Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3139392e302f32342d3234203d3e203137313339.roa
File:                     37342e3132342e3139392e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          yh7EinACHbRaUN0Yy9jp3XaP37R/TINYduofZ4L4g7Y=
Subject key identifier:   A5:61:F3:94:D7:F1:90:A5:EB:3A:C8:8F:39:28:98:BB:55:52:C9:B4
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       7CE2CE23A0ED1A7973AC7B35603BDFC19A48FA96
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3139392e302f32342d3234203d3e203137313339.roa
Signing time:             Thu 23 May 2024 11:08:12 +0000
ROA not before:           Thu 23 May 2024 11:03:12 +0000
ROA not after:            Thu 22 May 2025 11:08:12 +0000
asID:                     17139
IP address blocks:        74.124.199.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:e2:ce:23:a0:ed:1a:79:73:ac:7b:35:60:3b:df:c1:9a:48:fa:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: May 23 11:03:12 2024 GMT
            Not After : May 22 11:08:12 2025 GMT
        Subject: CN=A561F394D7F190A5EB3AC88F392898BB5552C9B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:be:ad:ee:e6:57:d5:3e:74:3c:22:96:65:d2:
                    64:b4:30:09:3d:6a:72:a1:55:61:3e:ef:24:00:bf:
                    22:f1:29:f9:18:d5:2b:92:0a:29:49:35:0a:36:e3:
                    b2:d5:42:31:63:7b:a3:15:e2:5c:d3:05:b9:3d:ac:
                    37:b3:09:dd:63:9d:2c:85:84:20:d8:26:5f:e8:6e:
                    e1:20:24:54:7b:09:b1:ee:43:92:65:a2:1a:fa:dc:
                    74:19:b0:35:c6:fd:ee:27:8b:a0:22:40:35:ef:5a:
                    8f:0f:be:8b:cc:75:11:da:e5:3c:e1:67:ef:1c:ad:
                    ca:d8:9a:09:e6:48:9b:e1:bb:f0:82:f3:f5:be:87:
                    9d:97:fe:85:2d:2e:7d:99:e3:b2:75:a7:2b:1d:bc:
                    45:07:94:15:95:1c:82:b8:5d:51:18:17:e2:81:1c:
                    08:43:b9:b0:c0:83:b7:4a:58:cf:b0:78:b4:18:3a:
                    2d:22:50:3d:93:6e:2a:a9:f8:40:20:b3:aa:28:8d:
                    10:3c:ff:07:b3:54:9b:cf:2f:d1:e7:48:cc:f2:06:
                    64:6a:e4:93:51:f3:a6:cc:02:77:a3:dd:7c:8a:e2:
                    00:94:1c:86:c6:2d:25:bf:39:78:19:94:da:37:76:
                    97:91:21:b5:3a:71:b3:f2:d1:6f:84:55:0e:ad:eb:
                    19:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:61:F3:94:D7:F1:90:A5:EB:3A:C8:8F:39:28:98:BB:55:52:C9:B4
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3139392e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.124.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:53:52:ba:3c:83:39:6f:d4:b2:87:b5:83:b7:5c:3d:89:f7:
         de:f4:2e:f5:df:1e:79:31:5d:d6:1c:e8:75:e4:55:d0:9e:06:
         d6:57:ad:15:db:aa:5f:8b:92:f4:fe:3e:01:35:2b:f9:8d:1f:
         82:1c:dc:dc:98:d1:13:34:2d:52:02:da:87:68:d9:28:ab:52:
         69:a0:19:53:21:3a:1c:0b:a1:31:a0:fd:93:4a:4d:e9:90:d5:
         51:4b:b6:67:34:86:f3:40:7f:60:e5:ce:94:03:38:ea:35:91:
         6f:0e:e6:38:f2:dc:74:5f:17:cc:2d:81:1f:76:e6:a6:cd:f3:
         11:29:57:b8:6b:fd:a7:fb:43:d4:a5:15:98:b2:45:c1:8b:e4:
         99:b3:d9:1a:49:c1:69:77:8a:e7:14:24:3e:8e:43:d1:d8:31:
         f6:67:cc:f5:ca:9e:f2:35:c0:c7:c8:7c:a1:c2:cd:b9:6c:ca:
         17:43:92:ca:f6:c2:d8:b9:37:fc:b9:44:c1:01:79:bc:cb:6a:
         33:91:32:1f:a2:f7:88:7a:89:42:89:c7:4a:e3:a3:a1:a6:7b:
         b4:38:54:40:38:26:74:ff:61:3d:d1:38:2f:ab:cc:93:e0:b3:
         42:0b:87:82:e0:cc:c8:0b:10:02:c1:73:60:86:55:10:6b:e2:
         78:96:69:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 22 08:53:09 2024 by rpki-client on console-ams.rpki-client.org