Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8c2edafd-cabf-41fb-a360-7f06dd982529/15c3d643-97ef-3423-a734-50fcae0488f8.roa
File:                     15c3d643-97ef-3423-a734-50fcae0488f8.roa (raw, json)
Hash identifier:          U8i/QDvEfPlLhvoPNk1VmgHepLuiGqTn2Uh7o+o27Ns=
Subject key identifier:   04:FB:C2:6B:DF:81:7E:8D:6D:38:D5:F0:93:3C:A8:8A:7F:01:C4:81
Certificate issuer:       /CN=8c2edafd-cabf-41fb-a360-7f06dd982529
Certificate serial:       010D0C9F432858491511565C6A96E2840A4E6140
Authority key identifier: 82:81:2B:E4:FB:03:3A:95:F7:77:E0:7F:55:59:95:AD:59:04:4F:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8c2edafd-cabf-41fb-a360-7f06dd982529.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8c2edafd-cabf-41fb-a360-7f06dd982529/15c3d643-97ef-3423-a734-50fcae0488f8.roa
Signing time:             Wed 05 Mar 2025 02:00:40 +0000
ROA not before:           Wed 05 Mar 2025 02:00:40 +0000
ROA not after:            Tue 03 Jun 2025 01:00:40 +0000
asID:                     397454
IP address blocks:        2605:3440::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:15:11:56:5c:6a:96:e2:84:0a:4e:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c2edafd-cabf-41fb-a360-7f06dd982529
        Validity
            Not Before: Mar  5 02:00:40 2025 GMT
            Not After : Jun  3 01:00:40 2025 GMT
        Subject: CN=92b5b38c-324e-4481-9755-fd8bf8b4e689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8e:df:6a:3d:2c:cd:f5:84:a5:ae:c3:d1:08:
                    b5:91:2a:be:bc:07:37:61:36:bf:66:3f:36:41:bf:
                    8d:ee:4b:19:5f:0e:dd:68:68:60:06:f7:4d:3f:f4:
                    f5:4c:f9:e1:35:b4:4d:98:75:96:0e:c2:3b:03:07:
                    24:05:e4:06:56:65:c6:b1:62:a5:6a:c1:cd:0b:52:
                    9e:d3:9a:3d:1c:ba:29:46:f5:03:33:80:37:fe:e8:
                    d9:11:7a:57:8d:5f:11:47:85:26:84:4b:c0:51:8e:
                    0a:97:f4:59:ab:e7:31:16:81:36:32:f7:a8:d3:f3:
                    ea:e5:ed:6e:d4:e2:34:02:d7:eb:dd:9c:11:40:8e:
                    05:bf:77:cf:28:34:3f:20:dd:95:64:9e:f5:4e:bb:
                    71:30:f8:a7:46:44:1c:27:33:57:7e:75:6d:c6:a2:
                    20:7d:64:af:5a:cf:a5:9f:45:b0:2b:30:7c:e9:9a:
                    62:c4:75:d6:b9:33:9b:0d:06:e6:f5:96:ad:4c:99:
                    f9:71:3f:06:88:0e:87:39:13:6e:00:f4:ce:b4:ea:
                    98:4d:4d:fd:a1:f0:af:f7:f0:6d:3e:81:7f:db:bd:
                    64:85:8a:24:f9:3d:17:2d:f6:e2:97:97:07:7e:25:
                    a7:2d:e8:df:59:fc:2a:69:63:78:4d:6c:39:00:94:
                    e5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FB:C2:6B:DF:81:7E:8D:6D:38:D5:F0:93:3C:A8:8A:7F:01:C4:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8c2edafd-cabf-41fb-a360-7f06dd982529/15c3d643-97ef-3423-a734-50fcae0488f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8c2edafd-cabf-41fb-a360-7f06dd982529/8c2edafd-cabf-41fb-a360-7f06dd982529.crl

            X509v3 Authority Key Identifier:
                keyid:82:81:2B:E4:FB:03:3A:95:F7:77:E0:7F:55:59:95:AD:59:04:4F:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8c2edafd-cabf-41fb-a360-7f06dd982529.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:3440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:56:44:25:eb:7a:14:d5:7f:61:69:28:c0:3b:2f:9a:dd:a4:
         c2:2b:b6:f7:73:4d:9b:db:97:a1:86:3b:0e:24:ab:2e:f3:9d:
         e5:c2:2a:10:b1:a6:0b:05:97:e9:19:e6:29:a6:83:c7:43:a2:
         c2:47:bd:cf:6e:c0:75:79:25:b2:bc:10:23:b8:e8:36:b0:ad:
         09:c6:f9:b8:bb:08:2a:e3:45:a1:93:6e:5e:77:b7:2e:ab:bc:
         30:49:56:59:7a:cd:39:7e:5f:1b:2b:1a:7c:c7:59:1f:52:39:
         96:55:b9:e7:3d:69:c0:6d:22:29:31:ca:18:e5:fa:a4:8d:6d:
         23:34:e5:77:8c:db:7b:02:12:37:f1:12:45:8b:09:16:b3:cc:
         2c:ea:ea:f5:2e:d3:43:44:b4:f6:7d:3d:ca:9a:f7:ab:aa:56:
         01:7a:b2:c1:7e:57:af:7c:db:76:14:36:53:f9:0e:65:aa:6f:
         60:08:5e:a8:13:9f:50:8d:76:da:2d:e4:2e:73:6d:55:5f:8d:
         82:fb:bc:63:3d:5d:92:6e:bc:96:c8:09:14:b8:0c:84:b3:26:
         39:2b:e0:f4:be:57:c8:ee:52:f0:d7:7d:29:a2:74:41:ce:7d:
         65:4d:98:69:68:1f:a6:0b:3f:1e:72:11:92:8e:82:cc:10:04:
         8e:90:d1:d7
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkVEVZcapbihApOYUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGMyZWRhZmQtY2FiZi00MWZiLWEzNjAtN2YwNmRkOTgy
NTI5MB4XDTI1MDMwNTAyMDA0MFoXDTI1MDYwMzAxMDA0MFowLzEtMCsGA1UEAxMk
OTJiNWIzOGMtMzI0ZS00NDgxLTk3NTUtZmQ4YmY4YjRlNjg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY7faj0szfWEpa7D0Qi1kSq+vAc3YTa/Zj82
Qb+N7ksZXw7daGhgBvdNP/T1TPnhNbRNmHWWDsI7AwckBeQGVmXGsWKlasHNC1Ke
05o9HLopRvUDM4A3/ujZEXpXjV8RR4UmhEvAUY4Kl/RZq+cxFoE2Mveo0/Pq5e1u
1OI0Atfr3ZwRQI4Fv3fPKDQ/IN2VZJ71TrtxMPinRkQcJzNXfnVtxqIgfWSvWs+l
n0WwKzB86ZpixHXWuTObDQbm9ZatTJn5cT8GiA6HORNuAPTOtOqYTU39ofCv9/Bt
PoF/271khYok+T0XLfbil5cHfiWnLejfWfwqaWN4TWw5AJTlgQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAT7wmvfgX6NbTjV8JM8qIp/AcSBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YzJl
ZGFmZC1jYWJmLTQxZmItYTM2MC03ZjA2ZGQ5ODI1MjkvMTVjM2Q2NDMtOTdlZi0z
NDIzLWE3MzQtNTBmY2FlMDQ4OGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGMyZWRhZmQtY2FiZi00MWZiLWEz
NjAtN2YwNmRkOTgyNTI5LzhjMmVkYWZkLWNhYmYtNDFmYi1hMzYwLTdmMDZkZDk4
MjUyOS5jcmwwHwYDVR0jBBgwFoAUgoEr5PsDOpX3d+B/VVmVrVkET78wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC84YzJlZGFmZC1jYWJmLTQxZmItYTM2MC03ZjA2
ZGQ5ODI1MjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgU0QDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAnVkQl63oU1X9haSjAOy+a3aTCK7b3c02b25ehhjsOJKsu853lwioQ
saYLBZfpGeYppoPHQ6LCR73PbsB1eSWyvBAjuOg2sK0Jxvm4uwgq40Whk25ed7cu
q7wwSVZZes05fl8bKxp8x1kfUjmWVbnnPWnAbSIpMcoY5fqkjW0jNOV3jNt7AhI3
8RJFiwkWs8ws6ur1LtNDRLT2fT3KmverqlYBerLBflevfNt2FDZT+Q5lqm9gCF6o
E59QjXbaLeQuc21VX42C+7xjPV2SbryWyAkUuAyEsyY5K+D0vlfI7lLw130ponRB
zn1lTZhpaB+mCz8echGSjoLMEASOkNHX
-----END CERTIFICATE-----