Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e322e302f32342d3234203d3e203137313339.roa
File:                     36362e3131372e322e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          Bgbw7YvgcyDOJouVlcaiunxjJEK8p8mB9KzrIRMeddE=
Subject key identifier:   0C:A3:BE:96:34:B2:BD:88:A2:53:CA:E4:53:CF:2C:FC:04:22:B3:83
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       58C64C0CCE451C3BE2BEE106AE3DD61A2B516E32
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e322e302f32342d3234203d3e203137313339.roa
Signing time:             Thu 23 May 2024 11:08:12 +0000
ROA not before:           Thu 23 May 2024 11:03:12 +0000
ROA not after:            Thu 22 May 2025 11:08:12 +0000
asID:                     17139
IP address blocks:        66.117.2.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c6:4c:0c:ce:45:1c:3b:e2:be:e1:06:ae:3d:d6:1a:2b:51:6e:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: May 23 11:03:12 2024 GMT
            Not After : May 22 11:08:12 2025 GMT
        Subject: CN=0CA3BE9634B2BD88A253CAE453CF2CFC0422B383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:39:1d:eb:ae:fb:bd:d2:3b:74:91:1d:dd:e6:
                    6a:37:9c:07:24:9d:9a:0d:4b:dc:62:7a:47:81:7f:
                    99:bf:2d:4b:cf:b4:95:20:fd:1b:a3:cf:ba:9f:2b:
                    b1:3d:e5:24:d6:f9:6c:e7:ab:e4:a2:41:ef:3f:f0:
                    e5:00:52:63:bd:ec:14:b9:21:14:45:a2:d6:4e:a5:
                    88:31:3f:c6:2b:67:8b:ba:47:fd:dd:15:07:28:d7:
                    68:44:b4:fd:16:f3:bd:d5:91:97:12:7b:7b:51:98:
                    9a:09:0d:5f:3e:6c:2f:65:87:c1:38:15:c6:bc:f9:
                    22:2b:6b:28:d2:bb:9c:76:d1:4e:e9:2b:84:40:14:
                    09:4b:54:b2:9f:74:2f:db:1e:92:08:ce:8e:04:14:
                    8b:27:4f:5f:3f:cc:48:ba:18:dd:54:62:c3:a8:df:
                    da:c2:3f:88:93:fe:7c:cb:81:55:55:e0:e0:b5:37:
                    66:e1:b6:42:c8:f0:64:b2:f7:02:de:24:db:8d:15:
                    8d:b3:0c:9e:aa:f1:ea:65:0f:bd:ee:04:57:6e:2f:
                    92:10:09:8a:93:78:a2:f2:27:aa:26:6e:e3:f3:a0:
                    68:54:84:ad:83:f7:11:b4:ed:6e:8f:df:99:84:b5:
                    a8:fa:6b:85:0e:89:7b:28:4b:b8:12:7c:86:f8:ea:
                    df:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A3:BE:96:34:B2:BD:88:A2:53:CA:E4:53:CF:2C:FC:04:22:B3:83
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e322e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.117.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:52:08:20:64:c6:af:55:50:61:3b:f2:3e:42:3e:98:50:b9:
         ba:74:95:9a:46:7e:75:7e:09:fb:39:25:2e:c7:72:e7:e8:8f:
         d8:82:00:c7:52:f4:f3:86:45:9b:c2:10:90:48:47:06:3b:37:
         47:c0:9f:2e:cc:f4:aa:a9:e8:dc:c0:82:1e:97:35:a1:ff:bc:
         74:52:00:39:91:0b:91:87:26:9e:d2:1a:2c:46:3e:02:ff:6f:
         9f:e5:7f:6a:c0:e5:ab:a0:5b:1c:30:2d:4c:ed:1b:f4:dc:9b:
         29:ff:7e:3c:14:55:f8:22:80:d2:11:ef:4f:68:d2:d5:45:ca:
         2d:85:82:10:47:1d:07:86:ce:1f:dc:5c:f5:37:e6:38:4c:cd:
         8a:44:80:c9:df:14:b2:69:8d:f1:b6:83:ff:47:7c:85:9a:3e:
         2b:88:97:83:f9:f2:ff:0f:11:62:c3:f7:df:4b:22:85:05:31:
         4a:6f:d1:50:be:3e:f6:d6:ae:97:52:c0:84:fa:13:52:4b:bc:
         c8:8b:e6:99:fb:6c:ed:3d:44:98:79:c7:fc:11:a7:06:04:9e:
         83:46:0d:72:7f:45:1b:fa:21:e0:1d:02:a8:dd:ff:ad:75:1b:
         64:5d:15:2e:5a:4a:91:06:d0:a3:ee:2f:1e:ac:6a:63:2d:d7:
         81:66:d8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----