Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/af4a70ed-4978-37ac-9bc6-a3c7bea2416b.roa
File:                     af4a70ed-4978-37ac-9bc6-a3c7bea2416b.roa (raw, json)
Hash identifier:          Dlor5PSr8fMPpEszSTgeHWwx2U8Gj+p++qpvNjU+rXw=
Subject key identifier:   94:56:00:D4:76:B8:F7:93:28:83:54:AC:55:75:44:6D:5B:BE:24:4D
Certificate issuer:       /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial:       010D0C9F43285848E9CBE2EC8B7E4B37764FCA40
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/af4a70ed-4978-37ac-9bc6-a3c7bea2416b.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     54032
IP address blocks:        72.233.148.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:e2:ec:8b:7e:4b:37:76:4f:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=62d27f41-0753-4bc2-9407-f1248dd5266a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:40:c8:48:a4:9f:fb:36:48:0a:af:aa:7a:6b:
                    c9:3d:e6:df:19:3d:be:94:96:af:55:35:4e:8b:30:
                    d7:56:1c:ab:f5:0e:a8:8d:e4:4e:08:b8:94:a2:35:
                    8e:14:ad:9d:46:35:91:0c:17:63:eb:3f:6b:ee:eb:
                    1d:44:b6:72:7a:37:32:bd:c5:22:73:fa:2e:67:77:
                    37:f3:9a:45:63:78:6b:e4:5e:4a:e7:89:08:d4:c8:
                    c1:d6:68:01:7a:28:85:24:25:be:ef:68:34:bd:c3:
                    f1:40:b8:92:ea:59:38:d1:62:7d:c5:d8:85:21:7b:
                    38:01:4d:96:a1:12:0b:d3:bb:71:c6:03:9c:65:d9:
                    96:42:76:6e:a2:31:1a:71:32:71:7e:61:35:9a:8b:
                    f0:e8:5a:40:bf:5f:93:48:a2:53:dc:da:ba:15:c5:
                    a1:7f:cc:c3:33:33:4b:91:26:88:b4:bb:15:9b:0b:
                    90:cc:af:7f:d6:d1:91:6a:99:0b:6b:e5:9b:38:40:
                    e9:69:c4:d4:b9:4c:34:fb:64:05:78:e9:20:60:06:
                    78:61:3b:63:28:2a:6c:cb:97:6c:5a:6c:98:9e:50:
                    70:4f:cb:3b:6d:6c:3c:53:1d:e5:ff:e5:10:17:fc:
                    ea:fe:86:00:62:c5:cf:2c:c3:29:b7:e3:9a:6c:ef:
                    5c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:56:00:D4:76:B8:F7:93:28:83:54:AC:55:75:44:6D:5B:BE:24:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/af4a70ed-4978-37ac-9bc6-a3c7bea2416b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl

            X509v3 Authority Key Identifier:
                keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.233.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:c0:cc:ed:62:69:b0:31:b3:1c:44:00:ed:87:f0:76:89:df:
         51:74:33:63:48:45:ba:79:67:46:d5:5b:61:63:47:41:2c:a0:
         08:11:18:13:94:39:da:f7:60:e9:fa:0a:c0:ca:7b:77:c1:1e:
         3f:ca:4f:e5:d8:53:42:bd:9f:42:77:9f:2f:a1:a7:6e:70:d4:
         70:e1:8a:06:03:47:ad:f5:57:44:f2:0f:e9:5d:43:1c:76:41:
         d6:c1:5a:55:79:91:f1:e6:6e:af:8e:09:90:00:39:9e:12:6f:
         c3:23:02:55:02:d4:56:3d:00:74:50:7d:88:78:db:70:48:64:
         4f:4b:77:05:9c:32:92:00:0f:7f:4c:87:da:df:ee:c4:48:4e:
         30:a5:77:55:f3:cb:ea:17:a2:8f:ac:19:bd:5e:95:e7:a3:ac:
         4b:b0:d6:b9:4e:4c:2a:fd:de:81:a6:82:e5:8b:c7:8e:24:bb:
         77:b9:6c:60:b7:84:73:58:53:04:ad:73:75:d8:92:77:6c:03:
         5e:e1:05:94:5e:55:05:47:52:bf:e5:4d:78:35:1d:75:4a:18:
         f5:38:e0:25:e0:12:a2:86:18:36:e8:16:36:7a:a3:00:27:fb:
         79:96:08:ca:11:0f:1a:fa:47:af:7b:ce:f6:23:36:17:0d:d0:
         74:e5:4a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:41 2025 by rpki-client on console.sobornost.net