Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/fe94083d-4b11-368e-893b-bc05968acda8.roa
File:                     fe94083d-4b11-368e-893b-bc05968acda8.roa (raw, json)
Hash identifier:          O/wdYVrAKah3veKmWmkz/BxMQWzFmCUHKvAHHbDm7i8=
Subject key identifier:   15:62:30:7E:C2:C4:C0:2A:30:FD:44:72:61:6B:89:48:9B:3F:D0:0C
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F43285848B1F62C41D4823218042E9080
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/fe94083d-4b11-368e-893b-bc05968acda8.roa
Signing time:             Tue 28 Jan 2025 14:00:52 +0000
ROA not before:           Tue 28 Jan 2025 14:00:52 +0000
ROA not after:            Mon 28 Apr 2025 13:00:52 +0000
asID:                     3738
IP address blocks:        192.250.70.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b1:f6:2c:41:d4:82:32:18:04:2e:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: Jan 28 14:00:52 2025 GMT
            Not After : Apr 28 13:00:52 2025 GMT
        Subject: CN=ed40452b-44bc-4f01-aaf5-aa331ce95f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:63:a7:54:36:33:10:a2:af:8e:fc:68:fd:cd:
                    23:6e:c9:6a:78:8f:0a:e1:73:9d:a8:d2:bb:51:83:
                    99:33:3b:84:de:a5:6d:06:3d:65:a9:f8:0f:6c:51:
                    c8:9d:b6:55:ed:6d:7b:eb:88:31:b9:0a:f5:05:14:
                    6c:61:b0:50:61:05:bf:a3:4b:27:34:ed:4c:7a:65:
                    be:37:c7:da:d6:1d:5e:c0:99:0f:4f:6b:6d:bb:24:
                    b9:60:82:47:fd:a1:86:52:e6:ce:e4:32:3b:cf:7f:
                    cc:bb:20:e9:c4:23:8c:27:6d:ba:c3:cc:ba:5b:eb:
                    39:20:f5:7c:d6:1f:29:0d:a7:fb:e4:ba:51:4e:23:
                    ba:6d:ae:29:c0:a3:9e:40:a1:f7:c5:73:1f:64:de:
                    58:0d:50:e2:07:e2:5a:39:4c:b5:49:49:1e:2e:4c:
                    2c:68:f6:6c:78:07:92:62:21:4d:90:ce:68:25:4f:
                    24:49:3f:19:ea:d9:2c:03:8d:14:f3:50:e8:12:60:
                    cb:1d:d3:60:e8:44:ee:4f:44:4f:c3:06:8b:17:e5:
                    67:c9:ba:60:59:16:0c:ac:6b:7c:fa:2f:09:dc:5c:
                    d1:b1:2a:e1:69:c4:ad:82:21:7f:8b:f8:08:88:d5:
                    b2:9e:7c:58:16:26:76:45:e1:1d:57:39:f2:b8:a0:
                    20:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:62:30:7E:C2:C4:C0:2A:30:FD:44:72:61:6B:89:48:9B:3F:D0:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/fe94083d-4b11-368e-893b-bc05968acda8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:43:59:1b:ed:a4:1b:9c:ec:6f:a1:32:a3:cb:9e:66:9c:ef:
         eb:f3:eb:64:5d:3a:8e:f2:02:ae:88:02:97:ce:ca:8f:a6:6c:
         7e:fc:16:d8:77:68:ac:6d:ae:09:f8:7a:fc:87:73:d9:a5:1b:
         db:94:91:3d:ad:2a:2d:fe:b5:72:65:e1:6e:0f:5d:b2:85:0c:
         8b:8b:b7:c6:38:30:8b:b0:23:fb:3b:4e:68:44:b1:f3:e2:d5:
         ea:e2:26:02:c9:a7:57:08:79:08:48:44:07:85:fe:00:1f:3b:
         6a:15:1d:4f:3f:8c:c9:17:88:54:1f:b8:64:c4:5a:5e:94:64:
         f2:2a:41:a7:21:b1:85:f3:10:36:56:ab:8e:83:5f:d2:ea:29:
         60:7e:b3:ee:6d:d9:ed:44:c3:8b:37:f7:65:a6:b0:83:e2:0b:
         99:a1:3e:a4:34:11:bc:6f:47:44:14:b9:4b:1b:d9:97:3c:34:
         98:45:a1:96:31:41:86:8d:3b:53:65:e9:d6:51:c1:9e:d9:9b:
         33:9a:bb:85:cb:5f:ce:b7:98:54:d6:53:87:dd:9f:f5:ea:61:
         90:1e:7c:f6:2f:41:2a:09:7a:fd:7e:c7:0e:87:c1:e3:90:82:
         9e:f8:7b:5e:bb:13:56:5c:a2:43:da:34:3f:af:45:59:56:88:
         67:d7:60:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:40 2025 by rpki-client on console.sobornost.net