Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/01209408-231d-3c8c-aaa9-c043a6a54217.roa
File:                     01209408-231d-3c8c-aaa9-c043a6a54217.roa (raw, json)
Hash identifier:          ISeJJmzEs3Yss/gWMlqYputlaj/SpRJljf8PS8X39LI=
Subject key identifier:   B6:C0:E5:F6:2D:F5:8D:58:D3:A0:9C:9F:AB:A2:E4:79:02:BC:C7:AD
Certificate issuer:       /CN=775d20f6-1cfa-483e-be0f-d15eb548f66d
Certificate serial:       010D0C9F432858491ED6EAE0FC1B8C3C9C2CCC80
Authority key identifier: 1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/01209408-231d-3c8c-aaa9-c043a6a54217.roa
Signing time:             Sat 08 Mar 2025 14:00:52 +0000
ROA not before:           Sat 08 Mar 2025 14:00:52 +0000
ROA not after:            Fri 06 Jun 2025 13:00:52 +0000
asID:                     36692
IP address blocks:        2603:5004::/34 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1e:d6:ea:e0:fc:1b:8c:3c:9c:2c:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=775d20f6-1cfa-483e-be0f-d15eb548f66d
        Validity
            Not Before: Mar  8 14:00:52 2025 GMT
            Not After : Jun  6 13:00:52 2025 GMT
        Subject: CN=251d0b46-d82b-4008-b090-aa7f39bb5a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:58:7f:52:b7:b5:c7:6e:9c:ab:62:b9:6a:03:
                    8c:42:f7:ab:95:a4:09:c7:92:65:2c:61:e4:37:38:
                    94:b5:53:36:01:85:70:01:25:55:db:6f:e4:2a:08:
                    26:26:55:55:33:96:b0:ed:03:50:00:fb:1c:4b:f8:
                    bb:d8:2b:0f:6a:de:e0:bc:4c:8a:3a:bc:30:22:7f:
                    91:40:e6:d0:4d:4a:62:6b:20:dc:c0:c6:0d:df:b1:
                    bd:34:de:63:93:8a:32:c0:e3:3c:32:a0:96:46:eb:
                    ab:bd:2a:29:8a:83:4f:a4:e3:9a:82:a1:f7:b7:24:
                    50:ef:38:a8:09:3e:df:06:8a:5c:95:14:ca:07:e1:
                    9e:96:bb:33:31:c9:af:53:f1:e0:3c:60:7d:5f:cd:
                    ab:9f:82:9e:f3:ec:7d:f5:dd:77:82:91:83:d0:78:
                    8c:20:0d:85:47:89:eb:54:72:91:05:ff:d5:08:a9:
                    e5:fc:2b:0e:fa:24:50:5b:91:44:4a:6e:e3:95:fa:
                    a2:6b:d9:d0:1f:5d:9b:e6:77:62:e8:58:f4:27:a4:
                    e2:ea:67:3a:e2:f8:71:e9:a1:32:c9:7a:e8:8e:a1:
                    f5:28:65:11:f3:29:8e:e0:ff:75:ab:51:0e:1a:5a:
                    09:f7:49:ea:ff:23:e7:ac:cb:74:78:59:3d:94:72:
                    ad:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C0:E5:F6:2D:F5:8D:58:D3:A0:9C:9F:AB:A2:E4:79:02:BC:C7:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/01209408-231d-3c8c-aaa9-c043a6a54217.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.crl

            X509v3 Authority Key Identifier:
                keyid:1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:5004::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:94:66:f9:f4:12:88:77:0c:36:45:14:3a:d9:b8:37:cf:9b:
         0a:4c:ef:5c:bf:a6:77:2a:95:69:93:55:f1:9f:b5:fd:6f:16:
         92:ca:37:87:55:58:51:59:ac:5f:fc:c1:fc:31:77:d8:47:3f:
         f2:d1:fa:dd:d2:b1:e5:7a:71:7b:ea:43:73:b0:d9:fa:f4:29:
         71:ee:99:42:c8:88:8c:61:17:7e:69:a9:42:63:fc:05:43:f7:
         1b:0a:69:ca:f2:c3:16:9c:f1:28:42:77:50:f5:2b:fc:2b:4a:
         fe:35:ee:0c:9c:d7:29:5e:d1:b1:00:3c:0b:ff:0c:17:19:2c:
         c6:2c:2b:f1:bc:af:7c:d6:14:da:5f:d2:5c:35:81:1a:3d:4e:
         14:46:c9:95:79:b4:1a:ab:84:e5:6a:58:90:75:5d:08:f8:74:
         3a:9f:f7:80:11:7b:5c:15:4d:bb:fb:c6:8c:b1:9a:5f:5f:3f:
         0a:c7:39:35:b4:9d:30:4d:c0:38:02:8a:17:94:e0:0d:7f:17:
         4c:d3:55:9e:d1:73:d3:a8:72:0d:4d:54:19:80:ca:5c:91:27:
         d9:56:1d:bc:5e:8d:fd:36:03:e8:51:6c:0e:1c:d2:fa:81:d1:
         73:a2:6e:fd:60:92:de:12:55:ae:8f:5a:72:7e:0e:1e:1f:9b:
         99:e1:7d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----