Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/1849bc6d-da2c-377f-9bd4-ff6dc638837c.roa
File:                     1849bc6d-da2c-377f-9bd4-ff6dc638837c.roa (raw, json)
Hash identifier:          orQAGLtvmvoBtsAyigccG5bgAdR30zN0gPOC+DHNV6g=
Subject key identifier:   74:65:E6:C1:72:6A:99:EC:1B:48:AF:E1:88:8B:D9:36:29:16:F6:5B
Certificate issuer:       /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial:       010D0C9F432858495ABEC6874EFCCD4DF6629E80
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/1849bc6d-da2c-377f-9bd4-ff6dc638837c.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     33211
IP address blocks:        2606:ca40::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:c6:87:4e:fc:cd:4d:f6:62:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=ca38be3f-674d-4c80-b8c8-9caaf98de36f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:db:de:4f:16:a0:04:5a:10:18:b7:f7:d7:85:
                    9e:7b:8c:e3:51:a4:ad:4e:67:62:70:58:22:86:b9:
                    fa:04:f7:fe:e8:e2:ca:c8:b0:b0:d1:01:f9:62:c5:
                    86:6a:0f:cf:c5:e5:1c:5e:8c:e4:c2:08:1c:69:ba:
                    1c:61:b2:5e:a3:7b:d9:4c:57:12:20:16:64:f1:61:
                    03:8c:a3:4a:b9:1e:dd:83:3f:46:41:cb:16:20:2e:
                    e6:23:f6:6d:3a:8a:06:d4:08:00:d9:68:6d:e7:ba:
                    a5:fd:90:4b:29:00:64:c4:93:48:cb:e6:42:83:ce:
                    04:e0:81:e6:e1:5c:91:f3:ed:7d:1c:ff:a8:6b:dd:
                    e2:46:fc:ce:6b:05:38:ad:02:2a:67:3e:07:51:d7:
                    21:33:25:ce:f5:6c:a1:2c:1d:4b:b1:6a:f2:7e:67:
                    7d:b3:4f:31:8b:ff:30:90:53:88:fa:0c:71:3b:ad:
                    cf:d2:74:cd:6b:07:50:05:0a:bc:72:a9:98:42:c8:
                    7a:9d:eb:f6:73:c6:5f:62:8b:63:56:56:a1:11:7c:
                    ef:e3:38:1d:06:86:95:b5:e1:f6:26:96:0c:90:dd:
                    75:32:39:ee:2d:55:81:68:d4:c7:54:0f:30:f3:34:
                    45:f7:88:86:cf:ef:f4:4f:cf:53:f8:85:62:50:bb:
                    d0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:65:E6:C1:72:6A:99:EC:1B:48:AF:E1:88:8B:D9:36:29:16:F6:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/1849bc6d-da2c-377f-9bd4-ff6dc638837c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl

            X509v3 Authority Key Identifier:
                keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:ca40::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:1d:c2:91:b1:0b:f3:e5:1a:01:8a:37:23:d2:f5:a0:54:3e:
         4d:99:d7:1f:0a:2f:17:5e:95:eb:da:c7:8d:62:89:08:55:a4:
         27:26:e3:a5:42:1b:f3:15:0c:32:bc:1f:97:76:f4:b7:d0:af:
         bb:4b:6e:71:d7:45:cd:39:47:41:07:0b:e3:46:65:52:0b:58:
         67:14:a8:44:3e:a9:b3:58:44:ea:30:66:fa:46:a7:35:ec:99:
         19:3e:2a:c4:74:59:41:59:17:09:7c:87:5c:51:94:8e:13:89:
         2f:d0:03:0c:24:00:7a:0c:4b:de:a5:fa:71:ab:6d:11:08:34:
         ef:6c:e5:38:78:22:0f:26:a3:da:4c:8c:8c:d2:72:85:d3:8c:
         1e:ae:ee:36:74:da:42:85:2c:74:b7:4c:b5:8a:fd:1c:e8:92:
         25:3d:ba:14:63:c9:4c:31:86:71:27:73:79:f3:50:2b:6f:51:
         55:a0:dc:11:a8:76:e9:d5:08:b8:69:73:8b:c9:28:ea:6f:7e:
         74:16:fa:ab:cd:3c:34:f1:3a:1c:b2:22:7b:65:1c:0b:10:a1:
         f6:53:18:42:dd:45:61:3f:ec:d1:80:c9:6b:80:00:a5:07:09:
         8e:cc:ba:10:f2:11:33:2d:f1:0f:27:84:db:36:8c:3e:2f:dd:
         8f:ac:d7:06
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElavsaHTvzNTfZinoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGFjMzE0NjMtOTc0Yi00Njc2LTkzMjgtMjAwMjAyYWU0
ZDZlMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk
Y2EzOGJlM2YtNjc0ZC00YzgwLWI4YzgtOWNhYWY5OGRlMzZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtveTxagBFoQGLf314Wee4zjUaStTmdicFgi
hrn6BPf+6OLKyLCw0QH5YsWGag/PxeUcXozkwggcabocYbJeo3vZTFcSIBZk8WED
jKNKuR7dgz9GQcsWIC7mI/ZtOooG1AgA2Wht57ql/ZBLKQBkxJNIy+ZCg84E4IHm
4VyR8+19HP+oa93iRvzOawU4rQIqZz4HUdchMyXO9WyhLB1LsWryfmd9s08xi/8w
kFOI+gxxO63P0nTNawdQBQq8cqmYQsh6nev2c8ZfYotjVlahEXzv4zgdBoaVteH2
JpYMkN11MjnuLVWBaNTHVA8w8zRF94iGz+/0T89T+IViULvQEQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHRl5sFyapnsG0iv4YiL2TYpFvZbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84YWMz
MTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAyMDJhZTRkNmUvMTg0OWJjNmQtZGEyYy0z
NzdmLTliZDQtZmY2ZGM2Mzg4MzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGFjMzE0NjMtOTc0Yi00Njc2LTkz
MjgtMjAwMjAyYWU0ZDZlLzhhYzMxNDYzLTk3NGItNDY3Ni05MzI4LTIwMDIwMmFl
NGQ2ZS5jcmwwHwYDVR0jBBgwFoAUZkrPeoeALtWWaZNuDr1s6kFXZvYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84YWMzMTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAy
MDJhZTRkNmUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgbKQAAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADYdwpGxC/PlGgGKNyPS9aBUPk2Z1x8KLxdelevax41iiQhVpCcm
46VCG/MVDDK8H5d29LfQr7tLbnHXRc05R0EHC+NGZVILWGcUqEQ+qbNYROowZvpG
pzXsmRk+KsR0WUFZFwl8h1xRlI4TiS/QAwwkAHoMS96l+nGrbREINO9s5Th4Ig8m
o9pMjIzScoXTjB6u7jZ02kKFLHS3TLWK/RzokiU9uhRjyUwxhnEnc3nzUCtvUVWg
3BGodunVCLhpc4vJKOpvfnQW+qvNPDTxOhyyIntlHAsQofZTGELdRWE/7NGAyWuA
AKUHCY7MuhDyETMt8Q8nhNs2jD4v3Y+s1wY=
-----END CERTIFICATE-----