Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/64c0e0a7-76eb-3327-9643-9a405458fa6f.roa
File:                     64c0e0a7-76eb-3327-9643-9a405458fa6f.roa (raw, json)
Hash identifier:          VH7m7dZcArH/NTLIacX7kLCNHEuK4BHz+Y4TsWt5H9E=
Subject key identifier:   21:2B:36:60:FD:51:51:D4:DF:50:38:2F:A1:34:6E:54:25:30:CB:26
Certificate issuer:       /CN=e2311284-478e-4111-8d73-27148a01fa21
Certificate serial:       010D0C9F432858497F09A6F51DF803AD87CFD080
Authority key identifier: 8C:F0:68:8D:CD:E2:2E:A8:36:9C:31:30:10:0F:98:75:1A:87:DB:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/64c0e0a7-76eb-3327-9643-9a405458fa6f.roa
Signing time:             Sat 12 Apr 2025 01:00:48 +0000
ROA not before:           Sat 12 Apr 2025 01:00:48 +0000
ROA not after:            Fri 11 Jul 2025 01:00:48 +0000
asID:                     17056
IP address blocks:        74.115.118.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7f:09:a6:f5:1d:f8:03:ad:87:cf:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2311284-478e-4111-8d73-27148a01fa21
        Validity
            Not Before: Apr 12 01:00:48 2025 GMT
            Not After : Jul 11 01:00:48 2025 GMT
        Subject: CN=2f28a788-a1c4-4217-b48c-450c6b4176f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:78:fa:f2:d3:86:ca:7a:40:58:0b:8e:c4:fd:
                    39:0c:ab:da:24:35:8f:cc:34:4d:bf:b4:15:ab:56:
                    77:9f:b5:b3:82:9f:d6:8a:cc:c9:b2:4f:79:5e:f8:
                    6c:4b:8c:c7:ac:16:22:62:18:fa:53:5b:96:8a:72:
                    5b:49:2c:74:14:9a:9d:93:c0:bc:4e:61:05:e9:92:
                    d3:bb:11:4d:6d:6e:b4:6d:50:05:94:db:04:3b:0f:
                    ee:27:42:b6:bb:ce:b0:0f:a3:83:2e:a7:a3:ab:f8:
                    17:98:5e:8a:ad:ac:ad:9a:51:2f:df:3f:d7:ec:89:
                    a7:e1:d6:8a:c1:3d:7b:9a:10:04:a6:0a:07:00:3b:
                    f4:de:1e:05:12:59:7c:15:e4:94:99:63:54:f7:86:
                    c0:e8:01:8f:d5:8d:1d:dc:cb:b2:ca:41:8d:fc:56:
                    66:63:5b:41:f2:17:bc:02:ee:8c:0d:c1:e3:f7:12:
                    6b:44:36:90:7b:96:a3:c6:bd:8f:41:3f:70:e4:3b:
                    8a:60:40:83:99:e2:94:b6:9e:d1:13:4e:02:41:d7:
                    a9:99:20:bd:6d:27:36:09:34:07:d1:79:3d:8d:98:
                    0c:4c:d1:82:18:b4:7e:c6:1c:34:c8:23:7d:7a:08:
                    8b:43:02:5e:d5:d1:18:1a:09:de:6a:32:ff:11:6e:
                    1d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2B:36:60:FD:51:51:D4:DF:50:38:2F:A1:34:6E:54:25:30:CB:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/64c0e0a7-76eb-3327-9643-9a405458fa6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.crl

            X509v3 Authority Key Identifier:
                keyid:8C:F0:68:8D:CD:E2:2E:A8:36:9C:31:30:10:0F:98:75:1A:87:DB:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.115.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:3c:72:fb:a7:ee:75:48:36:cf:29:ae:52:b7:0e:47:b7:57:
         d0:70:7e:98:ff:e1:4c:b1:89:36:70:36:18:1a:f3:53:77:4b:
         5d:4b:d4:96:f4:97:58:f9:f9:e7:9e:b9:24:9b:4f:45:df:a0:
         9e:69:0e:42:d5:0f:a1:6c:40:82:91:92:d1:ba:b0:55:b2:f1:
         5c:67:42:16:2f:00:10:ec:de:2e:b1:35:f7:c2:7b:74:79:99:
         e2:8e:de:b3:20:65:41:56:95:58:6b:20:75:62:69:fb:b5:a1:
         85:4d:5e:33:ff:bf:63:44:21:c9:25:dd:e3:a8:a7:cf:a6:21:
         72:4e:a3:44:a4:61:b2:87:0a:bf:c3:05:d9:13:89:3e:0e:8f:
         fc:32:88:5c:dc:06:a8:bd:48:18:69:7e:8c:a8:b2:7f:c4:75:
         b9:36:d0:4c:bd:86:ab:ae:98:39:52:13:a1:76:ea:a5:2e:b2:
         76:88:f4:45:0a:ed:ad:ae:b5:ee:3b:ca:47:96:21:91:ad:57:
         32:03:c2:b7:96:79:10:e6:39:3e:60:a0:33:ff:f0:f4:aa:00:
         9b:b4:d6:63:96:8e:31:2b:c9:a0:10:7d:cb:3c:10:73:bf:fe:
         a7:e1:f7:20:3e:7b:02:af:bc:26:90:96:b3:09:69:87:ed:81:
         61:8f:c5:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl/Cab1HfgDrYfP0IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIzMTEyODQtNDc4ZS00MTExLThkNzMtMjcxNDhhMDFm
YTIxMB4XDTI1MDQxMjAxMDA0OFoXDTI1MDcxMTAxMDA0OFowLzEtMCsGA1UEAxMk
MmYyOGE3ODgtYTFjNC00MjE3LWI0OGMtNDUwYzZiNDE3NmY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHj68tOGynpAWAuOxP05DKvaJDWPzDRNv7QV
q1Z3n7Wzgp/WiszJsk95XvhsS4zHrBYiYhj6U1uWinJbSSx0FJqdk8C8TmEF6ZLT
uxFNbW60bVAFlNsEOw/uJ0K2u86wD6ODLqejq/gXmF6KraytmlEv3z/X7Imn4daK
wT17mhAEpgoHADv03h4FEll8FeSUmWNU94bA6AGP1Y0d3MuyykGN/FZmY1tB8he8
Au6MDcHj9xJrRDaQe5ajxr2PQT9w5DuKYECDmeKUtp7RE04CQdepmSC9bSc2CTQH
0Xk9jZgMTNGCGLR+xhw0yCN9egiLQwJe1dEYGgneajL/EW4dQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCErNmD9UVHU31A4L6E0blQlMMsmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lMjMx
MTI4NC00NzhlLTQxMTEtOGQ3My0yNzE0OGEwMWZhMjEvNjRjMGUwYTctNzZlYi0z
MzI3LTk2NDMtOWE0MDU0NThmYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTIzMTEyODQtNDc4ZS00MTExLThk
NzMtMjcxNDhhMDFmYTIxL2UyMzExMjg0LTQ3OGUtNDExMS04ZDczLTI3MTQ4YTAx
ZmEyMS5jcmwwHwYDVR0jBBgwFoAUjPBojc3iLqg2nDEwEA+YdRqH274wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lMjMxMTI4NC00NzhlLTQxMTEtOGQ3My0yNzE0
OGEwMWZhMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnN2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAM8cvun7nVINs8prlK3Dke3V9Bwfpj/4UyxiTZwNhga81N3S11L1Jb0
l1j5+eeeuSSbT0XfoJ5pDkLVD6FsQIKRktG6sFWy8VxnQhYvABDs3i6xNffCe3R5
meKO3rMgZUFWlVhrIHViafu1oYVNXjP/v2NEIckl3eOop8+mIXJOo0SkYbKHCr/D
BdkTiT4Oj/wyiFzcBqi9SBhpfoyosn/Edbk20Ey9hquumDlSE6F26qUusnaI9EUK
7a2ute47ykeWIZGtVzIDwreWeRDmOT5goDP/8PSqAJu01mOWjjEryaAQfcs8EHO/
/qfh9yA+ewKvvCaQlrMJaYftgWGPxS8=
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:33:03 2025 by rpki-client on console.sobornost.net