Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e362e302f32332d3233203d3e203137313339.roa
File:                     36362e3131372e362e302f32332d3233203d3e203137313339.roa (raw, json)
Hash identifier:          T6E0weCGX75amZahMzxTJuO57a61qdWT+kA08+rInhs=
Subject key identifier:   89:84:43:A2:0B:B8:BB:DA:13:0A:21:A6:B1:E8:54:35:82:80:84:96
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       718FC01606FFF6A17C37A6EEDE834C576E9613D0
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e362e302f32332d3233203d3e203137313339.roa
Signing time:             Fri 12 Jul 2024 23:35:15 +0000
ROA not before:           Fri 12 Jul 2024 23:30:15 +0000
ROA not after:            Fri 11 Jul 2025 23:35:15 +0000
asID:                     17139
IP address blocks:        66.117.6.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:8f:c0:16:06:ff:f6:a1:7c:37:a6:ee:de:83:4c:57:6e:96:13:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Jul 12 23:30:15 2024 GMT
            Not After : Jul 11 23:35:15 2025 GMT
        Subject: CN=898443A20BB8BBDA130A21A6B1E8543582808496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c2:db:dc:57:86:06:8c:82:1e:af:a1:e6:2b:
                    92:ee:59:60:79:1b:3e:b1:08:50:87:3e:3b:76:cd:
                    20:17:8d:52:75:51:b0:7e:f0:3d:65:eb:b8:d6:b4:
                    d3:67:f5:33:d1:3f:f4:4e:09:e4:64:36:d8:c4:f4:
                    4c:71:f5:80:81:db:fa:ef:2c:0d:92:b1:30:1f:f6:
                    2f:76:22:f3:66:47:dd:e6:9f:89:39:1b:db:3c:89:
                    c8:f3:f9:ad:da:a3:6a:a3:d0:fb:77:50:4d:f0:bb:
                    fd:6c:80:fe:d6:d3:34:b1:eb:0a:83:17:97:b5:d1:
                    3b:91:46:e0:08:b6:05:7e:cd:44:0b:a4:91:7e:b0:
                    d4:62:59:7a:2b:2b:3b:2e:80:1f:75:78:b9:30:b2:
                    f6:5e:42:17:36:89:7c:be:10:5c:ee:25:14:a0:ee:
                    54:10:4d:52:f6:67:f5:59:e2:59:5f:23:64:1c:d1:
                    94:55:9a:c1:af:74:c6:00:17:3b:c3:b4:f0:49:d8:
                    e8:05:cd:10:e9:03:37:54:c8:76:15:b8:18:6c:b1:
                    05:f2:6a:9b:b1:f4:50:e7:08:e2:dd:55:c6:d9:85:
                    52:5c:75:16:47:a5:35:30:f1:dd:66:a2:9e:09:89:
                    21:32:45:59:83:9c:33:86:cd:87:3c:76:f8:ff:bc:
                    df:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:84:43:A2:0B:B8:BB:DA:13:0A:21:A6:B1:E8:54:35:82:80:84:96
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e362e302f32332d3233203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.117.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:f7:46:10:7d:e5:4e:eb:7d:71:77:7f:83:97:72:45:6d:92:
         79:16:38:1c:75:d3:4e:53:ed:be:c4:9e:e3:f1:56:aa:38:1d:
         fc:24:a5:31:f5:fe:78:e7:c4:4c:4c:83:bc:d7:b5:02:12:5d:
         d6:3b:44:a0:8e:cb:1b:ea:18:81:17:a3:b7:18:98:15:b2:ee:
         93:da:9f:35:91:3a:5d:e3:de:41:08:f8:c3:76:2d:ee:d8:ec:
         ea:11:0e:52:b4:15:3c:9a:88:13:91:4e:cb:a8:da:de:5b:a4:
         0f:c1:cb:7e:1e:66:f3:f2:64:40:07:51:f2:66:71:62:c3:bb:
         1c:1e:f5:d5:45:24:86:87:c0:a2:82:18:be:7b:bd:cc:35:8c:
         6a:a3:d2:5e:be:24:51:05:91:e5:d0:0d:5b:0a:fa:57:72:1c:
         ab:4e:57:73:d1:6f:46:0f:bf:de:74:24:d2:dd:48:b3:c7:6f:
         d7:c2:b6:34:db:63:46:2b:cc:02:18:af:ee:a8:db:0b:22:e1:
         2a:b2:f6:61:eb:e1:7f:5e:3a:73:e6:6d:13:07:7f:e8:fb:8e:
         28:ea:db:1c:cc:15:f2:82:97:0b:7a:e3:ba:01:99:59:89:c4:
         48:97:42:f2:b6:48:a6:ac:54:b6:40:39:f1:48:67:c6:e8:b8:
         77:c3:04:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 22 08:53:09 2024 by rpki-client on console-ams.rpki-client.org