Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b29e0912-87c7-4a29-8879-369ccb6eae7f/fc404d92-05de-37fc-a4ea-2ec708d5d199.roa
File:                     fc404d92-05de-37fc-a4ea-2ec708d5d199.roa (raw, json)
Hash identifier:          SgoW4GpcRqNBBtzspeEI+b+4tgZPhm1JWRFAdX4rUMs=
Subject key identifier:   15:4C:E6:98:91:1B:16:50:7B:8C:3A:D8:35:41:A0:8C:59:18:12:A7
Certificate issuer:       /CN=b29e0912-87c7-4a29-8879-369ccb6eae7f
Certificate serial:       010D0C9F43285849403949B74B264812D4908580
Authority key identifier: B7:38:4B:1F:E4:27:47:68:89:35:67:02:A1:BC:CE:75:83:45:BE:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b29e0912-87c7-4a29-8879-369ccb6eae7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b29e0912-87c7-4a29-8879-369ccb6eae7f/fc404d92-05de-37fc-a4ea-2ec708d5d199.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     11972
IP address blocks:        2602:fa29::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:49:b7:4b:26:48:12:d4:90:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b29e0912-87c7-4a29-8879-369ccb6eae7f
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=1129df92-b86f-4e41-af37-6a43703709ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1f:26:89:77:cd:67:7b:1d:07:c7:cf:55:38:
                    61:09:79:f5:c7:4c:56:6b:4f:59:05:42:bf:c9:63:
                    3d:1e:34:11:1a:77:e3:29:57:3d:6c:35:be:16:56:
                    73:81:ae:55:1b:2f:cf:ce:1d:9d:55:53:ba:8b:a8:
                    3e:74:09:50:db:5f:62:ed:04:29:db:97:27:1a:70:
                    df:36:a0:37:6b:68:31:e6:f9:1e:a6:06:8c:86:c5:
                    46:68:ab:4f:eb:1a:07:3e:ce:ef:0f:77:38:85:9e:
                    59:68:2a:d1:eb:17:e1:b9:64:cf:11:89:db:42:c1:
                    3c:4a:d4:17:80:ac:96:c8:e3:c8:7d:12:7d:4e:20:
                    e9:13:fd:c2:af:e7:8b:1d:41:95:ed:b3:47:42:a6:
                    28:ae:23:51:a9:c4:93:24:03:b3:6e:77:4b:b8:21:
                    bf:91:b6:00:d1:8b:26:56:44:c6:18:31:ed:80:ac:
                    32:66:1d:3a:f5:37:9a:8d:dd:e9:16:a8:da:5e:f9:
                    3f:6a:24:c9:13:dc:ed:a1:89:fb:b5:e9:a1:36:2c:
                    53:16:22:26:b5:90:47:b9:a0:bc:40:0f:a9:5e:01:
                    43:a2:6a:11:b3:ee:50:4d:9f:4c:42:27:b9:98:ef:
                    56:39:84:71:28:61:10:c1:a4:54:b8:a9:82:37:ae:
                    de:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4C:E6:98:91:1B:16:50:7B:8C:3A:D8:35:41:A0:8C:59:18:12:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b29e0912-87c7-4a29-8879-369ccb6eae7f/fc404d92-05de-37fc-a4ea-2ec708d5d199.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b29e0912-87c7-4a29-8879-369ccb6eae7f/b29e0912-87c7-4a29-8879-369ccb6eae7f.crl

            X509v3 Authority Key Identifier:
                keyid:B7:38:4B:1F:E4:27:47:68:89:35:67:02:A1:BC:CE:75:83:45:BE:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b29e0912-87c7-4a29-8879-369ccb6eae7f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa29::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:47:61:0b:9d:d3:40:81:14:38:82:25:15:73:ce:f7:66:93:
         d7:59:a3:3e:90:12:9c:d7:d9:18:ac:32:09:6b:0c:c4:f5:08:
         bb:81:65:f6:99:41:7b:70:74:94:8a:9f:d5:a4:8e:22:35:50:
         b8:e3:1b:65:61:12:de:9e:5f:3a:22:42:98:b1:9b:e8:f7:ec:
         10:a0:b2:5f:eb:f4:31:d6:74:56:bb:d6:3e:6e:82:f8:db:57:
         0e:66:ac:56:f9:68:24:37:12:4d:16:d0:e5:ea:bb:26:47:ee:
         6f:da:ca:57:06:b4:81:d7:df:21:fd:bf:f8:24:4e:bc:ba:56:
         76:df:e2:76:d1:96:73:a4:a7:e7:a1:86:b9:ca:03:82:79:d0:
         21:b5:68:bc:aa:21:b9:17:90:e1:3a:79:f8:ae:61:e4:38:ff:
         98:5d:27:13:59:e9:da:84:aa:6f:23:d9:5a:00:22:82:bf:e3:
         59:66:7b:08:74:b7:36:f9:59:fa:f8:11:69:e1:02:bf:44:fa:
         75:a1:0f:92:81:78:a7:87:cc:fd:d5:2e:68:ee:9b:6e:b9:5e:
         c2:8b:ba:bb:53:87:86:4a:57:0a:41:dc:ec:54:5c:2c:8a:e0:
         d0:4c:8a:1c:d3:b5:8f:f4:a7:3b:f9:dd:eb:43:62:8d:bb:71:
         1f:4c:c1:42
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWElAOUm3SyZIEtSQhYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjI5ZTA5MTItODdjNy00YTI5LTg4NzktMzY5Y2NiNmVh
ZTdmMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk
MTEyOWRmOTItYjg2Zi00ZTQxLWFmMzctNmE0MzcwMzcwOWFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhB8miXfNZ3sdB8fPVThhCXn1x0xWa09ZBUK/
yWM9HjQRGnfjKVc9bDW+FlZzga5VGy/Pzh2dVVO6i6g+dAlQ219i7QQp25cnGnDf
NqA3a2gx5vkepgaMhsVGaKtP6xoHPs7vD3c4hZ5ZaCrR6xfhuWTPEYnbQsE8StQX
gKyWyOPIfRJ9TiDpE/3Cr+eLHUGV7bNHQqYoriNRqcSTJAOzbndLuCG/kbYA0Ysm
VkTGGDHtgKwyZh069Teajd3pFqjaXvk/aiTJE9ztoYn7temhNixTFiImtZBHuaC8
QA+pXgFDomoRs+5QTZ9MQie5mO9WOYRxKGEQwaRUuKmCN67eWQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBVM5piRGxZQe4w62DVBoIxZGBKnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMjll
MDkxMi04N2M3LTRhMjktODg3OS0zNjljY2I2ZWFlN2YvZmM0MDRkOTItMDVkZS0z
N2ZjLWE0ZWEtMmVjNzA4ZDVkMTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjI5ZTA5MTItODdjNy00YTI5LTg4
NzktMzY5Y2NiNmVhZTdmL2IyOWUwOTEyLTg3YzctNGEyOS04ODc5LTM2OWNjYjZl
YWU3Zi5jcmwwHwYDVR0jBBgwFoAUtzhLH+QnR2iJNWcCobzOdYNFvvUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iMjllMDkxMi04N2M3LTRhMjktODg3OS0zNjlj
Y2I2ZWFlN2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL6KQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAgUdhC53TQIEUOIIlFXPO92aT11mjPpASnNfZGKwyCWsMxPUIu4Fl
9plBe3B0lIqf1aSOIjVQuOMbZWES3p5fOiJCmLGb6PfsEKCyX+v0MdZ0VrvWPm6C
+NtXDmasVvloJDcSTRbQ5eq7Jkfub9rKVwa0gdffIf2/+CROvLpWdt/idtGWc6Sn
56GGucoDgnnQIbVovKohuReQ4Tp5+K5h5Dj/mF0nE1np2oSqbyPZWgAigr/jWWZ7
CHS3NvlZ+vgRaeECv0T6daEPkoF4p4fM/dUuaO6bbrlewou6u1OHhkpXCkHc7FRc
LIrg0EyKHNO1j/SnO/nd60NijbtxH0zBQg==
-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:47 2025 by rpki-client on console.sobornost.net