Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/b4690704-29a0-3fb0-9c91-5d04a3a74d75.roa
File:                     b4690704-29a0-3fb0-9c91-5d04a3a74d75.roa (raw, json)
Hash identifier:          8gOmO9LCO8pIVWfFSzChg8fjdM+YUu6PKC6+4Cap5cc=
Subject key identifier:   69:10:B1:E0:64:86:80:2D:00:CB:0B:91:E2:EF:29:D5:A6:18:E3:D5
Certificate issuer:       /CN=c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa
Certificate serial:       010D0C9F4328584981D456A6ED9EB85B3886BEC0
Authority key identifier: CB:8F:EB:83:E8:D2:B5:7B:16:20:34:6B:E5:C4:FB:80:A6:06:86:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/b4690704-29a0-3fb0-9c91-5d04a3a74d75.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     8070
IP address blocks:        165.159.132.0/22 maxlen: 22
                          165.159.136.0/22 maxlen: 22
                          165.159.188.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:56:a6:ed:9e:b8:5b:38:86:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=6caa4c60-f477-4442-bcb1-cb7ce76df091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:62:90:94:0b:5c:09:0c:7b:7a:85:b8:36:bd:
                    1e:00:de:c1:0a:ff:8a:81:6a:36:14:3c:47:0e:7d:
                    9d:dd:d6:00:e0:fb:8f:7e:fb:22:82:85:09:7f:14:
                    d9:91:d1:b2:48:61:23:69:26:7e:69:7b:69:19:ba:
                    61:4b:df:2b:71:8a:c8:ba:d7:50:2f:d4:94:c0:55:
                    12:05:47:20:2d:4a:19:4c:6d:c3:f3:de:1a:1b:eb:
                    28:e6:78:63:16:fe:99:84:04:d6:1e:74:97:08:fa:
                    c8:8d:9a:ca:be:f1:e5:7d:ab:44:74:51:39:51:1e:
                    71:c2:83:db:0f:4b:ee:07:00:28:e6:b5:be:61:fb:
                    19:f4:32:71:42:90:05:9a:09:45:4c:bb:16:b1:07:
                    b8:56:99:be:e9:2c:3e:a5:27:42:a0:62:27:d2:3a:
                    91:9a:57:99:9c:f8:34:2f:44:1c:32:0c:75:ad:ea:
                    0c:ee:ae:cc:33:fe:f7:d6:d8:0e:75:47:65:25:79:
                    92:de:20:3d:37:2b:8f:7e:5e:f3:47:db:d6:6a:01:
                    c2:ad:75:4d:02:28:d0:a4:2f:69:f8:22:61:e3:b3:
                    02:c8:b0:4d:4c:dc:db:e4:02:d8:3c:c5:a1:6c:95:
                    f6:11:b1:d5:35:8b:07:26:45:5d:84:0f:a2:d5:ca:
                    8c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:10:B1:E0:64:86:80:2D:00:CB:0B:91:E2:EF:29:D5:A6:18:E3:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/b4690704-29a0-3fb0-9c91-5d04a3a74d75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.crl

            X509v3 Authority Key Identifier:
                keyid:CB:8F:EB:83:E8:D2:B5:7B:16:20:34:6B:E5:C4:FB:80:A6:06:86:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.159.132.0-165.159.139.255
                  165.159.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:3d:a5:8d:f4:77:6b:e1:93:b7:89:63:10:40:cb:45:de:ef:
         e0:23:67:7c:0f:ed:8b:2a:b0:03:b5:6a:66:0a:b8:58:1a:8d:
         a9:0a:be:62:c1:75:75:f8:67:dc:54:92:e5:8a:84:9a:e5:3f:
         be:3a:e7:27:67:24:4a:0f:ec:d2:55:04:ba:c5:48:29:a1:54:
         e9:fb:2d:59:b1:c7:37:0d:f2:58:98:95:08:45:ec:21:b2:ac:
         8b:d9:56:ad:63:95:d7:f4:c5:9c:ff:08:12:3e:63:22:92:97:
         e6:2b:65:ae:d8:15:71:e9:32:26:e1:cc:ec:7f:03:49:4e:ac:
         77:ac:26:80:3e:ee:a7:a8:bf:d5:85:61:ba:b4:0e:0f:c0:59:
         ef:f4:cb:0f:2a:04:b4:a0:57:9c:6a:4c:7c:33:ac:ba:2a:c1:
         b3:fe:3a:ba:58:17:56:62:77:d5:f9:b8:22:69:41:f2:d3:4e:
         2b:cf:8c:94:9d:3c:c3:2a:7c:53:a9:fb:f8:43:39:09:13:17:
         9c:d3:ab:26:bd:e4:4f:f6:8e:ed:f5:75:45:90:f4:9a:2c:7b:
         c2:8a:8c:83:69:8b:c1:6a:c4:98:5c:0b:37:d3:de:11:8d:0b:
         4b:eb:1b:95:30:bc:9c:8b:01:a9:7a:c6:42:9f:b6:40:df:63:
         ad:90:8c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:44 2025 by rpki-client on console.sobornost.net