Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/ab987732-ac4f-3665-9f2b-faa0922171b9.roa
File:                     ab987732-ac4f-3665-9f2b-faa0922171b9.roa (raw, json)
Hash identifier:          8clD4Fauj+hgO07cuFVM1kPGsarNHrUj9wIkqVYkLg0=
Subject key identifier:   3C:9F:D8:EC:F7:41:52:0B:91:99:07:98:C0:5E:64:87:9B:CB:E4:44
Certificate issuer:       /CN=209f0328-0af3-4de3-a043-8072346acdf7
Certificate serial:       010D0C9F43285848EF6131F8D672D0762B1DD000
Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/ab987732-ac4f-3665-9f2b-faa0922171b9.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     7782
IP address blocks:        216.67.0.0/17 maxlen: 17

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:31:f8:d6:72:d0:76:2b:1d:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=b544601a-0f51-45d0-b292-eba2e303d5dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7a:fd:90:38:ed:db:86:85:72:16:01:6e:64:
                    33:90:99:28:60:75:17:36:fb:6d:93:44:de:c5:98:
                    ef:f7:d0:f1:3d:f1:fd:ee:1f:dd:d0:1a:74:ee:8d:
                    f1:de:2e:b1:24:37:d2:1e:09:e1:85:79:47:e9:6e:
                    25:15:4d:88:ea:d8:2c:dd:20:b7:be:cb:c9:2e:00:
                    f3:0a:9c:96:fe:44:42:ee:da:8d:85:78:2f:15:cd:
                    16:e0:f7:0a:a2:01:c1:de:91:63:0a:68:59:18:60:
                    f4:2d:03:c6:fe:52:5e:04:76:69:9a:4a:3e:56:0a:
                    cc:e5:81:a5:3d:ea:ad:9e:06:ec:f0:35:d2:2e:80:
                    19:82:c0:f9:8a:37:c5:72:ae:b9:c8:1e:4e:ac:db:
                    33:f9:73:b3:b2:e9:82:53:84:2b:62:cd:f1:7f:b5:
                    ef:7a:37:58:0e:0d:31:15:99:54:b2:a6:41:45:d5:
                    dc:d5:45:39:55:36:61:dc:13:ae:03:a2:91:09:45:
                    ac:9b:61:4e:4d:14:96:eb:64:66:ac:cf:30:30:27:
                    3e:8e:14:a0:a0:2f:ad:76:60:98:57:5c:06:b0:e2:
                    c7:db:b0:40:8c:24:41:19:50:0e:8d:5f:f1:b5:d5:
                    86:86:01:74:b9:db:5c:33:52:f0:d4:ea:ca:c5:cc:
                    51:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:9F:D8:EC:F7:41:52:0B:91:99:07:98:C0:5E:64:87:9B:CB:E4:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/ab987732-ac4f-3665-9f2b-faa0922171b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl

            X509v3 Authority Key Identifier:
                keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.67.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:5a:05:22:93:fd:6f:44:15:cd:f9:e2:bd:57:57:c9:fa:16:
         fa:f4:aa:97:d8:10:c4:cc:87:04:e7:78:d0:1f:7e:29:99:bc:
         fb:5b:b7:59:e9:79:24:3a:1c:86:2e:37:bd:bb:41:2a:82:80:
         54:22:eb:c8:eb:67:9a:38:c0:05:63:cf:fc:03:38:b1:91:87:
         f1:c3:bb:86:7b:0c:b5:7e:5d:db:73:78:eb:97:84:64:4c:37:
         d1:0e:25:8f:b3:fc:e6:cc:b2:00:1d:7b:6f:88:29:7c:23:b4:
         9b:32:cd:91:1f:20:fa:ff:fa:13:65:eb:61:d7:36:68:65:b5:
         68:4a:d2:47:22:88:25:39:05:42:21:e8:0d:e4:a1:d2:ee:d6:
         8c:ba:92:b4:2e:77:04:5a:43:8b:b9:65:69:cc:bf:94:1a:56:
         9f:f0:e8:ba:f9:00:19:24:bd:a5:83:7e:91:00:12:15:2b:df:
         24:54:9d:a9:7e:6a:6c:f5:8d:ce:7b:d5:3d:be:42:3c:61:66:
         9c:78:e6:9e:83:68:7f:cb:7a:8c:e5:12:21:c4:87:62:fd:99:
         bf:85:a9:10:d7:c9:f9:ee:b5:f1:86:07:2e:29:56:dc:47:ea:
         cc:0f:1d:0e:74:fa:87:69:a2:7d:d4:af:38:77:08:c2:06:22:
         7a:de:7d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:45 2025 by rpki-client on console.sobornost.net