Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca5540181016060d60425/0/36332e3133332e3231342e302f32342d3234203d3e20333937323434.roa
File:                     36332e3133332e3231342e302f32342d3234203d3e20333937323434.roa (raw, json)
Hash identifier:          nX181R9kLErAAn+MFyRWyqps+MX/3WDwEACBg9Ht30o=
Subject key identifier:   19:51:B3:31:AD:E1:C9:8D:92:40:F0:C9:5B:EF:E2:FA:0E:A6:1B:70
Certificate issuer:       /CN=79d88309d02a4bef55764ac7c52b7eef5f1bb0ded1929fac33
Certificate serial:       73562C47CC66559DFBE443F9C70DFC409E939BE6
Authority key identifier: 3B:F7:67:28:9F:7D:AC:0C:15:00:93:8E:8E:C9:34:EB:E7:DD:7A:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0010301c-aa2d-4d35-97d4-8d947672bad4/79d88309d02a4bef55764ac7c52b7eef5f1bb0ded1929fac33.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca5540181016060d60425/0/36332e3133332e3231342e302f32342d3234203d3e20333937323434.roa
Signing time:             Mon 09 Oct 2023 00:13:58 +0000
ROA not before:           Mon 09 Oct 2023 00:08:58 +0000
ROA not after:            Mon 07 Oct 2024 00:13:58 +0000
asID:                     397244
IP address blocks:        63.133.214.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:56:2c:47:cc:66:55:9d:fb:e4:43:f9:c7:0d:fc:40:9e:93:9b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d88309d02a4bef55764ac7c52b7eef5f1bb0ded1929fac33
        Validity
            Not Before: Oct  9 00:08:58 2023 GMT
            Not After : Oct  7 00:13:58 2024 GMT
        Subject: CN=1951B331ADE1C98D9240F0C95BEFE2FA0EA61B70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bc:16:a9:81:af:6f:29:f2:1e:81:06:af:eb:
                    ad:ee:cd:47:cb:c9:65:25:c8:6f:0b:b9:c6:85:93:
                    af:5f:35:fb:b6:39:fb:a3:02:dd:20:2c:69:72:b5:
                    fe:77:fa:3a:af:46:8f:c4:b3:76:d7:c4:79:a7:07:
                    73:f4:ad:dc:65:59:bf:98:bd:f7:0e:09:c4:e9:30:
                    68:97:94:70:f4:7e:02:45:ad:85:3d:53:3b:a6:a2:
                    78:50:85:9d:cc:bb:88:c7:f4:78:67:79:68:d0:43:
                    b1:a8:b0:b2:91:9a:b0:ef:fe:2b:ad:86:51:59:d7:
                    5f:14:75:5c:26:28:82:47:30:1e:57:4b:78:61:c8:
                    43:69:56:d3:20:ad:50:6c:23:31:d0:f8:8b:b2:58:
                    ee:04:18:bf:9c:37:d2:21:59:02:6b:7d:33:7d:9d:
                    f4:30:a4:a1:d9:d6:6f:35:56:d1:a0:f4:e6:ab:38:
                    49:f7:8b:f3:5a:26:f4:23:24:30:49:5a:ff:05:67:
                    c0:f6:8a:e1:23:13:a3:a3:fc:8b:cc:6f:03:ee:bc:
                    ba:ce:ab:1b:31:5d:b7:c9:91:d1:f6:0b:ed:6d:ab:
                    59:e8:a3:60:1e:06:bc:d9:01:0a:b9:49:cf:41:06:
                    85:c1:f3:ab:13:da:ea:41:a5:39:bb:9a:e8:04:d2:
                    b4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:51:B3:31:AD:E1:C9:8D:92:40:F0:C9:5B:EF:E2:FA:0E:A6:1B:70
            X509v3 Authority Key Identifier:
                keyid:3B:F7:67:28:9F:7D:AC:0C:15:00:93:8E:8E:C9:34:EB:E7:DD:7A:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca5540181016060d60425/0/3BF767289F7DAC0C1500938E8EC934EBE7DD7A80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0010301c-aa2d-4d35-97d4-8d947672bad4/79d88309d02a4bef55764ac7c52b7eef5f1bb0ded1929fac33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca5540181016060d60425/0/36332e3133332e3231342e302f32342d3234203d3e20333937323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.133.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:be:0b:2e:e9:63:10:1f:0e:02:a5:86:2b:dd:b7:2d:8d:f3:
         e5:1c:1b:71:f0:18:6e:ee:81:62:36:12:6e:09:1a:56:7f:ab:
         44:54:ff:b1:8c:3e:b8:e0:a2:b9:fd:86:02:e3:25:e5:6e:ed:
         c3:fd:8c:39:a4:0f:c7:4d:87:73:f6:fb:27:44:80:15:c7:e5:
         ba:0b:a7:0d:27:fd:fc:3d:20:d8:78:4e:91:bc:98:f3:b9:30:
         ff:2b:c7:6b:26:fd:db:bc:6e:59:a5:ee:87:0d:d0:b8:08:6b:
         94:bb:94:ef:bc:09:48:41:e0:2b:40:df:9b:20:17:4e:0c:f0:
         c7:21:b5:7f:0a:b1:85:7b:c3:7d:10:e0:d4:7d:d3:7b:87:87:
         80:ea:8c:77:f2:d3:8b:03:4a:a0:df:f0:45:0f:64:9a:59:81:
         a6:f4:96:ff:56:4b:b9:52:7e:5a:2a:56:ca:d1:4d:36:cc:13:
         b6:75:88:ec:92:b2:a0:1f:89:62:f0:ee:5e:a5:1f:82:04:8e:
         1a:d0:48:2f:72:5e:0c:2c:e8:a8:9e:88:e7:42:cd:cc:17:41:
         cd:86:9e:99:0f:d2:ac:13:58:fb:2f:88:06:4b:76:16:58:0e:
         7c:6b:58:a5:fd:f5:72:90:05:4b:67:0e:3a:fe:ec:44:98:5d:
         1a:69:5c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 3 13:29:00 2024 by rpki-client on console-fra.rpki-client.org