            X509v3 Authority Key Identifier:
                keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.25.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:d3:0f:68:b0:c1:e8:83:42:dd:bf:6e:16:79:b6:92:81:b8:
         d6:f9:65:43:61:c2:65:91:0a:2e:02:4d:c9:31:ed:ea:80:4c:
         49:87:19:c1:60:1b:2f:5c:8c:9e:11:d0:e1:23:53:51:94:08:
         03:78:68:d8:b9:16:38:52:8c:b4:4f:c6:3b:c6:ca:c0:d2:c8:
         07:15:a0:10:55:47:c0:7d:ec:d0:23:a5:6d:2c:48:00:77:c3:
         b3:41:dd:b7:7d:2f:b6:d3:e6:be:8c:7c:50:e8:0b:03:2a:50:
         ce:33:7a:9c:ae:03:9d:5c:28:ce:54:b2:f5:ea:08:ef:3b:a3:
         56:e2:91:8c:ad:0b:af:cb:4b:ad:a4:a6:8e:c5:71:07:da:f6:
         51:e1:b2:c6:f7:e5:a8:ca:06:60:2d:5a:cf:33:98:f6:ae:d3:
         ce:80:a9:c5:c9:49:3b:a8:b5:f3:3e:f8:68:cd:51:c5:82:08:
         eb:1d:56:0a:75:6c:62:10:ba:e8:0a:ce:8c:56:95:54:d2:17:
         0e:eb:d1:82:30:95:d0:f4:34:d0:f9:e6:c2:c0:c0:2f:58:3f:
         3e:76:e6:2d:11:2b:6d:98:7d:d4:4d:45:9f:51:d7:5b:80:3b:
         dd:26:c2:7e:ac:2f:d6:86:ad:28:f0:e1:5b:f2:f3:db:50:20:
         db:f2:a9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:16 2025 by rpki-client on console.sobornost.net