Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9c9bdb34-0577-3221-9f3c-057721ca61ec.roa
File:                     9c9bdb34-0577-3221-9f3c-057721ca61ec.roa (raw, json)
Hash identifier:          Vca9ENYelXsbMsQpcgDVBBICiMiOBO3V8qQpu3wvpZk=
Subject key identifier:   0C:5D:2F:08:B5:7D:D1:1A:A8:3D:CE:F5:78:00:D8:42:F8:5F:47:CD
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584961B9AA223FBBED01E5B43760
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9c9bdb34-0577-3221-9f3c-057721ca61ec.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     397193
IP address blocks:        2620:74:2c::30/128 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:aa:22:3f:bb:ed:01:e5:b4:37:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=be25dadd-975b-4411-a1d8-9db91893d70b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2b:b1:8c:7c:58:01:2f:28:84:1b:2a:dc:8b:
                    bb:09:e4:b4:2d:5c:e8:ea:83:ba:5c:fb:e3:f3:3d:
                    7a:3f:b4:26:77:3a:10:8e:a2:b0:05:ea:fc:ad:9d:
                    04:c4:7a:25:da:e3:46:db:e1:05:b7:b9:ab:e8:60:
                    96:a6:84:49:37:f7:f8:c5:20:77:71:d5:2a:73:ee:
                    9b:af:79:ae:21:01:42:4e:89:49:ee:dc:3c:90:5f:
                    eb:ad:d8:81:c1:80:45:c5:24:c4:46:3e:84:60:fe:
                    e8:50:a3:e7:b1:02:f3:9f:e6:2c:77:1f:8b:31:7f:
                    96:d4:af:46:73:80:9f:75:1e:51:22:a6:0c:3f:7c:
                    fb:16:46:59:bd:53:fd:bd:0e:86:8e:88:ad:fc:86:
                    2e:bd:e7:5b:6f:bb:bd:a4:50:9c:f1:05:a8:3a:65:
                    e5:7b:59:12:d4:cd:a8:f5:34:75:9b:1c:79:cf:d0:
                    b8:4d:c2:97:78:af:7f:b3:67:12:47:cf:07:f2:44:
                    76:d3:4a:62:82:32:29:1c:e9:a7:c3:23:34:ea:f4:
                    24:62:ab:69:a5:0d:e8:27:bc:c8:5d:f0:bb:98:a1:
                    b4:1e:51:d0:87:f4:01:69:23:17:5c:c4:cf:17:5a:
                    a9:c1:e5:f0:e1:d9:2e:c6:91:bc:d2:3e:f5:c9:36:
                    3d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5D:2F:08:B5:7D:D1:1A:A8:3D:CE:F5:78:00:D8:42:F8:5F:47:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9c9bdb34-0577-3221-9f3c-057721ca61ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:31:9f:23:b1:a3:16:6e:82:1c:95:90:9d:5d:0f:87:3b:2b:
         be:1f:8c:d5:45:96:fa:78:5a:e0:06:63:e9:6b:d3:5e:95:86:
         0e:18:12:b5:fb:11:42:64:2f:92:6e:6c:d7:8a:ba:5d:cc:f8:
         cd:5a:c4:6c:62:41:92:97:c3:c2:d5:1d:8f:92:3c:79:a1:26:
         ac:74:00:6f:14:fc:c4:55:44:db:95:f4:9e:11:90:57:0c:ef:
         9d:e2:44:bb:98:9d:91:f6:e5:3b:8a:12:60:7d:48:d5:de:5d:
         0d:23:e5:e3:77:3e:55:b7:4a:77:cf:94:95:eb:f9:d1:14:af:
         a9:99:2e:c7:62:b4:eb:f4:b7:50:c1:df:f1:93:f7:9a:da:0c:
         f4:62:07:bd:cf:69:2a:38:da:32:ce:c5:5f:02:1f:83:04:0e:
         42:75:fc:73:dc:e7:8c:df:40:be:c1:50:dd:e0:77:91:4d:87:
         6b:1f:66:2f:1c:b6:ad:31:ae:55:41:91:57:22:82:2e:6c:5c:
         4b:99:de:26:5e:69:64:39:78:f9:7b:30:1a:6e:35:44:34:4a:
         6a:1a:06:13:7d:ee:fd:c1:73:b7:82:dc:2d:2a:31:05:1a:ae:
         23:8e:63:45:2c:5a:f1:d9:64:42:42:6c:3a:48:eb:0d:4b:f5:
         03:63:1c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:18 2025 by rpki-client on console.sobornost.net