Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/04aa6a30-f792-3b24-ad60-10aa9f9aee3a.roa
File:                     04aa6a30-f792-3b24-ad60-10aa9f9aee3a.roa (raw, json)
Hash identifier:          y2a8mEsHEpjqJ/7v+z+sAIOZQASV2kXlcq335nL99fo=
Subject key identifier:   5A:60:DE:1D:B5:3C:FA:E2:65:4E:6F:79:7B:3E:48:AE:EB:E2:71:B2
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F432858495ABEC3177B020033BC7AD600
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/04aa6a30-f792-3b24-ad60-10aa9f9aee3a.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     53841
IP address blocks:        2605:8900:1000::/36 maxlen: 36
                          2605:8900:3000::/36 maxlen: 36
                          2605:8900:5000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:c3:17:7b:02:00:33:bc:7a:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=d1e3d5b6-c14c-4d71-a356-7d1c8a3d96cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:95:31:ad:99:b1:33:a5:19:d5:db:56:88:f2:
                    b1:27:13:64:fb:32:49:dc:4a:1a:d2:7f:62:cc:82:
                    03:a2:5b:65:2e:26:b0:2e:7a:35:e3:ba:15:ac:94:
                    be:8b:f2:8d:db:8e:b6:63:4c:5d:8a:7d:43:06:1e:
                    71:97:c8:ad:49:ab:90:fc:86:e9:b1:9a:f0:d8:95:
                    1d:92:f7:bc:b8:5e:8d:76:01:e0:d9:b3:6e:6d:bc:
                    d1:45:9e:f1:aa:1e:ef:f0:30:38:eb:f4:af:db:0f:
                    0c:4d:0f:18:0f:91:5a:06:58:dd:89:a0:20:47:9d:
                    1a:50:9a:69:d4:0e:28:3e:f6:59:48:2a:e8:d4:99:
                    c6:04:09:70:e5:75:d0:2d:d3:5c:db:24:78:5b:0c:
                    bf:d7:91:d8:51:d6:37:c9:7d:7f:69:4f:c2:3c:89:
                    5f:0e:6a:e7:83:3b:30:10:10:9b:59:e0:0c:7a:08:
                    f4:95:8b:ae:0b:54:2f:2b:9f:d1:7f:6a:0d:48:39:
                    ee:30:5b:55:83:b1:de:d7:55:a9:4e:29:b3:2f:4a:
                    bf:69:9f:98:37:45:3c:be:35:36:43:fb:9d:14:99:
                    52:38:20:6a:3f:3b:81:89:01:93:9e:a3:0d:39:18:
                    45:3c:e1:4b:eb:09:61:7e:aa:b6:08:e8:5d:b6:c4:
                    b7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:60:DE:1D:B5:3C:FA:E2:65:4E:6F:79:7B:3E:48:AE:EB:E2:71:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/04aa6a30-f792-3b24-ad60-10aa9f9aee3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8900:1000::/36
                  2605:8900:3000::/36
                  2605:8900:5000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:fc:c5:b5:e9:94:5e:6b:28:40:7a:71:2d:b8:e3:10:7b:73:
         48:0e:a1:b8:2d:db:56:6a:9a:64:55:c4:c7:82:1d:45:60:d9:
         32:93:87:70:82:d6:15:a5:87:59:58:74:04:b7:bc:22:c9:bf:
         bd:a5:7a:6b:14:40:b0:04:f2:c3:35:ad:55:5c:04:10:ed:ee:
         ee:34:0f:10:0b:c0:ac:e0:3c:c3:56:58:b4:ab:4e:74:18:34:
         88:85:55:2b:9f:42:29:29:4b:18:8c:e4:56:1d:6a:ea:e5:81:
         4d:05:d8:0b:9e:bf:44:49:66:07:ef:e0:19:14:20:15:e1:bc:
         9d:e4:0f:47:7c:85:c1:b4:80:bc:45:52:24:f0:d8:b1:21:f9:
         ad:24:d9:c7:70:3a:8d:4a:cb:ea:f7:88:7f:60:95:2b:d5:80:
         b4:89:1d:b7:20:77:1f:bd:13:18:d6:68:fe:63:07:58:86:60:
         bd:e6:16:1c:85:53:90:61:31:54:cf:d6:93:9b:a9:47:71:4b:
         5b:e4:27:b5:9f:72:f6:0c:1b:24:87:76:ed:e4:f8:94:67:59:
         89:f2:51:dc:42:25:bc:2a:90:1e:e0:20:a2:03:7b:a3:cb:bd:
         a0:7e:88:e0:8a:53:04:b0:45:92:14:aa:cc:cb:7c:4a:a2:77:
         70:9b:b0:9b
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWElavsMXewIAM7x61gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw
YzRkMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk
ZDFlM2Q1YjYtYzE0Yy00ZDcxLWEzNTYtN2QxYzhhM2Q5NmNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupUxrZmxM6UZ1dtWiPKxJxNk+zJJ3Eoa0n9i
zIIDoltlLiawLno147oVrJS+i/KN2462Y0xdin1DBh5xl8itSauQ/IbpsZrw2JUd
kve8uF6NdgHg2bNubbzRRZ7xqh7v8DA46/Sv2w8MTQ8YD5FaBljdiaAgR50aUJpp
1A4oPvZZSCro1JnGBAlw5XXQLdNc2yR4Wwy/15HYUdY3yX1/aU/CPIlfDmrngzsw
EBCbWeAMegj0lYuuC1QvK5/Rf2oNSDnuMFtVg7He11WpTimzL0q/aZ+YN0U8vjU2
Q/udFJlSOCBqPzuBiQGTnqMNORhFPOFL6wlhfqq2COhdtsS3tQIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFFpg3h21PPriZU5veXs+SK7r4nGyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz
YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvMDRhYTZhMzAtZjc5Mi0z
YjI0LWFkNjAtMTBhYTlmOWFlZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0
ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3
MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl
YWI4NzBjNGQuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAAjAYAwYEJgWJABAD
BgQmBYkAMAMGBCYFiQBQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAF/8xbXplF5rKEB6cS244xB7c0gOobgt
21ZqmmRVxMeCHUVg2TKTh3CC1hWlh1lYdAS3vCLJv72lemsUQLAE8sM1rVVcBBDt
7u40DxALwKzgPMNWWLSrTnQYNIiFVSufQikpSxiM5FYdaurlgU0F2Auev0RJZgfv
4BkUIBXhvJ3kD0d8hcG0gLxFUiTw2LEh+a0k2cdwOo1Ky+r3iH9glSvVgLSJHbcg
dx+9ExjWaP5jB1iGYL3mFhyFU5BhMVTP1pObqUdxS1vkJ7WfcvYMGySHdu3k+JRn
WYnyUdxCJbwqkB7gIKIDe6PLvaB+iOCKUwSwRZIUqszLfEqid3CbsJs=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:50 2025 by rpki-client on console.sobornost.net