Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc0cfba4-2ba6-317d-931e-3bb47c49738a.roa
File:                     fc0cfba4-2ba6-317d-931e-3bb47c49738a.roa (raw, json)
Hash identifier:          O+21bNdQ0jNhKN3egMyIfGhK3rAjPUwTfHr01jrFdCo=
Subject key identifier:   33:F1:F0:35:99:8B:1E:B2:E0:26:60:59:D9:8D:61:13:A5:42:6A:72
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584961B9A654208A14F707E61000
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc0cfba4-2ba6-317d-931e-3bb47c49738a.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     36619
IP address blocks:        2620:74:2c::30/128 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:a6:54:20:8a:14:f7:07:e6:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=4b2e41ea-ecf5-430f-ab1a-a7d683ba01cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ae:1a:f6:42:49:54:53:9f:16:5f:3d:88:3e:
                    eb:1a:01:a5:91:ff:1f:42:13:60:55:71:54:e8:18:
                    50:34:6e:50:1b:b0:92:83:fe:83:0b:12:0a:f5:a8:
                    76:b6:7a:c6:c6:69:77:1a:06:95:b5:e5:68:6e:39:
                    03:a9:6c:ce:5e:0b:41:0d:2b:8a:7c:c3:a6:74:d1:
                    81:d6:10:4b:e2:89:8d:b4:f3:aa:f5:cd:6e:ac:ba:
                    b1:8d:9b:b8:61:63:a9:91:a1:6e:36:89:b7:21:3d:
                    32:41:96:11:19:2c:13:2b:ac:32:e7:e6:c8:d3:a2:
                    a3:e4:64:9c:be:17:df:32:a4:fc:22:fc:69:cf:36:
                    39:76:b1:4c:4c:68:46:2d:e4:8d:85:7e:54:02:3d:
                    f1:5e:5a:dc:f9:20:e6:a4:e6:57:62:74:10:82:a0:
                    11:f5:29:9e:2f:af:41:49:0c:1e:01:0c:73:01:e1:
                    4b:45:b5:d1:a0:f1:61:0e:c5:8e:ba:21:00:e0:c7:
                    b5:36:77:6d:c2:a7:c8:d8:a5:4e:54:c1:6d:77:21:
                    3c:85:fc:d0:9f:10:bc:c8:ce:64:86:22:e5:af:77:
                    9f:6c:3a:af:f6:3b:5b:2c:2c:45:0f:e7:24:0b:c9:
                    7c:6d:06:1a:a8:d0:2e:b8:ef:cc:eb:fc:a1:6a:53:
                    8b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F1:F0:35:99:8B:1E:B2:E0:26:60:59:D9:8D:61:13:A5:42:6A:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc0cfba4-2ba6-317d-931e-3bb47c49738a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:2e:d3:a9:3d:d0:c2:6c:80:fb:e3:57:44:1b:1a:dd:0b:09:
         83:47:e6:e2:c0:e2:cc:f2:65:a7:aa:d3:e2:d4:51:3a:a8:0a:
         d1:cf:97:6a:c9:a4:b3:8c:a4:16:db:98:63:a7:ae:98:72:ca:
         5e:31:94:00:38:a2:64:21:47:39:5d:d6:00:26:3c:a7:d3:94:
         ef:32:30:8b:5e:87:e9:cb:8f:70:e1:8e:7d:e3:cf:57:52:e9:
         3c:81:68:4b:46:eb:aa:9d:d2:7c:79:46:7e:4b:52:4a:bd:2a:
         03:3f:4b:aa:5a:d3:f3:9e:11:fb:03:8a:c7:e4:63:3b:82:da:
         65:b7:86:bf:06:ba:25:06:65:1c:da:1c:af:da:70:a0:84:a4:
         44:2b:cf:61:4e:f9:b4:25:91:c9:47:ec:7f:9a:c4:40:83:be:
         5f:ff:89:0d:e8:80:73:78:58:70:71:d4:4d:1f:20:25:00:12:
         84:84:13:38:4e:2a:e7:a7:b3:63:17:ef:79:2b:0d:12:d0:77:
         a7:b8:b6:e4:f6:66:5a:72:5a:1b:74:f1:da:a4:55:52:c7:6a:
         8f:75:18:15:68:de:0b:7f:8b:eb:30:b4:1b:df:20:2b:3c:32:
         32:e9:d3:dd:df:d3:dd:30:5d:c0:e2:a4:2c:d0:e2:d7:f9:31:
         f2:71:0b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:28 2025 by rpki-client on console.sobornost.net