Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5fc8961c-2dab-3775-844e-f57a2a2e2826.roa
File:                     5fc8961c-2dab-3775-844e-f57a2a2e2826.roa (raw, json)
Hash identifier:          bzw0+d7xEF+72G7ObiCKkXMBu/Lw3NBiqLLH+okATdw=
Subject key identifier:   F7:ED:DA:A3:84:C1:1D:58:52:71:A8:85:67:F5:CE:40:B4:85:B7:B6
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858497DF47C353F2C980CCCCF045E
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5fc8961c-2dab-3775-844e-f57a2a2e2826.roa
Signing time:             Fri 11 Apr 2025 15:42:29 +0000
ROA not before:           Fri 11 Apr 2025 15:42:29 +0000
ROA not after:            Thu 10 Jul 2025 15:42:29 +0000
asID:                     215724
IP address blocks:        74.114.119.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:f4:7c:35:3f:2c:98:0c:cc:cf:04:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 11 15:42:29 2025 GMT
            Not After : Jul 10 15:42:29 2025 GMT
        Subject: CN=4b27c3e0-e096-420f-b647-19064dd3c635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9a:cf:c7:1e:47:9d:f4:05:72:18:aa:84:b2:
                    2b:56:ef:92:60:74:3b:84:c1:4d:0c:24:f7:03:af:
                    15:22:70:69:cd:d8:9e:0f:d7:60:ab:39:48:ac:fd:
                    98:14:ee:33:e6:ff:05:0c:7c:60:8b:c6:36:3d:22:
                    d4:a7:cf:60:88:c8:a7:30:7d:44:2e:8a:c1:3a:19:
                    33:52:59:f0:05:2b:86:53:b6:54:53:df:62:d4:14:
                    2a:08:94:13:86:53:32:4b:f2:54:30:7a:ce:08:a8:
                    38:2f:b0:26:8e:44:aa:a0:d3:bc:f8:73:9e:88:5f:
                    44:e1:e8:4f:85:71:c1:01:7d:e8:20:81:47:6c:ed:
                    8f:81:e2:4d:da:e2:b8:71:c0:50:8b:ca:b8:0f:4c:
                    76:c5:c4:a1:f7:a3:f7:4f:ec:38:b0:40:9c:d9:63:
                    7b:55:05:21:31:2a:e4:8c:3b:82:47:83:31:19:74:
                    25:f1:08:6a:0d:50:cf:67:73:ab:57:f8:d9:0a:8d:
                    b0:a2:47:50:3d:98:70:d2:eb:99:47:92:07:89:67:
                    c2:8f:9a:71:34:54:7c:4a:19:c5:b4:99:af:c8:56:
                    a0:75:f7:49:c9:a6:32:25:a4:47:90:0b:11:fc:7a:
                    69:26:58:0f:d3:b2:31:84:f7:c3:9b:8c:04:d7:a2:
                    2d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:ED:DA:A3:84:C1:1D:58:52:71:A8:85:67:F5:CE:40:B4:85:B7:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5fc8961c-2dab-3775-844e-f57a2a2e2826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:df:5b:11:16:1a:c5:77:e1:6f:b1:38:64:b0:44:3a:e3:20:
         b4:7e:e8:24:9c:54:51:fe:49:9a:85:28:cf:aa:e1:34:20:38:
         b2:a4:74:82:2f:14:b8:ee:22:8e:6c:8e:d7:7b:da:4e:25:e8:
         67:80:48:53:6a:69:fc:67:3e:50:80:98:ab:d7:3b:d5:05:29:
         2e:95:4f:9b:04:fa:d0:b4:6b:4b:53:21:f5:26:15:fa:12:45:
         c2:a3:43:b9:22:f7:76:34:f9:4e:13:2f:21:1a:04:91:f1:50:
         2d:c2:75:4e:af:41:96:bf:36:3a:8e:99:74:02:4f:49:ba:69:
         48:6d:44:d5:18:d7:fe:0a:74:bd:27:47:83:15:be:6f:87:e2:
         be:3d:c0:6b:01:b6:07:9f:31:17:ea:61:19:f8:27:1a:1a:dc:
         b9:4f:b3:b6:64:b2:88:c0:bf:82:82:1f:06:47:86:dc:77:ce:
         d5:90:1e:27:2b:50:fa:0d:09:c5:42:ec:96:8e:0c:91:43:8f:
         ba:88:62:79:7b:47:8c:36:1a:fb:16:d0:7b:98:89:7f:6c:ee:
         e0:0e:8f:2b:a6:e0:72:c9:80:8a:1e:17:f5:3a:b7:b7:2c:5a:
         91:0d:68:1e:3c:f9:38:65:4b:28:a2:54:94:f0:6f:ae:2c:5e:
         87:80:4c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:47 2025 by rpki-client on console.sobornost.net