Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/753ef9d2-7b48-3420-b969-0bd53dd948ec.roa
File:                     753ef9d2-7b48-3420-b969-0bd53dd948ec.roa (raw, json)
Hash identifier:          TvjnOAcZ2FYpK/IrMfJK/NuEMPxECJOnwiGt0k8WSXM=
Subject key identifier:   A3:20:FA:59:B7:D8:1A:FA:49:D9:33:FB:26:83:DC:6C:05:FF:5D:43
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584961B9A8C6CDC6F7C34864AD00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/753ef9d2-7b48-3420-b969-0bd53dd948ec.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     397196
IP address blocks:        2620:74:2c::30/128 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:a8:c6:cd:c6:f7:c3:48:64:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=be15b400-8727-4a38-b1fa-dd84e0fee2a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:12:19:28:9f:fa:d5:04:bc:bd:36:7b:a8:54:
                    23:1b:91:99:d1:3d:bd:0c:6f:2f:4d:00:e0:cd:dd:
                    17:1e:9f:93:55:48:e6:37:21:78:e2:9d:d1:51:10:
                    e6:2f:ea:21:47:c3:b2:5a:00:e7:32:0e:45:d0:3d:
                    55:4f:a5:73:8c:03:18:af:a1:37:30:78:93:70:d9:
                    7e:1e:32:be:de:ea:0d:50:36:72:20:11:63:a1:8d:
                    4e:b2:bd:72:c3:ee:9f:fa:9b:34:46:f7:33:a0:c9:
                    54:f4:44:cf:26:79:4f:15:00:3f:88:7a:4f:bc:ee:
                    dc:71:b7:fe:b6:ce:49:60:16:c2:a1:6f:23:f8:98:
                    77:75:09:38:3d:e0:d0:af:07:df:82:99:ac:80:8a:
                    56:c9:b0:ad:dc:67:5a:69:58:5c:d5:29:cd:3e:6d:
                    a4:24:ff:7d:b6:d0:a8:15:3a:cf:e5:5b:38:6d:01:
                    bf:85:44:2a:8d:8b:87:8a:62:93:5e:81:ef:50:e9:
                    31:ee:1e:8f:d5:5b:52:72:43:bc:ba:54:b2:ef:9a:
                    a8:3b:a5:b0:ef:7b:e7:ab:81:aa:72:51:a7:ff:75:
                    6e:80:08:d4:44:75:cc:46:aa:2b:57:d8:5a:6d:f5:
                    a2:e5:18:b7:27:80:10:05:d6:06:ee:ab:67:63:d9:
                    05:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:20:FA:59:B7:D8:1A:FA:49:D9:33:FB:26:83:DC:6C:05:FF:5D:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/753ef9d2-7b48-3420-b969-0bd53dd948ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:46:4a:df:47:83:67:e3:b3:c0:fd:b6:70:52:18:76:44:78:
         26:ed:d3:ec:72:00:40:f8:d9:e0:21:ea:36:4e:62:15:7d:77:
         71:25:3e:fe:0c:39:aa:a2:ef:1b:df:2b:67:03:b7:f9:80:f3:
         33:41:bc:2e:95:3b:d7:b3:64:50:97:3e:88:f1:60:84:85:f8:
         97:81:de:f6:23:98:60:2b:08:48:25:66:51:5c:69:d6:bf:1f:
         14:00:6c:d0:55:76:9f:8c:17:a8:a7:8d:8a:95:53:e6:b2:9b:
         e7:72:62:c6:77:47:cf:d8:7f:a7:9b:6a:5e:42:bc:3a:cf:35:
         2c:b2:74:9c:7c:e7:9e:68:b9:d4:b4:7d:17:90:ad:97:e9:be:
         ed:2b:4c:cd:a0:82:d7:a4:92:1a:d1:a1:e6:3b:84:7e:71:f2:
         cc:da:ae:ab:79:72:6a:ee:f7:a7:b8:1c:1f:5e:e8:a2:5b:6e:
         ea:a9:57:a1:48:5e:d5:78:24:1a:08:b3:01:de:9f:2c:ce:5d:
         f4:82:78:4c:a4:d8:17:51:cd:20:5a:05:b0:b4:a4:53:39:31:
         12:d0:58:b4:12:6e:51:b7:60:05:e5:0e:c2:4a:34:cc:d0:ec:
         0a:53:77:90:68:c8:62:97:b4:98:bc:80:bb:0e:d8:00:19:c3:
         8d:85:5f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:17 2025 by rpki-client on console.sobornost.net