Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/5b2f3d47-01c0-385d-80b6-55e854983c66.roa
File:                     5b2f3d47-01c0-385d-80b6-55e854983c66.roa (raw, json)
Hash identifier:          rXHAmLxxCd0Fo54RY8JO2frKEGRPd6pjQ54OCVEmdu0=
Subject key identifier:   F6:70:7B:FB:8F:35:55:68:26:EB:72:7E:89:0D:28:00:27:38:93:13
Certificate issuer:       /CN=4ba03064-0288-4ec4-b73f-d6ba1d639961
Certificate serial:       010D0C9F4328584979744491D1B7454F2A463700
Authority key identifier: D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/5b2f3d47-01c0-385d-80b6-55e854983c66.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     174
IP address blocks:        2602:fa3d:a93::/48 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:44:91:d1:b7:45:4f:2a:46:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba03064-0288-4ec4-b73f-d6ba1d639961
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=18d3863e-4541-4499-9310-a09a25066142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2e:6b:a2:c1:1c:64:64:f6:40:f7:d8:0b:2d:
                    c1:85:1a:47:aa:d2:3e:8a:bd:be:8b:fb:1f:f4:c5:
                    e3:b6:99:df:f2:a2:53:f6:03:6d:e4:33:29:63:5b:
                    99:5e:4f:c5:53:4a:4e:47:36:fc:20:e2:f3:27:66:
                    16:88:05:09:1e:a1:ca:c8:ee:96:3a:b5:3b:f4:57:
                    ee:25:b2:e8:db:cd:09:ca:b5:ad:00:dd:87:d0:e4:
                    ee:01:8b:7d:a1:f0:f5:66:cb:a6:4b:39:2f:db:f2:
                    b5:dc:4e:66:e6:cc:fd:5a:4f:c1:43:22:c7:bb:2d:
                    ab:fd:f0:ee:74:f6:66:6e:2d:4f:0c:ec:5f:8e:92:
                    23:2e:0a:7c:ef:f5:ba:5c:29:0c:01:60:69:7c:11:
                    a0:22:ec:d9:97:db:28:3f:74:77:09:ae:c8:96:3b:
                    d4:7b:41:8b:c6:75:88:60:ad:84:bd:26:e9:96:89:
                    8e:af:fb:54:97:fb:9f:0d:b9:d7:b0:ba:a8:24:50:
                    60:91:25:e6:5e:c8:2a:fb:d9:65:e5:4f:59:6a:08:
                    f9:ee:40:70:f1:1b:f0:98:a3:f2:2d:47:e2:1d:b4:
                    74:ba:72:40:c6:89:02:fd:ef:e9:b6:70:9a:3b:29:
                    45:7c:e4:bc:ea:ba:e1:44:81:b0:9d:c9:4e:8f:cc:
                    f8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:70:7B:FB:8F:35:55:68:26:EB:72:7E:89:0D:28:00:27:38:93:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/5b2f3d47-01c0-385d-80b6-55e854983c66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.crl

            X509v3 Authority Key Identifier:
                keyid:D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa3d:a93::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:f7:fe:d6:2b:5f:98:3c:f4:77:69:8b:ff:60:f9:37:21:42:
         f1:8a:0f:c6:e0:f5:a6:13:ea:1c:35:3a:8b:0a:f7:e7:fb:d3:
         ca:d3:01:43:f1:f0:c0:28:ba:6d:f6:6a:13:bc:81:ba:95:df:
         73:2f:87:1f:95:a5:80:16:7f:2d:7b:c3:69:fb:1e:d3:cf:a5:
         0f:f9:bc:fc:3c:2d:dd:5f:45:c2:4f:90:71:52:36:5d:b7:84:
         f3:46:da:82:db:5e:a5:e2:86:b7:75:cf:70:c1:a7:5e:bf:82:
         fb:e3:9c:ce:09:09:ff:9c:f7:27:90:6b:29:a6:91:06:40:89:
         06:18:74:29:fc:05:79:e6:46:4f:f0:15:66:88:a6:77:df:bf:
         af:47:cc:ae:4a:f7:8c:3d:97:5e:05:66:2c:96:9b:c5:3b:ed:
         4b:2c:67:85:35:95:68:47:d8:09:2e:4c:26:28:b9:41:54:14:
         d0:65:c3:84:ac:e0:2d:a6:2f:1a:9e:2f:dd:11:60:1a:a7:6e:
         ff:d0:39:eb:a7:c9:14:87:30:24:9a:33:1f:21:01:e1:59:1c:
         10:41:ef:6b:90:0e:8c:bd:37:7b:42:d1:80:a2:99:9f:1c:ea:
         58:f6:9b:a1:f4:ae:c2:be:03:b8:32:c3:f8:5b:8c:c0:a1:c3:
         3c:b8:47:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 10:55:00 2025 by rpki-client on console.sobornost.net