Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/8b2a22bf-7b66-34e6-9198-24d8c09b19b4.roa
File:                     8b2a22bf-7b66-34e6-9198-24d8c09b19b4.roa (raw, json)
Hash identifier:          4sChT4Y6/6jQ5dy0MutGb83kgfBp2O/Q9K+AywWQvGE=
Subject key identifier:   C0:E6:97:1C:10:3E:6F:94:8B:92:C9:61:0D:29:28:21:F8:45:B9:18
Certificate issuer:       /CN=70057aa1-544d-4237-b549-304fd45324ba
Certificate serial:       010D0C9F432858498339F4E0DBB593AE7B1FAE00
Authority key identifier: DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/8b2a22bf-7b66-34e6-9198-24d8c09b19b4.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     30039
IP address blocks:        216.222.215.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:f4:e0:db:b5:93:ae:7b:1f:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70057aa1-544d-4237-b549-304fd45324ba
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=231b2116-90f9-4198-b367-2337c7bc0e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1e:50:8c:a7:82:60:d7:a1:ca:c4:2c:b5:18:
                    57:1d:3b:72:e2:e0:59:58:96:de:23:9a:a1:e6:3f:
                    66:b1:bf:ba:ce:b7:6a:50:ea:c1:29:23:70:99:64:
                    2c:8b:36:76:f0:8b:88:81:5b:70:bb:db:4a:19:c1:
                    d1:aa:61:d0:29:d3:8d:9a:05:14:b3:ca:ab:23:05:
                    1e:55:3f:94:0e:a5:2e:95:1f:2d:bf:e9:1d:73:0b:
                    fc:fd:e2:51:a4:f7:1f:d9:02:34:5b:e7:d7:cf:ed:
                    6a:b3:42:84:1e:60:f2:b7:03:1b:b4:86:12:9c:78:
                    0e:fb:67:2c:64:0b:fd:bb:5e:6c:62:e9:30:b1:14:
                    a6:93:d7:18:dd:89:a8:bb:28:e7:5f:c8:7f:92:3d:
                    c6:22:83:d5:87:02:28:7f:57:28:26:30:43:dd:23:
                    e2:be:de:c7:19:68:fc:39:d6:70:4e:60:e6:b7:5f:
                    fa:86:4f:33:eb:e7:86:ea:b1:f8:f2:15:b9:a3:f1:
                    80:20:6a:22:ed:56:d4:10:f6:f1:1a:0c:bb:79:94:
                    a4:78:03:d8:c5:d0:00:93:ae:be:3f:05:99:46:f9:
                    5e:bb:fb:6d:40:a2:7b:f8:db:4b:a5:8c:5b:12:bb:
                    13:e3:f4:bc:52:65:7d:50:91:56:a5:74:4f:41:d1:
                    3c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E6:97:1C:10:3E:6F:94:8B:92:C9:61:0D:29:28:21:F8:45:B9:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/8b2a22bf-7b66-34e6-9198-24d8c09b19b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl

            X509v3 Authority Key Identifier:
                keyid:DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.222.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:9d:77:6e:cf:ea:6e:11:d8:03:76:8d:05:0e:92:f8:51:e4:
         33:91:eb:ab:a5:93:41:ac:c7:7f:08:81:a5:69:57:38:6b:af:
         dc:e2:92:8d:56:2c:bf:32:c8:5d:14:3a:a9:46:9e:b5:98:ef:
         b5:ef:2c:56:94:10:1c:8b:68:1c:d2:da:5a:67:7e:3d:ed:b1:
         b4:c0:e5:c4:98:07:18:54:36:c1:09:fa:dc:e7:fe:99:7f:e3:
         0f:2f:66:27:bc:db:79:3f:23:76:bb:6b:ec:75:fe:a0:71:02:
         c0:e6:d8:05:10:e0:80:ef:85:40:27:ca:b3:6f:1a:09:a4:3c:
         72:40:32:f9:b6:f5:5e:6f:c7:94:82:6b:e9:fc:4e:07:48:46:
         ca:fc:96:34:fb:61:fe:15:cd:6a:a9:bb:a6:05:f4:6c:ef:8d:
         21:f6:e4:ea:f0:1e:9b:b6:fa:9e:fa:73:72:51:f9:5b:79:cb:
         54:14:4e:e0:d6:04:f7:c5:f9:38:a6:e0:57:8c:97:07:25:51:
         78:c5:10:d0:a2:35:17:c9:17:86:36:54:a5:38:63:23:de:92:
         82:4a:cd:4c:ec:d1:fd:0e:0c:8d:f5:71:07:6f:17:f7:49:fe:
         d0:b1:c7:c4:91:24:30:e8:fe:cc:fc:a2:a6:52:c6:d1:3b:61:
         a8:0b:16:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:41 2025 by rpki-client on console.sobornost.net