Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/88c44af4-f264-3f2d-9cdf-49b94251ba1e.roa
File:                     88c44af4-f264-3f2d-9cdf-49b94251ba1e.roa (raw, json)
Hash identifier:          hyvssBWxcDzkhcw1QM0eIf6R2zwllqRUsK0CjGUbhQ4=
Subject key identifier:   94:D7:3D:08:24:F0:55:4D:D5:6A:A1:45:32:6B:78:B9:8C:4A:AE:A3
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584961B9A9BF16ADA90217038B80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/88c44af4-f264-3f2d-9cdf-49b94251ba1e.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     20431
IP address blocks:        2620:74:2c::30/128 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:a9:bf:16:ad:a9:02:17:03:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=b688f706-49c5-4adf-ae99-ef5ced5ddc84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ec:db:21:96:66:e8:75:79:ce:5c:b2:11:dc:
                    26:30:2c:79:32:e2:a0:bb:94:3c:c6:b5:f6:f7:44:
                    40:53:0a:ce:36:63:45:dd:f2:04:a7:dd:68:7b:9a:
                    99:96:a2:03:b6:c6:c7:0d:5b:01:4a:4d:84:1c:d0:
                    e7:4b:38:68:9d:51:1e:b9:87:d5:2d:a2:71:85:27:
                    bd:41:0d:1f:98:f8:16:4a:be:ea:10:a4:26:6d:77:
                    1d:e6:19:0d:be:33:b5:fd:62:8f:14:79:6a:6c:ce:
                    84:56:42:34:2f:07:7d:dc:e5:66:b6:9f:cd:7c:01:
                    7e:01:d7:76:75:58:60:f9:e6:c0:12:35:74:75:e7:
                    d4:31:52:dc:f8:4e:33:8b:72:e1:a3:28:9d:cb:12:
                    59:fd:45:10:eb:e3:9a:96:df:d8:32:f4:97:b7:71:
                    d5:00:ad:9b:01:bf:61:1f:a4:df:26:01:d2:6e:4a:
                    ac:ef:4e:8f:ad:af:f6:37:4b:cf:6d:b7:1d:94:ee:
                    1e:68:9f:68:09:f5:68:6b:c1:5b:8a:88:28:9d:0d:
                    b0:db:35:2c:32:70:12:ee:6a:ab:f8:3b:b1:d6:73:
                    de:2c:9e:2b:34:13:d8:42:67:eb:08:1c:84:42:85:
                    39:6b:9c:c1:a2:89:ed:a2:d7:2b:0f:7e:73:e2:78:
                    1f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D7:3D:08:24:F0:55:4D:D5:6A:A1:45:32:6B:78:B9:8C:4A:AE:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/88c44af4-f264-3f2d-9cdf-49b94251ba1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:22:e9:47:d8:df:71:21:27:ed:09:08:3a:90:4d:e1:2d:d2:
         53:4b:bb:0d:71:4e:4d:41:a8:73:d5:55:e0:14:9f:c0:e7:fd:
         83:48:a4:bc:6d:aa:53:38:ce:32:e6:4f:5f:49:45:45:cd:3c:
         69:55:16:b7:b8:ea:28:af:d5:55:8d:09:d2:9f:1d:34:c9:3b:
         39:38:45:66:bd:47:af:83:13:21:8e:cf:fc:17:17:47:5d:57:
         df:26:0a:29:00:08:8a:05:41:7e:84:70:3d:56:60:67:7b:1f:
         95:83:7d:8f:5f:7d:d4:03:7a:63:a8:f2:57:71:ef:03:e3:45:
         e2:94:17:c7:a9:36:89:ad:81:bd:ce:e5:d7:60:13:e7:20:5f:
         3a:67:b6:eb:28:07:d5:47:b6:ea:8c:ab:88:d6:3e:a2:d5:58:
         d6:5e:8c:72:41:5c:c4:ef:4a:1c:d9:42:73:0c:db:a6:2b:ba:
         2a:eb:d6:04:f9:41:11:ad:50:f4:10:76:32:86:c8:c4:0e:21:
         72:35:70:f7:7f:e0:bc:6c:2c:02:62:84:a7:55:41:a1:02:85:
         a1:af:26:0c:48:98:14:e0:42:76:fe:da:4e:81:72:85:87:45:
         2c:19:e3:d5:2d:4e:93:eb:a4:ab:9e:4c:9f:ef:84:82:dc:50:
         39:8f:1b:48
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWElhuam/Fq2pAhcDi4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk
YjY4OGY3MDYtNDljNS00YWRmLWFlOTktZWY1Y2VkNWRkYzg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+zbIZZm6HV5zlyyEdwmMCx5MuKgu5Q8xrX2
90RAUwrONmNF3fIEp91oe5qZlqIDtsbHDVsBSk2EHNDnSzhonVEeuYfVLaJxhSe9
QQ0fmPgWSr7qEKQmbXcd5hkNvjO1/WKPFHlqbM6EVkI0Lwd93OVmtp/NfAF+Add2
dVhg+ebAEjV0defUMVLc+E4zi3LhoyidyxJZ/UUQ6+Oalt/YMvSXt3HVAK2bAb9h
H6TfJgHSbkqs706Pra/2N0vPbbcdlO4eaJ9oCfVoa8FbiogonQ2w2zUsMnAS7mqr
+Dux1nPeLJ4rNBPYQmfrCByEQoU5a5zBoontotcrD35z4ngfxwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFJTXPQgk8FVN1WqhRTJreLmMSq6jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODhjNDRhZjQtZjI2NC0z
ZjJkLTljZGYtNDliOTQyNTFiYTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBEIulH2N9xISftCQg6kE3hLdJTS7sNcU5NQahz
1VXgFJ/A5/2DSKS8bapTOM4y5k9fSUVFzTxpVRa3uOoor9VVjQnSnx00yTs5OEVm
vUevgxMhjs/8FxdHXVffJgopAAiKBUF+hHA9VmBnex+Vg32PX33UA3pjqPJXce8D
40XilBfHqTaJrYG9zuXXYBPnIF86Z7brKAfVR7bqjKuI1j6i1VjWXoxyQVzE70oc
2UJzDNumK7oq69YE+UERrVD0EHYyhsjEDiFyNXD3f+C8bCwCYoSnVUGhAoWhryYM
SJgU4EJ2/tpOgXKFh0UsGePVLU6T66Srnkyf74SC3FA5jxtI
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:18 2025 by rpki-client on console.sobornost.net