Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7a74a651-0e7a-317e-837f-7b4ae1b60400.roa
File:                     7a74a651-0e7a-317e-837f-7b4ae1b60400.roa (raw, json)
Hash identifier:          RQyxazIM1cSBczH7UFaZBonq5jLSYYCaBWgfwb0AsJA=
Subject key identifier:   6B:D9:DF:E2:69:63:FA:62:23:80:AE:8E:2A:32:F0:E3:FD:6C:B9:38
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848D21115F7051A89B71CC47320
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7a74a651-0e7a-317e-837f-7b4ae1b60400.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     396614
IP address blocks:        2620:74:2b::30/128 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:15:f7:05:1a:89:b7:1c:c4:73:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=a30b00c0-af7e-4549-acd2-27419403f806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:30:3f:0f:30:d7:13:3b:51:97:54:d0:67:6b:
                    b5:e3:88:a6:1f:73:19:e8:33:02:e9:8b:59:17:33:
                    cd:dc:c7:5b:01:2f:19:a5:98:28:48:70:06:8f:74:
                    69:81:c5:57:74:e8:4b:0d:c2:ba:f4:50:19:f7:72:
                    6f:07:34:7d:a7:f9:3a:53:56:bc:c3:85:b4:cf:16:
                    49:f7:d8:6b:e6:1f:cc:71:c4:08:b8:19:bd:26:18:
                    f1:4b:c7:45:02:8a:6b:47:e3:3f:50:b0:68:1d:f2:
                    5b:81:04:a4:56:58:da:2c:ce:e1:74:10:f3:25:5b:
                    34:1f:ae:c1:7e:56:2b:77:d4:58:d2:ca:7e:8e:d9:
                    37:d0:38:fc:a3:48:4d:66:90:93:e4:01:50:21:19:
                    35:73:34:e8:95:09:c4:e3:b0:e5:e3:a8:69:00:d7:
                    7c:93:ca:84:a8:84:a0:96:55:da:7c:8d:7b:84:42:
                    10:87:95:67:8f:91:2a:1c:ca:88:8b:4c:7a:39:0c:
                    04:34:aa:4b:fb:b0:30:a2:3b:44:18:ef:5d:a0:01:
                    68:be:f1:28:67:60:e7:1d:24:d3:28:b1:2b:2f:bd:
                    02:b7:31:30:5b:1f:ce:d2:04:a7:95:c8:d9:e8:ec:
                    56:07:2d:2b:96:5b:c2:4d:c1:43:28:f6:85:55:f6:
                    7b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D9:DF:E2:69:63:FA:62:23:80:AE:8E:2A:32:F0:E3:FD:6C:B9:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7a74a651-0e7a-317e-837f-7b4ae1b60400.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:39:4f:5d:9d:2d:00:d6:76:62:af:d0:68:44:3a:00:dc:6a:
         78:a2:f0:27:c7:8c:56:0a:54:5a:68:af:6d:da:bd:4f:1c:9e:
         a6:7c:fe:5b:dd:13:c3:2c:00:00:c8:a1:57:32:ce:46:ef:ae:
         44:61:d5:ee:4f:2d:1e:ef:20:cc:70:cf:cf:27:be:25:34:14:
         2c:0a:57:77:be:7b:9f:c1:47:49:a8:17:2f:81:ad:f2:49:e1:
         3f:09:6e:5f:4c:33:b2:6e:3b:42:7b:2f:3f:1f:98:fb:4b:76:
         fb:7c:38:e5:9a:20:90:90:fc:9c:e0:9d:15:95:81:42:56:cc:
         29:f8:d2:16:bb:79:75:6e:38:82:16:b0:57:86:97:6a:2c:95:
         17:f2:68:19:7a:63:a3:20:d6:23:cf:41:c7:73:1d:0c:b5:5d:
         51:cb:ca:a2:c1:4a:bf:3b:59:9f:e1:42:ff:01:1a:f1:76:78:
         54:2c:39:90:8d:56:55:2d:90:0a:b0:10:68:7f:73:5b:92:ea:
         b4:49:7c:ca:6d:a1:0b:e2:aa:4e:ff:01:55:f8:65:43:1f:a6:
         3d:31:17:3b:82:08:7c:12:8f:9e:40:3b:ad:a8:31:8d:f4:82:
         ec:32:d2:e0:58:28:8d:c4:43:3d:63:14:9f:41:11:c8:ba:9d:
         f8:3e:0f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:17 2025 by rpki-client on console.sobornost.net