Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/2be83e4c-7a12-332c-a9df-49e3f5fcb1af.roa
File:                     2be83e4c-7a12-332c-a9df-49e3f5fcb1af.roa (raw, json)
Hash identifier:          BubfVxPaDjJAn4ALUHaseTVuTe00ntiZSeq7jbpGNaY=
Subject key identifier:   CE:51:48:CF:87:82:69:22:E0:E2:59:7D:A7:E7:56:8E:72:FB:77:27
Certificate issuer:       /CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c
Certificate serial:       010D0C9F43285848DE903463956CE831BB998000
Authority key identifier: 74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/2be83e4c-7a12-332c-a9df-49e3f5fcb1af.roa
Signing time:             Thu 13 Feb 2025 13:26:54 +0000
ROA not before:           Thu 13 Feb 2025 13:26:54 +0000
ROA not after:            Wed 14 May 2025 12:26:54 +0000
asID:                     36549
IP address blocks:        2606:b200::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:90:34:63:95:6c:e8:31:bb:99:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c
        Validity
            Not Before: Feb 13 13:26:54 2025 GMT
            Not After : May 14 12:26:54 2025 GMT
        Subject: CN=7e40d7bd-3dd9-42e4-9329-a87a8182fd13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:96:5c:eb:c7:25:9e:d3:22:a6:b2:73:b0:79:
                    90:20:f5:c0:4d:1b:02:49:9b:7e:c0:18:68:f8:38:
                    f0:fe:48:96:96:3f:48:1f:77:04:31:b6:cf:61:dd:
                    13:7b:50:15:2b:68:c3:69:17:4b:77:61:84:a2:d4:
                    6c:f3:7c:c4:0b:7e:de:8e:46:2d:d1:04:0c:a0:31:
                    69:c2:36:ae:15:c1:7f:e0:3d:74:9b:c5:be:5a:d0:
                    47:06:ca:90:97:b9:17:64:c6:9a:6c:c1:ce:f8:f0:
                    14:e8:89:ef:45:82:ad:ee:df:29:c4:10:2a:e4:b0:
                    01:78:68:dd:90:24:40:13:50:4d:33:3c:1e:fd:35:
                    56:03:f8:16:2a:39:21:7f:1e:7b:29:38:ae:3a:be:
                    da:e1:8f:92:4e:00:ee:3d:8c:9c:1b:96:8c:e0:ec:
                    c9:7a:0b:49:b1:f3:bb:46:7b:69:dd:f8:1e:2d:69:
                    a4:c1:44:58:f6:2d:1c:6e:83:65:6d:6d:5b:33:6f:
                    fb:bd:5c:c7:28:29:c5:b0:74:1d:38:fd:7a:01:46:
                    c9:45:80:48:0a:b3:41:8c:42:62:49:01:94:1b:d3:
                    0c:ea:fe:30:7c:01:93:ef:1d:73:0e:e5:f7:76:15:
                    71:76:0f:9b:d1:b1:2b:61:60:29:30:05:2a:66:18:
                    a6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:51:48:CF:87:82:69:22:E0:E2:59:7D:A7:E7:56:8E:72:FB:77:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/2be83e4c-7a12-332c-a9df-49e3f5fcb1af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl

            X509v3 Authority Key Identifier:
                keyid:74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b200::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:4f:8b:fd:7b:34:fb:eb:d2:ec:f0:02:8d:2f:8e:84:5b:0a:
         7f:1d:40:88:d4:6f:a8:94:28:58:cf:e6:05:f9:69:6b:5f:57:
         0a:54:ef:03:c4:0c:17:6f:66:82:5f:bd:b0:55:7c:14:62:3d:
         a8:03:55:bb:63:8f:71:08:22:2e:71:2d:63:33:90:18:b8:8d:
         8f:ba:14:9b:a7:bd:0e:46:14:59:22:42:fd:c3:eb:bb:d9:28:
         b0:57:7c:11:54:0a:c6:bb:65:77:ad:11:c5:1a:6f:5c:52:63:
         40:5c:ff:76:f3:cb:80:26:44:2e:93:f5:c5:76:65:7c:eb:96:
         cd:cf:a0:d8:41:5b:72:ef:ff:66:18:0d:41:18:0b:c1:e1:c3:
         04:35:77:e9:89:83:66:26:e6:bc:9e:b0:0b:6c:57:d5:d0:53:
         89:fa:bb:3a:08:30:b4:a1:d7:b0:e9:43:fc:38:9a:b9:7c:64:
         cf:a5:e4:ba:09:03:9f:a7:09:ac:7d:d7:6d:f2:c3:51:a9:c5:
         d6:02:70:76:5d:b1:f2:99:c8:24:4a:6c:22:7f:da:93:42:b8:
         07:f6:ae:4f:1e:f1:77:57:06:e0:c2:e8:c4:45:e1:e2:a6:ea:
         8b:41:ab:bb:d5:23:94:d1:f0:8b:21:e9:97:88:34:27:35:99:
         8a:c2:25:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----