Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/3d7c3eff-2ea6-36cd-8adf-94c767930e79.roa
File:                     3d7c3eff-2ea6-36cd-8adf-94c767930e79.roa (raw, json)
Hash identifier:          hswxq/XyT+FGx9EXDqiD2tNDQ/CH1G7/omZ7V5hEVjk=
Subject key identifier:   42:EA:B9:C6:F4:09:B0:D6:AF:3D:13:D8:1E:DD:AD:9F:CB:1D:73:F5
Certificate issuer:       /CN=18a928eb-48a5-4560-a217-36cb1ea32648
Certificate serial:       010D0C9F432858496CE45E0A80126DADF5D9DB00
Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/3d7c3eff-2ea6-36cd-8adf-94c767930e79.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     63150
IP address blocks:        2602:f988:88::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:5e:0a:80:12:6d:ad:f5:d9:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=fb10aeb9-cc48-4048-aa54-416b9ac1e1ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6a:5c:45:e7:a9:9c:84:d9:35:9a:66:98:22:
                    3c:b8:47:f7:67:a4:f1:e8:8a:1c:33:72:db:b2:24:
                    ef:12:dd:c2:cf:c7:82:0b:b8:13:eb:e8:c3:9b:be:
                    0f:1f:50:db:34:82:f7:8d:8e:a9:86:96:30:73:e3:
                    fb:cc:86:5b:54:1a:cb:34:90:5e:63:5b:9f:ae:fd:
                    e8:8f:7b:e1:45:36:e7:ba:c4:a3:5d:f8:af:82:e7:
                    c1:3a:0a:d1:b7:86:0f:34:9d:49:7c:4f:a6:e3:db:
                    ee:57:41:d3:48:40:02:50:6f:5d:2e:ba:99:e2:7a:
                    bd:91:19:7a:14:cc:66:bc:9d:bc:ce:7a:1f:7a:cb:
                    ec:3a:4d:e0:33:07:58:42:82:c9:bd:9d:f0:7c:56:
                    9e:07:57:86:df:a9:8f:be:2e:9d:27:ab:e8:a0:33:
                    24:33:a6:cc:ac:d1:90:bf:01:d8:b8:e1:72:f0:f7:
                    81:ea:e0:b5:f8:15:5b:b7:be:66:42:31:0a:da:91:
                    d3:2a:83:3b:1f:a4:99:86:39:6f:51:8f:d2:ff:a5:
                    4c:59:6f:0a:92:68:e0:17:a6:68:0a:55:6a:23:8e:
                    5c:f3:94:0a:2f:49:cc:f3:ca:dd:48:3f:39:04:1e:
                    61:26:5e:6e:62:d4:65:0e:0f:a7:75:4f:d6:3e:32:
                    f4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EA:B9:C6:F4:09:B0:D6:AF:3D:13:D8:1E:DD:AD:9F:CB:1D:73:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/3d7c3eff-2ea6-36cd-8adf-94c767930e79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl

            X509v3 Authority Key Identifier:
                keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f988:88::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:6b:d2:a5:25:7f:6f:5e:10:40:c5:02:b3:33:40:35:74:a5:
         3b:87:70:5e:21:55:cd:44:cb:32:f1:56:9e:b4:e3:b7:d3:f8:
         e0:57:4f:02:22:f1:0f:a4:2c:95:15:5d:53:32:35:99:b7:c2:
         27:9d:64:16:73:5a:ca:00:0a:5e:03:9f:09:a6:d3:66:20:42:
         78:52:7e:c3:95:f2:12:38:e4:56:0f:6d:50:d6:76:25:b3:17:
         e3:97:89:15:f4:75:99:79:8a:80:15:48:bc:ba:f3:17:a8:5a:
         dc:91:f0:08:88:16:24:b7:17:e5:c7:96:98:77:00:1e:5a:61:
         34:86:6e:a6:50:aa:5d:01:e8:f3:df:4d:a2:dd:5a:6d:53:a8:
         df:65:a2:99:f1:b1:72:83:2c:2c:77:a4:9e:af:da:2a:d6:6c:
         52:99:f5:7c:ab:99:f5:40:a9:64:10:99:f9:da:f3:ca:85:e6:
         78:f1:4f:c6:e1:f9:52:2d:7f:ca:ea:88:96:80:73:33:e6:5b:
         29:98:c4:88:2c:e4:84:72:49:d1:8d:c9:3a:54:6d:5a:99:75:
         19:13:27:42:9c:6e:c9:8c:f5:07:bf:e0:d2:b3:53:e0:28:a1:
         e1:01:8d:cf:3f:d0:6f:c7:b9:9c:f3:6c:06:54:c0:5a:05:7f:
         08:8a:f5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----