Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/6b1a5c88-96bd-339e-9ff6-f4cebdd61ab3.roa
File:                     6b1a5c88-96bd-339e-9ff6-f4cebdd61ab3.roa (raw, json)
Hash identifier:          IPw3a+GRCByKzwQiTTkCL35gjesDpNfILXifE4DDW4s=
Subject key identifier:   68:A2:CF:29:48:02:59:80:E1:05:D5:78:E2:F0:20:19:C2:84:5E:A0
Certificate issuer:       /CN=d498318a-7059-42be-9b60-234aedba5e34
Certificate serial:       010D0C9F432858496484486C98BD8241EF1E4B00
Authority key identifier: 1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/6b1a5c88-96bd-339e-9ff6-f4cebdd61ab3.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     16787
IP address blocks:        2605:1c00:1ff0::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:48:6c:98:bd:82:41:ef:1e:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d498318a-7059-42be-9b60-234aedba5e34
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=1e3b320d-9a5a-46d7-81dc-bd8f73479ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:94:57:e3:91:17:7b:d7:b7:a4:a7:66:5a:a3:
                    64:a6:86:7b:75:88:ca:b5:4a:00:dc:91:ae:9b:05:
                    e7:5e:40:d1:23:bf:5c:29:8c:20:75:1c:2c:fb:ef:
                    ab:19:e3:e4:e0:27:ae:ad:f5:fd:7e:f4:66:2f:f9:
                    27:87:69:15:04:04:5c:17:02:c0:5b:ff:1d:ae:3d:
                    0a:2a:64:57:5c:8b:65:3d:81:98:2c:ad:19:a1:51:
                    ed:3b:de:5a:9e:7a:0b:c6:34:16:06:04:8a:be:82:
                    5d:c3:a0:4b:71:78:05:98:68:27:0b:65:9d:51:71:
                    14:e0:98:6d:d4:b8:7c:f8:ab:8e:e4:de:e8:21:8a:
                    87:2d:c7:6a:a4:19:d3:ee:48:9e:74:5a:64:90:28:
                    40:35:df:73:20:86:92:54:52:db:9b:3e:3f:e9:e9:
                    ea:88:cd:58:8e:e9:ce:dd:74:56:92:a4:96:93:42:
                    dc:4d:2a:46:b9:65:b7:60:3a:4f:ed:de:a2:03:60:
                    25:ac:3a:0c:a9:88:08:dc:38:4c:87:a7:1e:5c:61:
                    d6:68:2d:eb:e6:b8:37:79:ff:5e:00:89:b2:74:b0:
                    97:26:dc:13:e6:b8:34:59:b4:96:87:5d:5e:a1:c7:
                    18:d0:39:65:8f:8d:65:db:54:85:62:9d:7a:21:30:
                    b9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A2:CF:29:48:02:59:80:E1:05:D5:78:E2:F0:20:19:C2:84:5E:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/6b1a5c88-96bd-339e-9ff6-f4cebdd61ab3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl

            X509v3 Authority Key Identifier:
                keyid:1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1c00:1ff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:45:af:3c:bd:05:77:7d:fc:e3:b6:85:8e:05:3c:09:1c:fd:
         5f:15:76:2d:d0:9c:ca:6e:72:88:c3:54:09:f5:63:1b:8e:9b:
         70:2a:a7:3b:47:fd:de:c3:2d:39:91:ec:33:6b:20:c2:e2:0b:
         a6:7e:a7:72:be:7b:8e:18:2f:e5:8b:4e:60:df:0e:a9:16:48:
         ad:5b:b1:85:c4:52:2d:7a:fd:87:f5:aa:2a:ad:c4:ad:08:cf:
         56:5e:80:9e:00:84:c0:dd:7c:33:4b:51:15:60:fe:b9:90:33:
         14:f6:33:28:d1:1b:65:20:ba:98:07:13:a7:d7:fa:c0:36:3d:
         cd:07:e9:89:fb:24:af:f6:c7:d0:8b:c4:1d:5f:12:74:41:dc:
         7b:56:5c:9e:49:97:b8:c7:f7:49:a2:c8:a0:05:72:90:9f:f8:
         c3:b9:d7:4a:b8:c5:69:e6:0d:1c:ab:50:bb:af:4f:8a:ba:f6:
         6b:b4:f2:d3:89:6e:9e:fb:27:4a:a7:c6:06:77:46:0f:01:97:
         0f:ee:fc:21:b8:cb:71:15:55:f1:b9:36:39:03:99:8f:7d:ad:
         8b:31:bb:11:50:7c:56:e0:e6:0c:95:0c:69:42:2c:1d:e5:81:
         9b:cf:49:e2:cc:70:23:49:b6:c0:94:d7:57:d9:59:9a:95:f4:
         99:31:6e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:26 2025 by rpki-client on console.sobornost.net