Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3139322e302f32342d3234203d3e2035303635.roa
File:                     37342e3132342e3139322e302f32342d3234203d3e2035303635.roa (raw, json)
Hash identifier:          dVJ6qoGV1l00mVL+TOsnMzQR2Xz1OoW021Hd9IcTbgU=
Subject key identifier:   9C:5D:25:EF:2C:AF:98:C7:78:69:D1:0D:A0:20:F7:39:65:9F:D9:DA
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       0E4ABD77827ED7EE7864C90D2072C331184BBDF8
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3139322e302f32342d3234203d3e2035303635.roa
Signing time:             Tue 06 Aug 2024 18:46:47 +0000
ROA not before:           Tue 06 Aug 2024 18:41:47 +0000
ROA not after:            Tue 05 Aug 2025 18:46:47 +0000
asID:                     5065
IP address blocks:        74.124.192.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:4a:bd:77:82:7e:d7:ee:78:64:c9:0d:20:72:c3:31:18:4b:bd:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Aug  6 18:41:47 2024 GMT
            Not After : Aug  5 18:46:47 2025 GMT
        Subject: CN=9C5D25EF2CAF98C77869D10DA020F739659FD9DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8c:63:82:ef:19:fb:7f:da:71:b1:db:fc:6a:
                    3a:a8:b7:69:75:09:04:51:2d:bb:af:18:fd:d7:ad:
                    03:09:de:c3:12:ca:1d:3f:b6:12:0b:62:0c:28:0b:
                    db:9b:b2:e9:fe:d2:05:09:90:2b:d1:ad:e2:27:6b:
                    a0:8b:c7:30:0f:2a:f0:8a:2f:65:58:18:ed:26:90:
                    ec:9a:93:5e:a6:16:3d:34:1d:ff:a2:23:9b:b9:65:
                    0f:36:b1:52:bd:df:b2:25:ea:e8:49:8b:5f:f8:91:
                    4e:06:95:85:61:b5:c0:a4:dc:5a:f5:ec:67:69:e3:
                    43:8b:d5:7e:82:ce:6a:03:6e:a0:c6:fc:3e:01:61:
                    2a:60:5b:b4:55:60:ba:53:08:c4:ac:6d:ae:67:85:
                    98:57:e4:01:75:f3:f2:87:c8:11:d5:0e:22:2c:89:
                    33:c0:6f:c4:ee:23:5b:e0:97:85:c4:de:dd:fe:b3:
                    67:48:ea:39:95:50:50:ca:2d:fd:a6:20:06:e2:c0:
                    cc:8b:1a:b9:4a:32:f5:ef:85:28:b8:70:9b:8a:dc:
                    ae:62:d9:bf:65:1e:48:0a:81:c1:5c:56:62:a3:b4:
                    31:33:f1:89:ab:33:d1:89:4f:0a:47:3f:b7:9d:76:
                    9d:52:82:ed:5e:5d:ab:1e:5a:de:b4:17:01:0f:9f:
                    0b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5D:25:EF:2C:AF:98:C7:78:69:D1:0D:A0:20:F7:39:65:9F:D9:DA
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3139322e302f32342d3234203d3e2035303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.124.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:27:1b:e1:20:f9:0c:44:be:7d:6c:9e:82:f1:92:2f:fb:21:
         0f:e6:b9:a9:bc:9f:1e:90:0b:3f:7a:00:c7:78:e3:c1:0d:24:
         87:e1:46:8c:c7:1e:8e:81:8c:aa:43:f0:c9:15:b4:7f:d9:d4:
         0a:c7:ed:ab:4b:27:bd:0f:a9:46:89:f2:43:89:ac:21:18:b3:
         be:fb:9b:3e:42:6b:f3:20:c9:69:bc:e2:9c:31:4b:7d:21:8b:
         b5:c9:f8:7d:b3:4b:f9:f1:96:58:46:89:9b:0c:5c:5e:1d:6f:
         c6:59:d8:af:14:b2:49:50:66:33:32:d2:97:41:93:b9:1e:5d:
         30:c8:ce:a4:07:28:97:cd:26:cb:f2:ff:9d:10:f2:c0:48:b9:
         f6:c8:b1:26:ba:47:04:11:fc:02:a3:9a:d5:1b:b1:e1:fe:26:
         01:ca:36:ae:fd:89:2f:51:25:98:6e:ce:0d:fb:58:59:90:e3:
         77:f0:4b:6e:ea:a7:64:46:8e:38:3c:ff:48:f0:99:f1:42:d2:
         24:dd:46:2b:48:06:73:a6:aa:80:d6:87:52:bf:6b:bc:45:15:
         a7:c9:80:24:d2:78:a8:de:97:e4:1b:ef:4a:90:a6:b4:a7:a5:
         06:7c:cb:50:77:a6:cd:67:bf:8b:31:37:48:00:2d:7d:ae:58:
         5c:40:50:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 22 08:53:09 2024 by rpki-client on console-ams.rpki-client.org