Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/58508676-c564-3b25-9efe-078141906c59.roa
File:                     58508676-c564-3b25-9efe-078141906c59.roa (raw, json)
Hash identifier:          vDa3c4b6SGaQ0IwVjhE/9uIEAPrQb1sahqSOZjzFeBA=
Subject key identifier:   20:90:22:28:65:DC:AD:48:3C:AA:F7:D4:9A:79:FD:A1:6A:1B:92:B8
Certificate issuer:       /CN=6c4fd986-1af7-4389-bf91-d4b92edc9ac9
Certificate serial:       010D0C9F4328584957F406F91A40CBE495E5D700
Authority key identifier: 93:DE:D5:D0:1E:64:B5:DE:A0:FC:8D:39:1C:47:AD:FA:B2:4A:51:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/58508676-c564-3b25-9efe-078141906c59.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     197547
IP address blocks:        2602:fa33::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:06:f9:1a:40:cb:e4:95:e5:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4fd986-1af7-4389-bf91-d4b92edc9ac9
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=36881898-1e1a-44a1-8733-e0b231252aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fa:36:3b:bc:71:c1:61:d1:08:eb:e5:3a:dd:
                    81:63:7e:36:1e:9a:f6:4e:2d:62:fe:ea:71:00:14:
                    7d:38:19:38:1b:20:1a:b0:4d:32:06:d5:2a:48:c7:
                    53:90:1d:a1:91:de:36:75:3e:ab:fb:71:ea:6a:37:
                    28:ac:a0:00:28:ab:2b:61:d4:c6:61:c0:fa:68:f0:
                    81:ce:79:71:af:d8:a3:46:c6:aa:9d:e7:64:ba:0c:
                    37:aa:85:3b:d6:9e:84:01:e7:b8:6d:cf:33:78:58:
                    37:22:59:0a:e8:c3:3e:02:b6:3d:2f:94:b4:1d:d5:
                    aa:d6:e7:3b:ff:a3:c6:a7:e8:19:ed:32:b8:c3:bf:
                    97:01:1e:38:42:6d:b0:d7:6a:26:9a:60:f5:34:a8:
                    45:84:99:26:97:9b:4a:61:e4:f5:e6:fe:8d:50:ba:
                    6b:fd:35:40:d8:40:ce:6e:65:9d:14:b1:5d:c4:84:
                    42:10:b5:06:9b:63:fb:8f:99:44:29:fc:5f:03:1b:
                    f8:14:79:84:ab:fa:dd:f2:fd:7a:a9:e7:9c:e7:c1:
                    dd:2b:74:1e:28:21:44:6e:25:2e:76:55:7e:7e:2c:
                    b0:e6:c9:0d:c5:26:88:68:b0:b5:ce:72:3d:0a:ba:
                    0b:35:50:92:9b:68:c2:36:65:41:03:88:dd:8d:b4:
                    f5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:90:22:28:65:DC:AD:48:3C:AA:F7:D4:9A:79:FD:A1:6A:1B:92:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/58508676-c564-3b25-9efe-078141906c59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.crl

            X509v3 Authority Key Identifier:
                keyid:93:DE:D5:D0:1E:64:B5:DE:A0:FC:8D:39:1C:47:AD:FA:B2:4A:51:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa33::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:6f:fa:ab:cb:46:d2:47:8a:1c:8c:de:93:1c:96:f8:1d:3a:
         e8:b7:45:d3:b1:ee:0f:6d:cd:16:3f:fe:d6:80:b2:e1:91:8e:
         09:ed:c7:32:7a:7d:dd:49:9a:04:1b:ed:a1:71:15:ca:4c:cc:
         21:4b:fd:3d:0a:cb:3d:ea:a4:5c:a2:a3:6d:98:ba:18:b5:83:
         be:02:99:8e:8c:fa:97:41:99:b1:ec:f5:53:0c:bf:58:77:c3:
         e8:44:08:b1:26:45:75:be:09:ba:dd:e4:a4:fa:2e:a4:c6:bb:
         0e:3d:27:21:e8:c0:af:39:a5:74:d7:ea:7b:b5:fc:6a:c8:49:
         c2:20:0f:f5:f0:3e:e9:87:1a:76:19:ca:2a:10:2a:5f:55:6d:
         ad:78:b7:1d:90:46:7f:04:c0:3f:2b:09:ee:c7:e1:fe:05:3a:
         4e:61:dc:ff:45:ca:0b:f5:d9:47:d4:38:1c:cc:e3:fe:f5:6e:
         4b:ca:4c:1f:50:4e:3e:f0:35:50:61:10:22:6b:5f:e0:c0:4e:
         b9:ec:68:1f:ac:44:cc:9e:b6:f7:f1:2e:4d:45:02:92:98:fa:
         12:f2:45:52:26:6e:55:d0:62:b4:e0:63:07:31:a6:98:0f:c3:
         e2:8c:ed:e0:75:f2:4f:55:b4:5b:d8:4d:5e:f0:07:76:be:df:
         14:3e:6e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----