Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/2eb74f13-24dd-32a8-8c5d-9d1f53478499.roa
File:                     2eb74f13-24dd-32a8-8c5d-9d1f53478499.roa (raw, json)
Hash identifier:          /tE928YI96tfi44mG7HswPZeTfZgDIFFFdN2JVt1jEw=
Subject key identifier:   51:88:A6:C4:D7:24:22:2F:A1:B6:5C:C5:E4:04:FE:B8:6C:88:9E:37
Certificate issuer:       /CN=8252d812-07cd-4870-b413-e08fb8355928
Certificate serial:       010D0C9F4328584981D454D06418E661D1B2EA80
Authority key identifier: 22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/2eb74f13-24dd-32a8-8c5d-9d1f53478499.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     8075
IP address blocks:        170.88.85.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:54:d0:64:18:e6:61:d1:b2:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8252d812-07cd-4870-b413-e08fb8355928
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=201fbce4-c5e3-4084-9cf8-a70156834697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d5:91:e1:95:81:59:fd:70:d3:5f:54:a2:4f:
                    e2:1b:ab:d0:35:1d:3e:bd:96:0c:fe:41:77:4e:f5:
                    2a:b5:6e:01:92:61:e7:a8:27:74:f2:14:7b:e6:98:
                    95:1b:51:92:bc:c7:b0:e5:87:ee:03:52:a9:c1:f0:
                    be:e2:59:5d:43:96:89:46:76:81:8b:3d:bb:f3:93:
                    d0:70:0b:c3:3c:cf:23:73:b8:02:c9:d2:a2:f9:53:
                    24:ac:31:b8:72:87:6f:e9:d9:58:64:31:fe:0f:81:
                    6f:bd:ba:47:41:02:4a:1a:15:4b:e5:7a:3d:4e:0f:
                    3b:a4:5a:3d:5d:3d:43:f7:56:83:ca:29:63:14:4a:
                    a1:64:d2:a5:99:92:b5:ea:a6:c6:fb:96:3a:e9:86:
                    ee:c6:9d:d5:33:c3:69:c7:c3:e7:b6:b0:79:8b:61:
                    cf:95:6b:7b:3f:5f:b0:4a:b5:1d:cc:54:8b:e3:fa:
                    31:07:1a:87:71:62:3b:ec:da:32:d1:b8:8b:07:1a:
                    c8:3f:c2:af:e0:e0:36:58:15:f5:6b:e9:02:e9:5c:
                    56:5a:36:8e:79:bf:55:a3:5d:1b:c8:0d:83:0e:f6:
                    51:3a:67:3a:56:ca:e8:ae:6a:50:ff:c4:6f:e6:e9:
                    49:6c:94:23:60:23:bd:b1:16:68:5e:b9:c4:ff:9b:
                    5f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:88:A6:C4:D7:24:22:2F:A1:B6:5C:C5:E4:04:FE:B8:6C:88:9E:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/2eb74f13-24dd-32a8-8c5d-9d1f53478499.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl

            X509v3 Authority Key Identifier:
                keyid:22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.88.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:a0:50:a0:4a:9f:4d:72:48:52:f4:5d:3a:93:82:3d:90:55:
         a9:63:e9:a7:f5:24:5d:03:8e:27:0d:fc:e9:88:85:bc:a8:23:
         2c:2d:b2:48:28:db:5a:7d:fe:48:23:51:8c:fc:94:02:ec:97:
         71:e7:09:f4:b5:2d:9d:83:2d:86:1a:6e:86:66:44:3d:75:30:
         de:19:9b:3e:17:1b:ec:68:f5:c3:1d:3c:4a:70:ba:91:4b:89:
         37:93:3f:97:79:f9:bb:e9:5a:49:3c:c0:33:8a:a7:63:a3:57:
         79:47:d1:7a:e8:90:45:f4:81:34:b1:90:02:49:39:37:3e:13:
         3e:0d:23:39:e6:4c:d6:77:8b:c5:e9:18:05:81:1e:be:dc:b7:
         67:c4:1b:0e:fe:7c:85:61:7c:48:3c:67:e6:c3:04:43:e5:37:
         15:db:fa:20:c0:8f:8e:be:78:a5:a6:e9:ea:72:0d:94:8d:a2:
         19:40:ed:de:62:f2:96:46:1b:5b:95:ba:e5:f5:05:d0:30:e8:
         92:ae:50:ab:10:20:63:b7:b1:ae:62:d2:86:8e:91:47:9c:20:
         91:ce:d6:00:04:f2:c0:41:78:1a:fb:39:79:ab:42:70:91:5c:
         a4:b6:3c:db:d0:0b:0d:a2:35:9a:78:d0:f3:38:9d:e3:49:33:
         7e:4a:df:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:28 2025 by rpki-client on console.sobornost.net