Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/d878d921-bc35-307e-9651-8c0b7cd87227.roa
File:                     d878d921-bc35-307e-9651-8c0b7cd87227.roa (raw, json)
Hash identifier:          YHZlgIhE1nQYjztdYowLf0tz2473V9iQD+d/x7q5Gjc=
Subject key identifier:   5F:17:DA:CF:D1:F3:86:70:FE:71:4D:AA:8F:B5:13:8B:DD:A2:1D:5A
Certificate issuer:       /CN=9725766d-5d42-4fa1-a253-80bd88dabc8d
Certificate serial:       010D0C9F43285849806F237F4D98DAB5B4A8F000
Authority key identifier: E1:5D:89:84:70:6F:0F:C7:C2:0B:72:16:4E:C0:DB:9A:0C:60:E5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/d878d921-bc35-307e-9651-8c0b7cd87227.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     25942
IP address blocks:        2602:2f1::/36 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:23:7f:4d:98:da:b5:b4:a8:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9725766d-5d42-4fa1-a253-80bd88dabc8d
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=40f633d1-6377-47e8-9397-3a30dc3bd82c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d3:70:95:8f:7e:7f:ae:b2:0c:5c:a1:14:f2:
                    1a:44:8a:f0:53:33:68:29:f8:a0:67:9b:7c:0f:8a:
                    f8:54:c1:35:74:35:5b:ac:59:4e:b7:01:dd:6e:02:
                    04:2c:01:15:30:9b:86:3b:1d:32:0e:5c:71:bb:3c:
                    3b:4c:4a:96:ef:d3:0b:02:5a:28:6c:b4:4a:d8:05:
                    d2:c6:28:ec:74:c3:50:7c:20:c8:21:ef:15:c6:9d:
                    74:65:e6:c3:3d:df:d0:5c:47:f2:8a:02:0c:81:6e:
                    d3:96:31:71:95:43:6c:08:99:26:58:86:f3:ab:a0:
                    fe:09:bb:8b:02:66:f0:e1:9a:08:49:d6:91:6e:87:
                    62:6c:6d:d7:bb:42:cf:01:f0:03:78:b4:c9:59:b9:
                    f9:b1:eb:cb:de:24:1e:00:b4:6d:a3:7b:2b:5e:ef:
                    fc:70:df:8d:d8:e2:ca:fa:c2:f9:95:0d:c9:36:37:
                    23:e4:c5:b1:ac:01:bf:27:7f:8b:04:34:67:a7:e1:
                    76:ff:1a:2d:63:33:78:8c:2f:4d:47:39:fe:6a:1e:
                    34:21:d2:51:9f:e7:c4:26:eb:e6:77:d8:cb:25:7c:
                    46:c6:46:3e:c5:01:df:65:fa:78:5f:2e:b3:01:f5:
                    3a:f9:9d:89:ef:82:8f:54:c4:34:87:94:54:b5:d5:
                    5f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:17:DA:CF:D1:F3:86:70:FE:71:4D:AA:8F:B5:13:8B:DD:A2:1D:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/d878d921-bc35-307e-9651-8c0b7cd87227.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/9725766d-5d42-4fa1-a253-80bd88dabc8d.crl

            X509v3 Authority Key Identifier:
                keyid:E1:5D:89:84:70:6F:0F:C7:C2:0B:72:16:4E:C0:DB:9A:0C:60:E5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2f1::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:2e:23:6e:28:87:a0:cb:3a:44:eb:45:39:c0:3c:0e:91:5b:
         6b:73:6c:b0:3d:d9:cd:d9:42:75:79:78:d8:d4:b1:fb:25:cd:
         5c:4d:31:4f:18:7f:0d:8e:cd:44:1c:f7:69:46:3e:34:ef:d3:
         df:03:22:eb:98:37:3b:e1:35:b9:28:cc:0e:b0:9b:95:5b:32:
         59:6e:85:a6:61:3f:82:f3:9f:c7:98:57:be:54:79:d3:0c:c6:
         ce:33:7f:84:12:74:9a:c7:e8:7c:9a:3d:af:24:96:e1:2b:ca:
         36:a8:24:35:92:aa:b4:ff:3c:12:20:67:32:47:8d:6f:46:db:
         8d:1e:a6:85:16:90:1b:03:0a:9a:ce:60:cb:18:3e:00:3a:7b:
         22:c5:9e:a9:2f:24:91:4f:88:62:8a:78:53:ae:f6:74:8d:7e:
         93:1f:d2:9d:47:f9:4d:0b:43:b5:a1:24:e9:be:ad:8a:9b:54:
         85:6a:ca:27:cc:7c:0c:00:0f:50:13:02:ae:fb:b0:fc:7a:31:
         b5:19:03:93:7a:53:99:72:cc:ac:8a:81:40:96:95:45:77:91:
         db:e5:61:09:1d:87:89:c1:e4:49:8f:ae:80:18:f0:d3:59:de:
         e0:c9:e8:c9:79:80:f4:41:0a:5a:11:8b:a3:c2:6f:23:e4:2f:
         e7:94:0d:94
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmAbyN/TZjatbSo8AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTcyNTc2NmQtNWQ0Mi00ZmExLWEyNTMtODBiZDg4ZGFi
YzhkMB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk
NDBmNjMzZDEtNjM3Ny00N2U4LTkzOTctM2EzMGRjM2JkODJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNNwlY9+f66yDFyhFPIaRIrwUzNoKfigZ5t8
D4r4VME1dDVbrFlOtwHdbgIELAEVMJuGOx0yDlxxuzw7TEqW79MLAloobLRK2AXS
xijsdMNQfCDIIe8Vxp10ZebDPd/QXEfyigIMgW7TljFxlUNsCJkmWIbzq6D+CbuL
Ambw4ZoISdaRbodibG3Xu0LPAfADeLTJWbn5sevL3iQeALRto3srXu/8cN+N2OLK
+sL5lQ3JNjcj5MWxrAG/J3+LBDRnp+F2/xotYzN4jC9NRzn+ah40IdJRn+fEJuvm
d9jLJXxGxkY+xQHfZfp4Xy6zAfU6+Z2J74KPVMQ0h5RUtdVfewIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFF8X2s/R84Zw/nFNqo+1E4vdoh1aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NzI1
NzY2ZC01ZDQyLTRmYTEtYTI1My04MGJkODhkYWJjOGQvZDg3OGQ5MjEtYmMzNS0z
MDdlLTk2NTEtOGMwYjdjZDg3MjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTcyNTc2NmQtNWQ0Mi00ZmExLWEy
NTMtODBiZDg4ZGFiYzhkLzk3MjU3NjZkLTVkNDItNGZhMS1hMjUzLTgwYmQ4OGRh
YmM4ZC5jcmwwHwYDVR0jBBgwFoAU4V2JhHBvD8fCC3IWTsDbmgxg5RUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85NzI1NzY2ZC01ZDQyLTRmYTEtYTI1My04MGJk
ODhkYWJjOGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgIC8QAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEACS4jbiiHoMs6ROtFOcA8DpFba3NssD3ZzdlCdXl42NSx+yXNXE0x
Txh/DY7NRBz3aUY+NO/T3wMi65g3O+E1uSjMDrCblVsyWW6FpmE/gvOfx5hXvlR5
0wzGzjN/hBJ0msfofJo9rySW4SvKNqgkNZKqtP88EiBnMkeNb0bbjR6mhRaQGwMK
ms5gyxg+ADp7IsWeqS8kkU+IYop4U672dI1+kx/SnUf5TQtDtaEk6b6tiptUhWrK
J8x8DAAPUBMCrvuw/HoxtRkDk3pTmXLMrIqBQJaVRXeR2+VhCR2HicHkSY+ugBjw
01ne4MnoyXmA9EEKWhGLo8JvI+Qv55QNlA==
-----END CERTIFICATE-----