Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac4270a-45f4-487a-8f20-4684f6b306f3/808a3ccd-a1d0-35cd-9b59-bda32d88bfd0.roa
File:                     808a3ccd-a1d0-35cd-9b59-bda32d88bfd0.roa (raw, json)
Hash identifier:          VCej4wX2Ht4UHc3y0DZQu/crK/45IM2rNdSIaB6ay9A=
Subject key identifier:   6D:FA:F7:30:3A:AD:60:31:BC:BD:42:CA:8B:ED:0D:1E:48:04:0A:DE
Certificate issuer:       /CN=8ac4270a-45f4-487a-8f20-4684f6b306f3
Certificate serial:       010D0C9F43285849631EC3570829B1B7697DF200
Authority key identifier: C5:67:36:4D:0D:6F:62:4D:BA:66:85:AB:42:CF:BE:7C:3F:01:97:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac4270a-45f4-487a-8f20-4684f6b306f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac4270a-45f4-487a-8f20-4684f6b306f3/808a3ccd-a1d0-35cd-9b59-bda32d88bfd0.roa
Signing time:             Wed 02 Apr 2025 01:00:46 +0000
ROA not before:           Wed 02 Apr 2025 01:00:46 +0000
ROA not after:            Tue 01 Jul 2025 01:00:46 +0000
asID:                     22766
IP address blocks:        74.113.0.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:63:1e:c3:57:08:29:b1:b7:69:7d:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac4270a-45f4-487a-8f20-4684f6b306f3
        Validity
            Not Before: Apr  2 01:00:46 2025 GMT
            Not After : Jul  1 01:00:46 2025 GMT
        Subject: CN=d96577fe-7178-484b-805e-aa74e83efd2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:43:96:d0:f9:bf:88:0e:a3:e2:4d:0d:42:2b:
                    a9:be:9b:de:4d:66:4c:ad:f4:68:0e:56:f0:e9:d2:
                    70:44:31:76:85:e1:16:49:46:7e:7b:08:40:41:85:
                    52:eb:2f:c2:ba:2c:a4:5a:3b:99:4f:1b:d7:fb:1f:
                    83:70:95:9c:c1:7e:93:53:f1:7f:6d:ba:b7:56:1f:
                    57:4a:2f:3f:d2:fc:ba:92:73:7f:50:10:cc:1c:dd:
                    37:4d:db:9b:75:17:5b:f1:de:c6:7f:d7:39:20:e3:
                    b0:08:f4:d4:3a:6a:40:1b:46:6f:06:f6:d4:45:8a:
                    68:60:a7:79:bf:0a:92:34:16:4c:e8:0a:c7:44:ac:
                    8b:bb:01:39:54:45:90:03:eb:87:20:53:be:f2:4d:
                    db:e1:a0:e8:3c:28:c4:9e:7f:8b:df:25:ff:6e:97:
                    f0:bb:f9:cc:e1:99:1f:0b:17:93:42:c0:e4:f1:68:
                    f7:58:f9:cd:23:38:dd:75:6e:10:18:13:05:48:27:
                    49:e3:d5:fa:e0:58:37:12:11:87:7c:76:48:4b:3b:
                    e2:b1:cc:0d:80:77:64:48:3c:aa:64:a5:1c:3b:6d:
                    91:61:df:b0:48:48:7d:ae:b6:b5:b6:d6:49:9c:09:
                    f5:48:06:85:1a:ed:18:e7:da:db:ca:e3:b4:d3:ef:
                    02:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FA:F7:30:3A:AD:60:31:BC:BD:42:CA:8B:ED:0D:1E:48:04:0A:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac4270a-45f4-487a-8f20-4684f6b306f3/808a3ccd-a1d0-35cd-9b59-bda32d88bfd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac4270a-45f4-487a-8f20-4684f6b306f3/8ac4270a-45f4-487a-8f20-4684f6b306f3.crl

            X509v3 Authority Key Identifier:
                keyid:C5:67:36:4D:0D:6F:62:4D:BA:66:85:AB:42:CF:BE:7C:3F:01:97:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac4270a-45f4-487a-8f20-4684f6b306f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.113.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:6f:52:55:1e:5e:bd:6a:23:0d:62:27:13:7e:99:8e:c5:0f:
         b7:99:81:95:bb:5d:2a:85:d7:82:c2:08:c9:b6:70:d3:6f:7d:
         ef:3e:90:8b:27:ee:47:11:24:b0:8d:21:15:d0:5e:68:14:5e:
         e6:b3:5e:66:7f:c3:86:60:fd:ca:86:c6:55:9e:2f:ea:c4:9b:
         73:84:ed:c5:b3:59:15:c9:e5:e4:c1:5f:77:76:9c:28:d1:66:
         0c:56:9f:bf:ef:80:25:90:9c:79:b7:9c:92:38:92:ac:a9:cd:
         90:48:e5:86:29:18:c8:9f:fc:18:d8:00:5c:06:31:7a:e4:3b:
         00:93:d7:05:0d:fe:7d:2a:8c:28:be:54:c0:0f:87:32:01:0e:
         f9:b6:12:4a:ee:52:18:ad:0d:77:e8:f3:b9:db:ab:1d:98:55:
         9f:0e:2d:3a:c5:4f:fe:e8:06:b5:8b:e8:d2:24:e0:f4:0e:80:
         76:2b:9b:80:8e:7d:bf:c8:cb:8b:55:6d:c0:c6:28:50:eb:0a:
         0f:9a:01:3e:70:05:93:ae:55:63:17:64:b4:db:3c:e9:0e:36:
         3a:6f:ac:ab:da:ff:5b:75:fd:0f:50:1c:6e:bb:70:be:09:ab:
         7d:79:84:52:1c:df:23:91:01:36:df:03:ea:05:b8:96:99:a3:
         25:38:ef:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:29 2025 by rpki-client on console.sobornost.net