Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cfded054-1811-38b0-8f95-949d444242c5.roa
File:                     cfded054-1811-38b0-8f95-949d444242c5.roa (raw, json)
Hash identifier:          rxhA1oPn/YzV9wuiXMv1scr74O0NJ5IrGPZbOGz51AI=
Subject key identifier:   6C:CC:AE:FC:A0:8F:36:12:7F:EC:83:87:F2:41:E3:C3:0D:21:77:46
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584961B9A758DBFA5BB73E7D4F00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cfded054-1811-38b0-8f95-949d444242c5.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     396551
IP address blocks:        2620:74:2c::30/128 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:a7:58:db:fa:5b:b7:3e:7d:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=bba14caa-1948-4bbf-887f-0763de79d975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4a:40:21:fa:da:ca:0c:c8:b5:fc:dc:ad:80:
                    cf:d7:6f:87:98:1b:6c:e6:b1:63:e7:2a:1c:8c:7f:
                    e9:24:32:ad:d6:5e:46:57:d2:de:8f:65:63:cb:fb:
                    86:6e:c9:ca:43:bb:27:de:cf:b8:56:b4:6f:c1:8f:
                    83:4e:20:3a:0c:96:77:39:bb:d6:3c:e1:b9:82:61:
                    69:b7:92:bb:6f:2b:95:90:64:c3:90:31:53:2b:22:
                    7d:11:0f:75:e6:9a:9b:c9:49:58:71:6d:60:70:cc:
                    66:b7:ce:34:75:77:85:14:77:c5:df:19:d9:4e:3f:
                    5d:88:4f:f2:20:71:46:67:17:4d:34:4f:5c:e4:f6:
                    24:b6:be:04:de:5a:56:9f:b2:9d:ad:43:44:78:4f:
                    b4:16:71:34:ae:f6:87:32:f8:88:f8:0f:6f:90:a4:
                    98:2d:b4:ea:58:f9:46:40:ef:d7:b8:f0:9b:2f:0c:
                    84:75:66:4b:bf:84:7d:ae:69:6c:34:b8:54:4d:29:
                    37:13:0e:e8:26:b6:a8:96:eb:93:f4:0c:8b:f5:81:
                    bb:60:02:27:53:bf:7b:d6:77:7b:b6:f1:42:1e:da:
                    7c:13:4a:27:1a:ce:6c:94:71:8a:22:6a:a9:4b:e0:
                    4f:66:75:28:1e:6a:b7:3c:cc:66:74:97:3e:13:b7:
                    bd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:CC:AE:FC:A0:8F:36:12:7F:EC:83:87:F2:41:E3:C3:0D:21:77:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cfded054-1811-38b0-8f95-949d444242c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:8d:63:a7:5f:9a:29:35:1b:bc:1b:00:8c:e2:88:cc:b5:9c:
         33:50:55:bf:37:7e:b3:fd:d5:4f:15:67:18:a0:ba:5d:b4:fa:
         56:52:89:80:21:31:a3:56:0c:b4:5f:a0:02:3b:81:88:b1:46:
         4f:30:e0:f0:46:05:af:a3:00:67:d8:67:3a:a1:41:51:78:a6:
         d5:0b:5b:13:6d:93:61:ce:37:7a:9a:8f:3f:bb:07:32:fc:45:
         66:7f:70:f4:45:00:85:ff:b1:48:42:d7:3f:d6:81:89:a2:c8:
         9a:8c:53:35:98:e6:a5:a9:ac:fe:af:0e:a5:97:2d:5f:b0:4b:
         b0:a3:ec:80:ec:50:c7:8d:d3:23:5c:75:ed:9e:93:68:e4:e5:
         de:e9:9c:46:db:37:c3:e5:ba:b2:a1:78:06:11:8e:70:5d:63:
         dd:15:62:9c:dd:25:dd:5d:52:97:c4:4e:89:00:ab:00:e0:49:
         8d:04:06:36:fb:ae:3c:d9:29:1e:52:f1:a0:69:32:d5:b9:40:
         44:d9:f3:83:ad:2f:b5:c9:21:97:7e:f5:76:c2:87:77:99:cc:
         cd:d7:5d:54:67:90:fc:a6:9a:3b:77:48:2a:50:b1:29:05:f7:
         bc:05:f6:65:c8:47:00:e5:db:95:b9:7c:8d:64:ca:e0:85:d0:
         8e:9f:2d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:27 2025 by rpki-client on console.sobornost.net