Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/340a3e8a-e2fd-392e-99e2-8b41efc2edb5.roa
File:                     340a3e8a-e2fd-392e-99e2-8b41efc2edb5.roa (raw, json)
Hash identifier:          fI00/21d16hFE4dYC6OWeFW1eLdR0E+Zfg9QRyEfNGk=
Subject key identifier:   98:88:BA:99:54:F4:CE:A3:0C:30:4B:16:1A:0B:17:B8:EA:05:19:D6
Certificate issuer:       /CN=2fea4f6a-bb4e-46be-b327-330bf8f7e209
Certificate serial:       010D0C9F432858494CC9412B0ECA5E842F883500
Authority key identifier: 46:B8:BD:76:5E:8D:0E:C9:9A:1D:62:0D:0B:0E:2D:E8:BE:4E:D7:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/340a3e8a-e2fd-392e-99e2-8b41efc2edb5.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     14618
IP address blocks:        2602:810:6009::/48 maxlen: 64

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:41:2b:0e:ca:5e:84:2f:88:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fea4f6a-bb4e-46be-b327-330bf8f7e209
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=a142e7f2-1473-42ec-b4e5-9756d03ca7d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1e:0c:ae:24:47:5f:bb:3d:cd:95:08:1b:18:
                    39:a9:15:c1:cf:f8:f2:c5:bb:1b:9b:60:df:2c:89:
                    55:da:d7:86:81:f7:8a:ba:c6:e9:70:9e:49:8a:bc:
                    e0:0a:11:f8:54:f7:5d:ce:7d:8d:a8:37:8a:9e:95:
                    1b:0e:e6:34:35:ae:14:14:d9:ce:ed:54:97:80:55:
                    de:1f:04:7f:a1:93:21:49:c8:40:51:e6:0b:52:32:
                    51:19:43:97:27:d9:b5:da:0c:95:4a:61:e3:42:42:
                    2c:05:97:e3:d1:1c:68:a9:e1:32:1b:df:0d:89:9a:
                    10:eb:13:ac:ca:c8:82:46:ca:6d:51:f8:ce:5d:f1:
                    77:08:96:75:7e:3a:77:51:69:80:ca:17:c3:78:07:
                    51:7a:17:30:f8:c1:08:f5:cd:2a:21:d6:e1:5a:7b:
                    cc:cb:62:dd:b8:64:3c:9d:39:7c:91:4c:4b:ee:c4:
                    2e:21:4a:34:33:3b:e9:3a:fc:7e:56:f6:f3:44:81:
                    b2:2e:a4:41:35:ea:a2:78:04:b9:1a:b0:ce:8a:21:
                    40:15:eb:fe:aa:11:5f:d1:7f:a7:dd:5a:04:2a:f5:
                    c6:c2:b3:f2:25:32:38:bc:ca:6e:fc:66:89:28:44:
                    86:56:59:d3:52:2a:22:98:9c:fc:7c:42:df:08:ff:
                    61:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:88:BA:99:54:F4:CE:A3:0C:30:4B:16:1A:0B:17:B8:EA:05:19:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/340a3e8a-e2fd-392e-99e2-8b41efc2edb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.crl

            X509v3 Authority Key Identifier:
                keyid:46:B8:BD:76:5E:8D:0E:C9:9A:1D:62:0D:0B:0E:2D:E8:BE:4E:D7:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:810:6009::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:32:1c:17:ae:20:45:87:4e:04:6b:3f:47:ed:fc:ef:65:78:
         a0:c0:79:18:44:29:f5:e3:ba:1c:ae:26:31:33:9f:2f:d4:b3:
         ea:fc:c4:00:e9:ca:64:bc:9d:d9:eb:e9:be:08:9c:0b:78:86:
         e8:16:83:5b:32:a8:ca:cf:91:4a:e7:52:77:86:25:b6:57:d1:
         69:dd:e8:75:ac:23:ba:8a:93:c3:40:e9:6f:99:53:e9:05:54:
         e5:9a:d2:8b:de:b2:c8:0f:9e:67:e9:3a:7f:32:07:04:d1:22:
         81:4e:15:2b:ca:96:79:e7:fb:df:49:73:ec:12:e8:8d:8e:e8:
         60:88:b1:a5:28:27:f6:d6:d8:3b:e1:35:da:cf:43:22:80:48:
         8d:7f:e0:88:a2:d6:fa:74:0e:41:2f:a7:77:55:22:41:88:33:
         71:a9:22:5b:f9:08:f4:50:5e:6a:a9:23:b9:09:ed:b1:38:39:
         15:35:57:eb:b0:09:03:30:ba:ed:bf:78:96:35:e4:fc:b0:80:
         69:fe:26:bb:a9:b0:86:ab:29:41:ea:ba:a1:36:5c:2d:2e:8b:
         38:de:46:5d:39:5f:43:4a:e8:9c:18:ca:33:e7:01:f4:f1:a4:
         36:14:b4:5c:71:71:00:78:95:03:cb:88:8e:96:b8:43:46:a4:
         4e:f9:fc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----