Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/a21b6903-d5e4-3748-9b67-77206fb7f440.roa
File:                     a21b6903-d5e4-3748-9b67-77206fb7f440.roa (raw, json)
Hash identifier:          rWA83cyi8Y3pKnf4CRY7ANfUdJ/XxK2UN9PdkBmDS/U=
Subject key identifier:   8C:6A:12:08:F4:DF:8C:52:4C:A7:A0:42:F9:31:07:6F:8B:2A:38:55
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F432858495D89619AB10B3E8D8F87C600
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/a21b6903-d5e4-3748-9b67-77206fb7f440.roa
Signing time:             Mon 31 Mar 2025 01:00:47 +0000
ROA not before:           Mon 31 Mar 2025 01:00:47 +0000
ROA not after:            Sun 29 Jun 2025 01:00:47 +0000
asID:                     137409
IP address blocks:        2606:f18b::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5d:89:61:9a:b1:0b:3e:8d:8f:87:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Mar 31 01:00:47 2025 GMT
            Not After : Jun 29 01:00:47 2025 GMT
        Subject: CN=ab393eeb-c8aa-4403-a4a0-1e2400721c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9a:ba:e6:8f:d6:94:c7:85:45:48:bd:95:b6:
                    fd:f4:af:5c:d5:11:04:53:05:e6:92:2b:6e:e8:ba:
                    53:bb:3c:a7:87:ad:ae:c0:c7:27:64:fd:92:4c:fd:
                    9c:28:4f:5b:8d:9d:b3:31:88:06:0d:49:53:e6:d7:
                    0c:98:3a:cb:17:2a:9d:b1:5a:6a:2d:05:fc:6c:a0:
                    68:dd:fa:e5:bc:79:d3:78:65:60:db:31:4f:d4:39:
                    5e:49:ce:fe:10:79:b6:2c:cc:d2:81:a9:93:d0:e7:
                    d4:1d:c7:71:a0:32:d7:0a:13:f7:46:37:7d:ed:36:
                    86:81:56:83:5c:21:45:f1:df:75:54:61:ed:7c:53:
                    e6:4b:99:ef:42:6b:64:f6:31:df:2a:e5:3b:0d:87:
                    7b:cb:c3:d1:bc:f9:cc:0c:bd:d4:2b:ca:8a:74:b8:
                    ef:3c:64:c2:e7:5a:8e:bf:37:10:17:3d:3d:a5:ee:
                    f8:bc:a8:3b:83:3e:70:b4:20:dc:96:fa:86:26:9d:
                    88:aa:8c:bb:a0:be:6d:c3:d1:7f:d5:47:12:ba:f5:
                    56:93:1a:5f:80:99:16:b6:ba:63:55:28:c0:dd:10:
                    a5:a2:ee:9c:bf:92:f2:21:90:b7:b0:51:1c:be:cd:
                    32:e3:54:bd:4b:cb:2c:a5:99:63:ac:ab:ca:8a:15:
                    d9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6A:12:08:F4:DF:8C:52:4C:A7:A0:42:F9:31:07:6F:8B:2A:38:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/a21b6903-d5e4-3748-9b67-77206fb7f440.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f18b::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:d3:bf:7f:5c:68:7d:f2:99:69:ed:aa:ed:d9:84:41:de:7d:
         a7:56:ef:41:8a:98:66:34:af:09:b1:79:b8:94:d4:61:85:56:
         66:9b:0e:1b:13:c6:53:eb:cc:a6:3b:ed:1f:0a:c1:4b:4b:02:
         37:2f:19:8c:d6:10:bb:4a:5c:a1:39:cb:03:c0:16:50:a5:53:
         92:05:8c:fe:2d:dd:e7:2d:4f:9b:6c:59:bf:d4:ff:69:ad:0d:
         3e:08:6c:d6:23:fc:e4:85:4b:6e:c8:f3:1b:b7:70:4a:a3:72:
         4d:24:68:85:ab:35:ba:f8:28:fa:c0:24:de:5c:09:1c:09:65:
         1d:2c:d0:9e:c9:60:f6:34:06:83:44:4d:c3:fc:59:ef:95:4e:
         de:99:3d:5e:dd:5b:90:30:60:85:c5:1b:36:9d:bd:06:d2:ef:
         b6:25:92:0d:a4:83:33:59:87:17:6e:44:21:7a:e1:e3:f5:32:
         ec:bf:75:46:07:95:61:ed:9b:67:9e:4d:ba:d8:0f:62:51:46:
         cf:52:18:18:1f:86:66:8c:8e:42:6a:24:2e:fa:4c:dc:fd:16:
         19:6c:2f:74:6a:80:ae:b9:57:0e:d1:2f:9a:55:c8:7e:e9:50:
         9a:67:fa:c1:ff:08:9a:7f:f7:4e:a6:87:58:80:a3:1e:ab:85:
         0a:2c:39:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----