Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/47532b17-9044-3af0-b5cd-cf8eba5bdff2.roa
File:                     47532b17-9044-3af0-b5cd-cf8eba5bdff2.roa (raw, json)
Hash identifier:          zls8uu7OEhEhH+V98rLNYxVXhOtS/4MifSp+nvTug/I=
Subject key identifier:   55:B2:AB:4B:7D:B9:A5:48:2E:BF:9D:B4:11:3C:36:D3:2E:6A:BE:51
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849194197D6D00EC4A9C80CFEC0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/47532b17-9044-3af0-b5cd-cf8eba5bdff2.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     396563
IP address blocks:        2620:74:20::30/128 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:97:d6:d0:0e:c4:a9:c8:0c:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=cdb5d918-aa18-4d10-81ad-ff5487653939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e5:14:d9:31:51:aa:ea:eb:a0:d5:c1:23:35:
                    30:74:d5:19:bd:3e:90:fd:87:59:84:88:4d:5d:6b:
                    e6:03:07:37:3c:cb:f7:f1:93:f3:00:93:2c:26:34:
                    14:3e:08:71:08:52:e5:31:1d:3b:1a:ed:fe:2d:7c:
                    10:3b:c5:f2:30:d0:11:51:98:8e:6b:0f:64:f7:e1:
                    19:04:ad:32:0f:8d:16:38:0d:11:95:c1:85:4b:12:
                    44:4f:6f:81:d5:36:05:12:65:c7:cd:4c:a1:2b:43:
                    dd:be:2e:1a:67:33:3d:ba:dd:50:d1:17:76:29:de:
                    45:6f:3a:a3:ef:61:64:f6:85:5f:61:90:75:ee:3a:
                    64:e5:75:d9:6e:70:7c:09:17:a2:ea:c0:5b:55:88:
                    2f:a1:ea:78:9c:cf:ee:ed:8f:d0:a9:83:60:7e:53:
                    62:df:9d:b5:51:86:86:01:4d:a1:cf:ce:bc:62:31:
                    42:2a:bf:96:fd:fb:a3:ef:98:34:62:98:27:72:66:
                    57:8b:4e:3b:97:f6:12:a8:8a:9c:28:dd:99:4a:92:
                    72:2c:f0:d6:d5:ed:fb:c3:0b:27:96:29:45:60:fb:
                    ad:73:39:76:1c:ec:11:e8:b9:4d:88:3a:df:61:16:
                    e0:70:b9:c0:4f:0f:16:c4:e3:44:88:b0:72:88:cf:
                    33:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B2:AB:4B:7D:B9:A5:48:2E:BF:9D:B4:11:3C:36:D3:2E:6A:BE:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/47532b17-9044-3af0-b5cd-cf8eba5bdff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:88:dc:ee:85:92:a1:16:b9:93:51:d6:03:bc:f9:74:c4:89:
         b7:c9:48:85:59:8f:fb:80:55:b3:38:da:8d:ad:15:e8:9c:98:
         d3:d0:80:01:c4:60:00:3b:fe:b9:4d:85:aa:c2:11:60:7a:36:
         74:e1:4e:db:23:cd:a4:e8:6b:50:17:f3:b3:cb:67:5a:8c:de:
         9c:74:a8:c9:df:23:8c:c6:fb:71:22:a5:4e:bc:ae:57:7f:5d:
         ff:c3:84:89:9d:95:6d:16:52:15:e2:4c:45:84:8e:3b:2c:97:
         70:f7:52:23:2f:a0:2c:2c:84:b5:19:42:d1:5d:79:e5:5e:f6:
         2a:92:b7:da:09:46:39:6a:10:83:0f:31:a6:7a:0f:c3:9c:77:
         30:47:a9:0b:ac:c1:5f:5e:2b:0c:3f:73:1f:09:35:3b:d2:3a:
         e2:44:b9:5d:67:89:0d:17:95:27:a8:05:8c:a0:0a:23:80:d7:
         16:94:e4:b7:b9:d5:01:db:0e:49:5b:07:1f:69:90:b9:cb:91:
         92:88:de:b8:9a:28:31:6f:ab:4f:23:50:d0:6f:f1:2b:b7:a8:
         46:f1:01:66:ab:37:e7:0e:75:b7:e2:41:f8:fd:61:c9:3c:80:
         45:57:f3:8e:30:1d:c4:75:a5:dd:15:90:18:7c:01:36:7b:8e:
         f9:2a:07:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----