Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b602d7b8-e7ed-3cd6-b5d4-baf1effa8d31.roa
File:                     b602d7b8-e7ed-3cd6-b5d4-baf1effa8d31.roa (raw, json)
Hash identifier:          B6dFbJU15ajLChwIKxfMEhbPAGJZ4emhKSCykVIawvo=
Subject key identifier:   A6:98:1E:2E:57:A6:78:09:F9:FA:D8:B2:66:B5:AA:71:E7:28:E6:55
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F432858496BAB5A4494BCF7588F58D200
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b602d7b8-e7ed-3cd6-b5d4-baf1effa8d31.roa
Signing time:             Sat 05 Apr 2025 02:30:34 +0000
ROA not before:           Sat 05 Apr 2025 02:30:34 +0000
ROA not after:            Fri 04 Jul 2025 02:30:34 +0000
asID:                     19905
IP address blocks:        2604:2e8d:f000::/38 maxlen: 38

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6b:ab:5a:44:94:bc:f7:58:8f:58:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr  5 02:30:34 2025 GMT
            Not After : Jul  4 02:30:34 2025 GMT
        Subject: CN=f54a691b-6f00-4ac0-b05a-7bf6dc514578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1e:35:8a:88:59:ef:7b:05:05:42:89:81:38:
                    f0:c9:c6:1b:2b:b4:ac:f0:c7:28:05:f7:bf:7e:23:
                    05:55:00:38:c1:33:40:6b:a6:4d:5f:9d:87:4a:15:
                    f3:80:03:47:85:d9:6e:e8:fd:75:4a:0d:2b:3c:40:
                    ee:26:55:02:a0:d7:b0:6c:ec:18:de:aa:c3:47:85:
                    85:a8:6e:12:51:0d:39:1d:ee:7a:27:38:5b:3c:36:
                    5d:68:70:3f:e6:15:ed:e5:77:41:3b:41:3a:8a:ec:
                    a5:24:00:62:1e:44:44:38:7b:26:63:26:e9:66:ca:
                    69:85:01:f7:86:ea:c9:1e:5a:e5:33:ea:dc:61:89:
                    3d:74:56:71:54:62:41:ae:cf:14:6e:33:61:1a:04:
                    44:6e:c9:0f:0d:fa:83:0e:c5:f4:76:d7:50:3f:85:
                    bd:ff:72:6f:21:73:65:ce:9d:d6:34:4b:b5:65:a7:
                    32:9b:97:c8:f2:01:7d:44:9c:8f:4e:58:57:a4:7d:
                    8e:61:a9:f3:4b:c2:bb:4f:03:a6:03:8e:f5:b3:31:
                    2f:9b:21:aa:74:78:c2:4c:f0:8e:e9:a8:f2:99:5d:
                    01:1e:23:b6:a9:84:7f:16:10:ee:08:40:94:9e:f0:
                    2d:9f:92:98:e4:12:c3:07:f1:03:63:19:a2:75:80:
                    15:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:98:1E:2E:57:A6:78:09:F9:FA:D8:B2:66:B5:AA:71:E7:28:E6:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b602d7b8-e7ed-3cd6-b5d4-baf1effa8d31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:f000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:cd:87:03:ab:50:3b:ea:1f:6d:4a:7c:71:fb:b3:eb:42:69:
         1b:30:40:e6:1d:60:6c:63:ef:5f:b6:1b:b2:52:bb:de:a5:4c:
         96:d7:1d:2d:a9:00:b2:db:05:50:45:d3:df:53:b5:f6:15:12:
         40:39:a5:5d:c2:b8:7b:d4:25:ad:12:5c:27:74:c0:a3:37:47:
         ff:48:0e:a2:1f:ec:81:3b:d5:83:90:18:05:a3:e7:d8:6e:e5:
         47:ba:a5:6b:e5:80:38:0b:27:09:1f:05:62:7d:83:5f:4a:3a:
         02:c1:5e:64:fb:84:95:d2:f3:42:f9:12:0a:d9:cd:fc:34:2f:
         70:87:42:ce:34:e7:eb:67:91:d4:c0:a8:08:f1:3e:2f:72:9f:
         45:72:ba:2d:a5:93:17:06:84:c8:4c:49:c9:da:53:b2:58:de:
         f3:51:f1:af:6a:29:4f:f2:61:5d:61:e5:b2:b6:8d:78:86:23:
         8f:7f:fb:e0:a8:97:6f:92:53:b9:68:12:6e:7b:56:18:65:43:
         0b:c2:aa:1e:60:88:0a:3c:c3:5f:1c:fe:8a:d6:21:eb:66:1c:
         40:cc:26:08:5d:bd:99:9d:c8:fe:93:bf:6b:52:41:60:28:29:
         19:db:85:e8:e5:00:ca:67:4e:21:5d:c6:ec:08:cb:79:8a:e0:
         42:e6:2b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:53 2025 by rpki-client on console.sobornost.net