Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/689d0932-9e89-3a1e-87c9-e79053ebc7ab.roa
File:                     689d0932-9e89-3a1e-87c9-e79053ebc7ab.roa (raw, json)
Hash identifier:          n6n5n/JMsrQSAjYTmqzWNrsJkKbnZRALM/txb1JF+cc=
Subject key identifier:   82:62:CC:FB:A5:2B:EE:BC:E0:8F:E0:30:71:3B:57:87:5E:DF:F4:33
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584973DEEC1D7947ECDA6A909FE0
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/689d0932-9e89-3a1e-87c9-e79053ebc7ab.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     62896
IP address blocks:        2001:48f8:f300::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:ec:1d:79:47:ec:da:6a:90:9f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=1a0ffec3-aa73-41e9-8dba-665cb249b030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d1:4a:02:23:74:40:a0:4b:81:3b:bf:6d:e9:
                    13:a2:96:f4:a9:5f:cb:68:da:74:5c:e4:49:13:c6:
                    1e:7c:dc:4b:f3:2d:43:db:0e:2b:2d:83:12:eb:c1:
                    30:93:2d:b0:8b:5d:14:34:9e:47:60:3b:e9:62:87:
                    c4:5f:8a:94:3e:aa:20:df:ad:69:9d:dc:5e:37:4e:
                    eb:a1:ac:10:75:76:cf:73:74:71:53:11:4b:a9:43:
                    7d:fc:38:01:c3:5f:f6:53:ac:c6:d6:82:02:da:d1:
                    a0:47:0d:ec:10:94:e8:14:7b:c3:f7:ee:59:c0:f9:
                    c8:24:35:35:a1:8b:cc:d2:6e:0d:50:a1:18:b2:90:
                    30:e4:43:4d:72:17:c1:a2:e9:b1:ba:a2:36:9a:ba:
                    b4:f8:7d:95:b7:0f:0f:18:1e:06:c3:de:57:31:97:
                    31:b7:b7:f0:e2:d8:36:0b:6c:be:37:f1:8e:78:74:
                    a2:27:3c:50:53:fa:84:c4:be:07:5f:0d:ff:42:f9:
                    c5:26:3b:01:0e:ab:e8:61:c7:26:fc:2a:25:72:f8:
                    d1:29:28:26:a4:f5:7d:b5:e5:46:9e:12:7e:29:6a:
                    8d:7c:20:2e:13:42:21:13:c0:00:62:64:3b:84:28:
                    d7:e3:70:f6:34:f5:9e:ac:1b:d0:e0:a3:49:a7:7f:
                    f1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:62:CC:FB:A5:2B:EE:BC:E0:8F:E0:30:71:3B:57:87:5E:DF:F4:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/689d0932-9e89-3a1e-87c9-e79053ebc7ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:48f8:f300::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:82:00:e3:3b:9e:82:ea:4c:87:44:1c:32:88:54:ed:fd:05:
         50:24:d2:97:e5:90:0b:4f:dd:54:9f:43:e2:2c:a2:61:9d:2b:
         f1:73:25:77:11:d9:1c:78:66:3d:a4:e7:fe:b5:f1:18:2b:06:
         e4:66:7b:f5:cf:0c:d4:d2:3c:3b:95:0b:9c:ac:b8:06:cb:dc:
         fe:b5:3b:e3:d2:3f:12:15:cc:94:ba:ed:ac:fa:96:3b:28:e2:
         29:05:1d:bf:4c:c1:8e:91:2f:1a:f4:47:dd:80:30:c5:12:7d:
         7b:6a:7d:22:50:e0:8c:e2:01:33:08:c3:04:3e:ea:c9:e9:ec:
         f0:94:ac:59:46:6f:29:9d:14:65:9d:fe:07:d3:9a:e9:12:d8:
         24:49:b7:b1:3d:0d:f2:7a:c5:00:55:25:52:de:26:a3:2d:74:
         3c:7c:71:b2:65:e0:24:e0:51:ec:b5:7f:ff:53:08:34:f1:17:
         de:9d:bf:1f:15:95:e9:1d:6f:2f:a2:e2:b3:55:77:d5:2f:48:
         58:64:4b:53:dd:a8:81:60:af:d0:f3:04:04:d1:57:bb:4b:83:
         5a:d6:13:11:89:a3:a1:9e:05:e8:09:f0:6a:94:ac:ac:45:c5:
         e2:b9:86:ab:bc:5c:14:14:01:e9:00:ad:4e:8c:02:03:f7:bb:
         ef:20:02:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:27:24 2025 by rpki-client on console.sobornost.net