Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e31322e302f32332d3233203d3e203137313339.roa
File:                     36362e3131372e31322e302f32332d3233203d3e203137313339.roa (raw, json)
Hash identifier:          QdkHmZgeoO1LtKka/+liIbv7PIIyv/JvJ+KpWlMjAW8=
Subject key identifier:   24:95:22:20:54:69:97:CC:B5:F9:4B:C8:1E:64:C4:D0:9F:56:3B:D8
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       4DF441AFFDC568CC7EEBE83E978DB7578D8B2FA9
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e31322e302f32332d3233203d3e203137313339.roa
Signing time:             Thu 13 Jun 2024 11:05:21 +0000
ROA not before:           Thu 13 Jun 2024 11:00:21 +0000
ROA not after:            Thu 12 Jun 2025 11:05:21 +0000
asID:                     17139
IP address blocks:        66.117.12.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f4:41:af:fd:c5:68:cc:7e:eb:e8:3e:97:8d:b7:57:8d:8b:2f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Jun 13 11:00:21 2024 GMT
            Not After : Jun 12 11:05:21 2025 GMT
        Subject: CN=24952220546997CCB5F94BC81E64C4D09F563BD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7e:8a:aa:7e:e2:9a:74:c0:83:40:46:64:d7:
                    14:48:47:4b:38:b7:b5:d6:98:fd:fd:c7:9a:81:03:
                    15:84:aa:38:d4:e2:5f:64:fa:64:98:a0:55:64:73:
                    e2:1d:70:6d:e2:d6:69:be:69:e3:22:0e:f4:7f:ec:
                    13:d4:aa:f0:b1:35:2b:3b:f7:d2:33:d5:6a:43:db:
                    d2:4b:50:15:5c:e3:95:ef:7b:a3:9d:34:ca:d4:7c:
                    f3:70:03:5d:fc:93:54:57:c5:a3:6d:8c:2b:37:e9:
                    03:78:83:b4:cf:7d:47:2e:9b:f3:b4:95:19:86:e2:
                    66:a5:a3:32:92:8b:ec:b6:99:a2:03:81:87:ff:7c:
                    5d:55:36:13:07:03:94:86:48:98:6c:85:e4:53:f2:
                    63:25:67:72:58:08:ab:04:60:29:d9:9d:f0:53:14:
                    42:19:1f:de:94:eb:b4:fa:db:32:dd:b3:70:32:bb:
                    10:e5:16:47:74:70:9f:6a:dd:b3:54:c8:4e:4b:6c:
                    e9:b8:8f:57:3a:ce:d7:10:e7:a8:2a:d3:fe:b0:68:
                    8e:83:4c:02:19:e7:5d:9c:45:10:c5:d9:02:51:18:
                    9b:1e:e5:2b:dc:c0:55:b7:17:cf:e1:c7:35:d0:7d:
                    bd:a7:cb:5f:b8:24:44:a6:8c:61:a0:08:84:0a:08:
                    5a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:95:22:20:54:69:97:CC:B5:F9:4B:C8:1E:64:C4:D0:9F:56:3B:D8
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e31322e302f32332d3233203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.117.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:fa:e4:c5:98:06:19:a7:e2:2d:5f:b1:01:21:51:36:82:96:
         9e:1a:c5:1d:df:99:23:9b:3c:07:50:52:c7:4d:0c:ec:ab:15:
         97:28:04:bc:02:87:f1:0b:4e:3f:7c:68:c9:04:b0:31:49:bb:
         14:c8:5e:74:a7:93:29:af:6a:18:77:9f:5f:15:c6:ab:c8:10:
         fa:58:db:6c:85:68:03:d4:30:50:72:ab:2c:56:c1:62:22:e6:
         54:41:b2:6d:e9:21:ee:27:46:ff:f1:91:36:eb:ba:c8:38:64:
         c2:59:99:4d:6b:73:0d:10:70:74:98:9f:9d:4d:0b:36:95:5e:
         22:5e:55:8e:5e:53:86:08:b2:8d:c4:34:5e:b5:57:f3:18:49:
         05:8a:d9:5d:5d:72:4e:c9:10:e6:ff:e6:7a:a7:72:49:b8:6f:
         31:11:fd:76:58:53:27:d3:8c:60:0e:c0:c4:f3:5a:04:b7:fe:
         51:ff:31:97:cd:cc:f6:90:db:fd:62:29:c0:d8:85:e5:e2:b1:
         47:8f:2a:7c:13:26:b8:6f:ee:26:eb:ad:7f:b2:3b:8b:b5:d7:
         f6:50:99:51:e0:c0:32:ad:00:5b:7f:f1:f0:db:99:d4:20:c6:
         c4:6b:5e:1f:1d:ca:58:4a:b3:26:0f:de:8c:87:c5:8f:de:49:
         29:5b:bc:20
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUTfRBr/3FaMx+6+g+l423V42LL6kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI1YWIxY2IzMGZmNDMwZTIzYWM2ZTE0YTA5MTczZDli
OWI0YjNlMzI4YTc2YjM4OGUwHhcNMjQwNjEzMTEwMDIxWhcNMjUwNjEyMTEwNTIx
WjAzMTEwLwYDVQQDEygyNDk1MjIyMDU0Njk5N0NDQjVGOTRCQzgxRTY0QzREMDlG
NTYzQkQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX6Kqn7imnTA
g0BGZNcUSEdLOLe11pj9/ceagQMVhKo41OJfZPpkmKBVZHPiHXBt4tZpvmnjIg70
f+wT1KrwsTUrO/fSM9VqQ9vSS1AVXOOV73ujnTTK1HzzcANd/JNUV8WjbYwrN+kD
eIO0z31HLpvztJUZhuJmpaMykovstpmiA4GH/3xdVTYTBwOUhkiYbIXkU/JjJWdy
WAirBGAp2Z3wUxRCGR/elOu0+tsy3bNwMrsQ5RZHdHCfat2zVMhOS2zpuI9XOs7X
EOeoKtP+sGiOg0wCGeddnEUQxdkCURibHuUr3MBVtxfP4cc10H29p8tfuCREpoxh
oAiECghajwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFCSVIiBUaZfMtflLyB5kxNCf
VjvYMB8GA1UdIwQYMBaAFAoXtAp53/9E+vo9QPbk0A2DUUuzMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGYwYjgwNmMwMThmYTUxMzZlMjkxODRhLzAv
MEExN0I0MEE3OURGRkY0NEZBRkEzRDQwRjZFNEQwMEQ4MzUxNEJCMy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzI5M2ZiMTViLTVhODUtNGFiZS1iZDI0LTIzMmExMTRhZTQ5MC9mYjVh
YjFjYjMwZmY0MzBlMjNhYzZlMTRhMDkxNzNkOWI5YjRiM2UzMjhhNzZiMzg4ZS5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmMGI4MDZjMDE4ZmE1
MTM2ZTI5MTg0YS8wLzM2MzYyZTMxMzEzNzJlMzEzMjJlMzAyZjMyMzMyZDMyMzMy
MDNkM2UyMDMxMzczMTMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFCdQwwDQYJKoZIhvcNAQELBQAD
ggEBACj65MWYBhmn4i1fsQEhUTaClp4axR3fmSObPAdQUsdNDOyrFZcoBLwCh/EL
Tj98aMkEsDFJuxTIXnSnkymvahh3n18VxqvIEPpY22yFaAPUMFByqyxWwWIi5lRB
sm3pIe4nRv/xkTbrusg4ZMJZmU1rcw0QcHSYn51NCzaVXiJeVY5eU4YIso3ENF61
V/MYSQWK2V1dck7JEOb/5nqnckm4bzER/XZYUyfTjGAOwMTzWgS3/lH/MZfNzPaQ
2/1iKcDYheXisUePKnwTJrhv7ibrrX+yO4u11/ZQmVHgwDKtAFt/8fDbmdQgxsRr
Xh8dylhKsyYP3oyHxY/eSSlbvCA=
-----END CERTIFICATE-----
Generated at Sun Sep 22 08:27:35 2024 by rpki-client on console-fra.rpki-client.org