Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6efff8e0-8194-37d2-a6b4-cf22c1297bd4.roa
File:                     6efff8e0-8194-37d2-a6b4-cf22c1297bd4.roa (raw, json)
Hash identifier:          Nll+rAvgiFwCzgFtlCIBuEpJVE0I4I1svH48oJUNGnA=
Subject key identifier:   58:7F:C9:AE:7F:AD:37:AA:2D:EB:F4:0E:2E:46:E0:78:9F:C1:4B:2A
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584968B4295F43FE20D402DE17F9
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6efff8e0-8194-37d2-a6b4-cf22c1297bd4.roa
Signing time:             Fri 04 Apr 2025 01:00:47 +0000
ROA not before:           Fri 04 Apr 2025 01:00:47 +0000
ROA not after:            Thu 03 Jul 2025 01:00:47 +0000
asID:                     27338
IP address blocks:        74.8.54.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:68:b4:29:5f:43:fe:20:d4:02:de:17:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr  4 01:00:47 2025 GMT
            Not After : Jul  3 01:00:47 2025 GMT
        Subject: CN=ff61b46c-ea1e-4278-8025-48e8e99c5d31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:50:55:7d:ac:90:8d:a0:02:7c:09:d1:81:03:
                    9b:49:68:2d:fb:aa:d4:d4:55:cb:2d:4b:c6:ba:c5:
                    02:81:7c:e6:13:ba:46:91:7f:6a:03:d3:49:1e:48:
                    94:a8:d3:ba:87:72:8d:60:70:77:47:5d:a1:04:4d:
                    a7:5f:59:e0:95:4a:fd:e7:0f:c1:28:ea:0c:5b:df:
                    aa:86:33:d4:e1:be:17:dc:1a:18:0d:04:a3:21:80:
                    91:32:03:1b:82:6b:df:cd:a1:c2:88:c7:a4:2f:c1:
                    77:f0:54:85:ba:7a:b4:0f:2b:c9:5d:5c:a0:9f:30:
                    19:42:c2:e7:38:4f:7f:10:eb:35:52:47:0b:7b:68:
                    34:d6:e5:58:af:2e:c0:27:44:60:3f:ef:3e:7c:fe:
                    94:82:a7:45:f7:29:e5:d0:a5:16:56:ab:77:6a:33:
                    3d:df:e7:03:67:25:95:20:66:1f:a6:da:d3:f6:66:
                    bc:0e:aa:e5:97:c8:fe:07:c4:13:49:46:c8:14:30:
                    65:ae:2e:e0:97:17:fe:19:c8:cc:26:02:c2:33:85:
                    cc:88:c8:37:68:e3:50:bf:41:25:29:19:94:5a:8f:
                    ea:f8:57:cc:48:f0:37:b9:4c:0c:43:98:6d:59:ae:
                    18:18:c2:ab:57:43:3c:b0:cf:5a:37:91:68:9a:cd:
                    56:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7F:C9:AE:7F:AD:37:AA:2D:EB:F4:0E:2E:46:E0:78:9F:C1:4B:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6efff8e0-8194-37d2-a6b4-cf22c1297bd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.8.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:1c:11:64:7a:dc:47:78:6e:83:1c:0d:6c:5c:74:ae:24:db:
         3b:6e:c3:f7:7f:db:93:a1:77:f0:a8:9a:da:25:55:24:8f:66:
         43:57:5e:5f:f3:7b:0f:aa:e7:f2:25:70:3b:62:b3:ad:2a:47:
         15:e8:a6:f9:2c:ff:a5:7f:ad:f1:0f:1f:5c:a5:35:84:ef:82:
         4a:68:49:d0:07:29:91:1b:c5:0b:a4:7e:9d:01:19:e0:13:4c:
         09:3a:81:35:b5:89:f8:ae:7f:c5:75:fc:86:20:6b:ac:65:0d:
         51:7b:87:03:a8:5d:06:cb:a8:ca:51:a4:12:62:a7:a8:e7:1a:
         60:d5:0e:96:b3:b4:51:43:9c:6d:01:24:bb:41:f6:4e:6f:8a:
         62:02:72:c1:80:f3:7a:66:51:cd:f4:e9:61:b8:70:8a:5b:c0:
         70:44:a1:9e:5f:31:d2:2d:04:22:36:b6:6d:ec:ea:d7:1b:fc:
         71:af:85:2e:fe:e8:32:77:fd:e4:1c:db:d9:14:4f:aa:42:b2:
         da:ee:ac:11:bf:33:e9:1a:f5:d4:52:a0:dd:d2:67:74:29:d9:
         c5:60:3f:a6:b9:b3:b6:ce:a3:97:85:83:01:05:b3:d6:e2:46:
         2a:f8:ba:73:d4:17:79:9d:79:1f:db:61:9d:20:57:6d:68:22:
         48:6b:02:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:06 2025 by rpki-client on console.sobornost.net