Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f0b8e0ae-71c5-3d4c-9613-ebb9f9a1dc0b.roa
File:                     f0b8e0ae-71c5-3d4c-9613-ebb9f9a1dc0b.roa (raw, json)
Hash identifier:          x1WC3r/NWdc0MNlSRMMHNGlAX1eGccf2VD+wF0Pp56A=
Subject key identifier:   12:B4:4E:8C:41:92:F0:33:83:92:CC:43:AA:10:12:03:08:B5:2F:5C
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584975446E255AE121E4CF971800
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f0b8e0ae-71c5-3d4c-9613-ebb9f9a1dc0b.roa
Signing time:             Tue 08 Apr 2025 13:00:59 +0000
ROA not before:           Tue 08 Apr 2025 13:00:59 +0000
ROA not after:            Mon 07 Jul 2025 13:00:59 +0000
asID:                     396550
IP address blocks:        2620:74:2c::31/128 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:44:6e:25:5a:e1:21:e4:cf:97:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr  8 13:00:59 2025 GMT
            Not After : Jul  7 13:00:59 2025 GMT
        Subject: CN=a6970a73-c317-4d1d-bc2d-171b09762c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a9:87:01:36:c4:b8:c7:ad:48:62:2b:37:f5:
                    cc:f1:43:cb:2c:4e:d8:d8:74:17:6a:4a:b7:5e:b6:
                    6a:53:65:29:73:0c:68:b4:b8:4c:65:14:bd:3f:a2:
                    e1:80:ee:91:b1:eb:26:b8:0d:66:26:87:1c:83:5c:
                    ee:27:6f:81:93:9a:03:3b:0a:a2:a9:cf:e4:77:85:
                    bc:af:08:3d:5b:5d:b0:8a:ce:96:b0:57:c4:a7:9a:
                    38:f3:ff:e1:86:e4:e6:6a:c2:f1:4b:bd:58:d2:c5:
                    36:cf:83:81:b3:2a:86:80:88:40:39:d2:41:24:4d:
                    0e:d5:81:8c:e3:d0:ec:b7:7e:5f:3b:16:15:7a:ce:
                    0f:cc:16:bc:53:c5:cf:3b:ab:69:90:83:78:69:6b:
                    50:b1:12:3f:d5:75:89:cc:ad:7b:96:eb:86:d9:07:
                    01:ae:b5:bc:90:ca:fb:e1:08:69:52:ce:f0:45:5e:
                    50:e1:29:8d:39:4b:ce:ac:51:61:ab:b5:72:23:dd:
                    29:2d:57:d6:3a:06:cc:a4:10:11:c9:74:1c:bf:c5:
                    ed:4b:d1:d1:a0:ee:48:59:d0:ab:99:f9:35:c0:7c:
                    4a:93:9e:68:7a:10:c1:20:a6:c8:24:6a:ca:2a:81:
                    81:fe:75:27:86:b6:b6:aa:43:24:33:55:a4:14:6f:
                    3b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B4:4E:8C:41:92:F0:33:83:92:CC:43:AA:10:12:03:08:B5:2F:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f0b8e0ae-71c5-3d4c-9613-ebb9f9a1dc0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:55:cc:10:fa:41:00:98:09:e3:99:77:00:53:4b:3d:cf:48:
         fc:35:f9:16:e7:c9:a4:1e:52:f7:e4:3e:a0:45:e5:5e:c9:25:
         8e:02:59:43:f4:c0:b9:8d:a8:95:ce:fd:2c:5a:48:b4:d4:fd:
         4f:c1:e8:e9:b9:a4:ae:d0:74:11:a0:70:48:fb:5a:21:a5:cb:
         8a:72:ef:f6:7c:91:8c:15:a5:02:d0:a4:e6:38:14:73:eb:65:
         38:06:79:38:21:e8:eb:e3:42:12:f7:54:3a:5e:a7:61:ec:ae:
         c2:a0:ff:e7:5e:c7:d4:cb:7f:aa:9d:fc:e4:26:99:4d:91:cc:
         54:ec:4d:c1:39:fc:15:d7:c0:77:a5:b3:3d:d5:d7:af:57:14:
         c1:14:a6:2d:20:26:fb:a4:0c:dd:59:80:22:31:e6:26:dc:6c:
         2f:40:79:f4:57:78:bd:9a:34:ff:de:c3:11:e4:ec:68:5b:fb:
         c8:02:4e:2f:5f:21:aa:4e:90:69:76:7a:98:ed:9f:4e:7c:c6:
         70:5b:08:bc:1c:34:7a:64:86:31:ca:1f:62:73:dc:0b:07:0e:
         09:76:43:ad:07:67:f0:fc:f1:2b:80:68:6d:b3:61:17:4c:2b:
         83:c4:18:8d:d6:1f:e6:14:08:ef:fa:a8:35:59:ec:ec:aa:8b:
         ec:c4:9e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:27 2025 by rpki-client on console.sobornost.net