Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6b1f34f-6840-33fd-9851-993006adcc44.roa
File:                     a6b1f34f-6840-33fd-9851-993006adcc44.roa (raw, json)
Hash identifier:          j8QRBILHfPtdtDLjlQmXkZfig9YCk31yR/QAqd7xa8k=
Subject key identifier:   E3:26:07:46:16:6B:E3:B4:8B:B8:E2:28:8C:5F:85:7C:65:2E:E8:AD
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584961B9A6D1DCDDA2E953CDBFB0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6b1f34f-6840-33fd-9851-993006adcc44.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     396558
IP address blocks:        2620:74:2c::30/128 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:a6:d1:dc:dd:a2:e9:53:cd:bf:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=ac0495ed-c883-49d2-b326-45854c3dfa50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f5:6b:8d:6a:cd:d5:04:70:6b:47:04:d6:ef:
                    f7:3e:c6:34:68:70:8f:d2:98:f4:27:d0:64:c7:b7:
                    1d:dd:a8:3d:04:d8:7e:04:7d:23:01:33:61:52:7e:
                    73:c7:2a:e4:97:d2:17:c7:24:4a:bf:1f:70:67:b9:
                    21:2f:56:cf:38:f3:5e:f6:f6:55:f2:1d:6c:20:71:
                    82:8c:08:22:65:dc:14:bf:96:05:e3:db:ea:46:0e:
                    7a:0e:ce:ad:c6:cd:2b:41:43:11:ee:8f:dd:f2:34:
                    39:ec:df:4a:ec:6c:28:8d:01:12:af:9f:4d:7c:5f:
                    53:c9:34:03:c8:a5:4a:88:9d:ed:63:57:5d:d6:00:
                    00:f1:95:82:d5:bc:5e:75:6c:b7:97:0e:8d:38:65:
                    8d:c1:08:22:f2:50:d0:dc:d8:b8:77:0b:ac:0b:80:
                    42:64:7f:ee:35:58:e8:cd:09:5d:ba:ce:24:bc:f3:
                    5d:3e:54:fd:0c:eb:77:b6:c3:22:e2:5b:96:ea:c2:
                    96:a7:e9:4b:87:ca:0c:37:21:a3:c7:79:95:dd:5e:
                    3c:63:6c:d0:90:d6:ae:4f:f5:38:27:52:c6:f4:97:
                    3d:47:9f:83:8d:f5:9f:02:8e:db:44:f6:38:82:eb:
                    4a:15:46:71:ff:75:42:c1:7d:bf:a3:87:77:e3:ed:
                    e4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:26:07:46:16:6B:E3:B4:8B:B8:E2:28:8C:5F:85:7C:65:2E:E8:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6b1f34f-6840-33fd-9851-993006adcc44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:02:70:af:4b:b2:21:a3:18:14:ed:83:dd:e7:69:37:64:8f:
         c8:c3:bb:88:e7:b7:12:84:af:26:fd:33:36:1c:10:3e:83:c7:
         cb:30:dc:5d:be:46:04:1c:57:f2:6c:04:d9:e1:06:07:c2:5d:
         65:0e:82:ef:61:16:af:fd:de:98:59:5f:c4:50:6c:9e:a5:eb:
         f7:82:83:6e:2d:63:59:2e:83:54:f6:87:66:66:80:4f:b1:10:
         14:5e:38:2d:59:79:42:d9:f1:69:b0:88:aa:e2:d7:1c:4f:e5:
         e9:46:77:9b:81:2c:44:0c:f3:0b:c4:54:6d:ab:b5:f3:00:5d:
         b6:25:d7:73:6c:6b:b4:43:d0:d0:17:91:d1:33:0d:f0:d8:a6:
         de:d7:e7:31:a3:b5:e9:08:62:4b:e4:05:fa:59:11:93:81:33:
         c1:c7:11:e8:4a:8f:0e:7b:4f:58:4f:85:4e:00:53:e5:69:60:
         fa:cf:97:16:67:29:f8:93:f0:67:e2:89:d3:46:b9:02:9d:53:
         5e:81:53:b6:55:b4:e3:41:bf:9d:08:b9:ee:49:10:60:ff:65:
         fc:13:03:56:02:83:be:b3:de:88:52:e3:41:f9:60:8d:45:4a:
         d7:a9:7a:6d:8b:48:0d:c2:d8:a5:bc:21:15:30:8c:1b:ba:99:
         97:8e:17:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:19 2025 by rpki-client on console.sobornost.net