Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/220ccf3d-2654-3403-b159-c3eb9d6ca51c.roa
File:                     220ccf3d-2654-3403-b159-c3eb9d6ca51c.roa (raw, json)
Hash identifier:          7/sYKqR8P0tyyg8wUs2Q6MNm6r3anvmNOT0HPZQftds=
Subject key identifier:   6A:69:8D:72:2E:F0:2D:85:A1:47:BE:6D:2D:08:8C:40:84:51:B5:BB
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584975446B7D047D982F698BD100
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/220ccf3d-2654-3403-b159-c3eb9d6ca51c.roa
Signing time:             Tue 08 Apr 2025 13:00:59 +0000
ROA not before:           Tue 08 Apr 2025 13:00:59 +0000
ROA not after:            Mon 07 Jul 2025 13:00:59 +0000
asID:                     396566
IP address blocks:        2620:74:2c::31/128 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:44:6b:7d:04:7d:98:2f:69:8b:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr  8 13:00:59 2025 GMT
            Not After : Jul  7 13:00:59 2025 GMT
        Subject: CN=a3bc4422-f444-4ffb-9e13-ba4b08520dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1d:f7:95:9d:ac:99:c7:bc:ab:41:18:f6:73:
                    66:fb:81:45:34:d7:6e:fd:f5:7c:c6:94:f3:5f:af:
                    d6:6a:11:a6:d7:79:7f:fb:3a:b9:19:e0:21:11:ad:
                    d9:94:cc:75:72:f3:e8:80:c3:65:57:12:4a:03:69:
                    bd:40:2d:25:31:bd:ba:88:d2:c2:05:6d:3f:ef:51:
                    3e:ce:76:d4:71:01:66:7b:24:3f:d3:d6:08:60:64:
                    84:88:7d:eb:15:ce:58:a8:26:a4:35:78:63:50:02:
                    b8:2e:c1:81:4a:40:b1:40:d3:14:9f:97:01:c4:69:
                    5e:78:08:a5:68:b6:e0:2f:32:f8:bc:a0:b5:d8:88:
                    b9:48:0a:38:90:44:41:8b:27:d7:82:f9:51:5a:e5:
                    6a:9d:4b:ee:c3:7d:31:f4:f8:96:b0:85:dc:42:14:
                    df:9e:f9:a6:08:84:f7:a1:11:e4:cc:9c:fd:76:d9:
                    7c:67:f8:7f:c3:34:2f:b7:21:80:15:51:f0:88:c9:
                    43:54:d7:49:a0:88:17:7a:bb:6f:c5:ef:9b:87:c1:
                    b4:39:df:ce:5e:fc:17:9f:d0:a4:25:99:9a:ec:88:
                    b5:43:1f:0f:b2:67:ed:49:ad:a5:ae:0a:e2:86:c1:
                    79:cf:12:27:66:3c:d9:fd:df:b5:22:85:c0:7f:75:
                    b4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:69:8D:72:2E:F0:2D:85:A1:47:BE:6D:2D:08:8C:40:84:51:B5:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/220ccf3d-2654-3403-b159-c3eb9d6ca51c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:8c:f4:f5:69:db:0f:54:b2:71:b5:6b:8d:98:8e:81:ee:29:
         9e:47:95:89:43:af:fe:cf:ee:35:0d:d4:0b:84:dd:21:90:09:
         19:66:1c:10:d3:11:66:c5:8c:74:c4:53:59:ea:48:3d:24:57:
         ed:4b:e8:5e:84:83:8b:d7:4f:8b:34:29:ad:f5:b3:c0:2f:ad:
         eb:5f:9a:62:fe:8a:5b:db:59:52:fb:99:1b:b9:5c:3b:ed:d8:
         5e:88:0d:42:b7:ae:bf:d7:42:ad:2f:7f:db:cd:10:4e:b0:cf:
         98:64:40:b8:6b:1c:5f:d4:0b:a3:34:e6:96:fe:78:db:a9:13:
         11:6c:a9:83:90:d8:85:f2:d9:1b:ea:17:4a:5a:d9:c5:6d:05:
         51:5e:de:3c:8a:db:32:95:aa:55:8a:9e:83:7a:89:6f:14:ed:
         7a:d2:98:ac:24:17:35:97:ab:46:39:12:cb:a3:f6:3d:da:f1:
         83:13:7e:f2:27:77:8a:ff:6a:3f:27:cc:d7:77:89:b3:8f:cf:
         36:2d:71:ab:10:d0:60:f6:96:6b:fb:56:b7:dc:f7:ad:cb:3b:
         aa:b2:bc:bb:3c:c1:fe:42:77:c1:52:69:cc:03:87:ef:ad:6c:
         4b:2b:cc:6b:1a:4b:bc:68:b0:87:5b:dc:c9:ff:79:59:f5:f1:
         13:66:04:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:15 2025 by rpki-client on console.sobornost.net