Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/06d44412-91c0-329a-857b-f8c871429cb4.roa
File:                     06d44412-91c0-329a-857b-f8c871429cb4.roa (raw, json)
Hash identifier:          G9XVpqHwEr6yBU3B/GsS9wYafh+3ETIkg197nh3lo0Y=
Subject key identifier:   B5:28:F3:B2:79:01:EB:70:6C:D0:E8:AD:D9:D2:8F:5C:D9:3C:FC:7C
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584919419492E1BCAC7448CE7580
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/06d44412-91c0-329a-857b-f8c871429cb4.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     396610
IP address blocks:        2620:74:20::30/128 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:94:92:e1:bc:ac:74:48:ce:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=a68139d6-5990-4ef5-a7fc-94f739a1f37e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:73:64:8a:67:d4:56:74:3f:68:e7:4c:99:f1:
                    e1:02:10:60:d9:e5:7f:d2:63:e2:ad:b1:d2:7c:63:
                    98:3d:ea:7b:57:c5:c0:d5:05:96:cd:75:8b:d6:5f:
                    91:ba:88:a4:40:c5:8d:42:c9:be:3f:06:4c:16:e2:
                    58:d9:64:97:1c:3c:5a:53:80:65:b2:c8:b7:08:b3:
                    8b:85:b2:4d:f1:77:83:f3:64:9d:61:9a:43:d7:1e:
                    40:4c:02:0b:a2:ad:d9:b8:49:ee:aa:37:e6:1e:d1:
                    ec:f8:3e:e7:2e:49:8f:4e:5e:58:ff:fa:ad:6e:68:
                    84:e7:5a:d0:52:8f:4a:45:10:4e:fc:04:7e:78:f5:
                    75:82:58:2a:8e:48:de:3d:25:dc:21:5c:eb:cd:2c:
                    fa:56:22:b0:dc:94:4e:74:e4:3f:70:f3:1f:99:af:
                    76:44:5c:94:c7:94:33:a7:3b:09:22:a5:4a:fa:76:
                    97:9e:c4:af:7f:92:7c:05:f3:c9:01:80:f3:09:4d:
                    b7:3e:73:2c:ce:4b:0c:b4:f5:08:9a:63:a1:27:82:
                    1a:ce:27:52:00:03:09:72:f1:97:f1:ab:d9:e5:2c:
                    0e:67:0f:e4:c3:33:c6:93:b8:5d:b4:d1:1a:23:b8:
                    ba:9d:ac:0b:04:c7:93:a5:85:41:7c:99:2e:eb:3e:
                    f2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:28:F3:B2:79:01:EB:70:6C:D0:E8:AD:D9:D2:8F:5C:D9:3C:FC:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/06d44412-91c0-329a-857b-f8c871429cb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:aa:c6:45:02:5f:7a:cd:63:3d:b0:6c:ae:69:e2:2f:c4:45:
         71:62:2f:14:56:15:bc:83:39:7d:41:7d:b0:3a:40:c5:1e:f8:
         01:37:40:0b:ad:7b:8d:c5:a2:84:f9:42:92:5d:87:d0:68:e2:
         7c:09:3f:70:73:eb:2d:40:29:be:6a:79:48:34:11:27:46:41:
         3b:73:75:fe:50:67:7f:58:16:73:9a:c1:a8:d2:a9:44:11:20:
         82:08:93:53:c9:66:82:eb:a6:83:2e:fb:d1:72:59:21:23:fd:
         6d:95:43:db:17:cb:ec:26:5e:fc:3b:e3:2e:d1:73:a8:fb:b1:
         83:84:08:00:00:21:98:38:53:ea:53:f2:b8:98:e1:1c:ad:25:
         88:36:94:76:b8:f9:03:d1:99:59:a0:42:e0:7f:42:3d:e7:86:
         06:9a:ce:e4:1c:2b:03:1b:35:e3:15:f2:c7:d0:22:5d:73:5f:
         af:3e:b1:a0:e6:37:36:21:07:d9:c9:46:97:a4:44:3c:a4:c4:
         c4:5a:e0:d3:9f:1a:20:07:47:17:27:cc:83:c1:28:67:05:de:
         8d:8b:8e:d8:da:95:76:b0:a0:4b:83:8a:14:e8:2d:f8:3b:43:
         ab:a5:6a:be:5f:9d:b8:2b:6f:97:84:4f:7e:c8:e6:f1:e1:d8:
         c5:63:87:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----