Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3232302e302f32322d3234203d3e20383334.roa
File:                     37342e3132342e3232302e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          xupja3vL4E8SiAv3Kzm6ZIN/1fV/yHhNWglYU9eXhao=
Subject key identifier:   9F:62:1E:26:14:82:33:83:7B:E6:D7:41:78:3C:0E:A2:13:C9:76:18
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       4A9686A564140B97134FF8512EB90F7814242A0A
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3232302e302f32322d3234203d3e20383334.roa
Signing time:             Sat 07 Sep 2024 18:14:52 +0000
ROA not before:           Sat 07 Sep 2024 18:09:52 +0000
ROA not after:            Sat 06 Sep 2025 18:14:52 +0000
asID:                     834
IP address blocks:        74.124.220.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:96:86:a5:64:14:0b:97:13:4f:f8:51:2e:b9:0f:78:14:24:2a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Sep  7 18:09:52 2024 GMT
            Not After : Sep  6 18:14:52 2025 GMT
        Subject: CN=9F621E26148233837BE6D741783C0EA213C97618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:46:16:99:0b:bc:91:67:68:a3:3f:22:de:91:
                    d7:75:e6:f7:ce:97:7e:f2:bc:70:03:7a:92:48:e0:
                    c5:8d:38:56:b7:ea:68:4d:c3:8d:db:2b:e2:ed:7a:
                    7f:ff:2e:48:b9:8c:2a:5b:cd:fd:d6:c7:0f:c9:b3:
                    9b:55:b9:77:d7:57:0e:28:c3:90:64:07:e2:aa:1e:
                    00:aa:41:bf:3c:8d:8b:60:80:fc:cb:3c:33:bd:46:
                    d0:c9:cb:96:c7:41:21:0c:5f:b7:07:ad:69:2a:8f:
                    22:22:78:02:5d:a0:b7:6a:73:65:c5:4f:40:7a:b1:
                    23:29:5b:c7:ab:2f:00:c7:c1:91:6b:9a:84:f4:6b:
                    34:f9:18:f4:d4:a0:ea:74:a2:40:76:80:b8:1f:9e:
                    2a:c7:1f:ea:cd:3c:98:ce:ab:a2:7c:d2:13:d5:52:
                    5d:ac:15:d6:30:3a:0a:9a:f0:9c:8c:16:a7:fd:63:
                    15:15:70:b7:ee:87:ed:1b:ea:74:0b:c3:b1:d0:76:
                    bc:b0:04:00:45:66:aa:1d:10:69:ad:6f:c8:7e:65:
                    24:0b:2e:69:f9:13:38:90:89:0e:a8:62:15:3d:92:
                    56:7f:af:5a:79:b8:6e:d8:c8:1f:29:f0:2f:47:d5:
                    80:53:47:55:61:6a:3a:0b:33:32:02:31:30:d1:4d:
                    83:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:62:1E:26:14:82:33:83:7B:E6:D7:41:78:3C:0E:A2:13:C9:76:18
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3232302e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.124.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:fd:d5:1b:f5:8b:3c:bd:c6:4c:38:1f:38:f3:2e:52:c4:5e:
         b9:b9:26:24:8f:40:44:6c:55:11:44:9d:bf:f8:ea:83:b6:08:
         2a:89:28:67:84:d6:1e:cc:8b:55:55:6e:dc:31:8a:c3:ab:fe:
         0c:1c:01:a7:33:09:e0:5b:6d:81:b8:31:96:df:95:3b:da:6c:
         58:74:79:df:66:af:dc:6a:73:fb:45:38:11:77:73:c2:7c:5a:
         e1:e7:47:43:9c:19:11:14:98:ac:da:67:b2:b8:b5:ae:af:4e:
         81:f2:34:5c:38:e6:22:f6:59:7d:87:17:eb:cc:90:70:77:0c:
         b6:13:bb:bf:c1:67:ac:f5:8a:c4:4e:1b:d2:6e:74:8f:cd:14:
         6c:51:e9:32:3b:00:0e:f1:9c:42:22:c7:3b:ec:4d:ed:19:27:
         87:9b:89:a2:e3:5b:9a:c5:b7:76:8c:96:fc:a7:ef:6c:0a:48:
         a0:d5:92:d3:14:56:46:ff:5e:1f:72:3f:ae:de:94:77:f4:6c:
         96:74:3d:cb:fd:af:b2:bc:7f:22:aa:0a:30:db:1a:cf:66:b8:
         4a:5d:61:2b:de:90:ee:25:4b:a4:c5:a6:ec:91:be:7f:28:9d:
         39:6a:bd:35:07:34:db:fa:01:b0:9e:2a:72:38:f9:46:ba:5c:
         cd:e1:1f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----