Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/47c2089f-a8d9-3ab0-9033-ff13d22e0a25.roa
File:                     47c2089f-a8d9-3ab0-9033-ff13d22e0a25.roa (raw, json)
Hash identifier:          1EE87DaLEBMgNRFfaECIVa2yUmLAFWrVQUhtQHlpoSM=
Subject key identifier:   A5:64:97:26:F1:14:22:DF:77:4C:E4:E0:02:7F:04:33:2E:BE:5C:7B
Certificate issuer:       /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Certificate serial:       010D0C9F432858491A32C301F58540E8A57C9300
Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/47c2089f-a8d9-3ab0-9033-ff13d22e0a25.roa
Signing time:             Thu 06 Mar 2025 22:07:07 +0000
ROA not before:           Thu 06 Mar 2025 22:07:07 +0000
ROA not after:            Wed 04 Jun 2025 21:07:07 +0000
asID:                     49
IP address blocks:        2610:20:6fce::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:32:c3:01:f5:85:40:e8:a5:7c:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
        Validity
            Not Before: Mar  6 22:07:07 2025 GMT
            Not After : Jun  4 21:07:07 2025 GMT
        Subject: CN=d0e30a82-8493-43e3-b48b-2ec62b12b100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3e:bf:cb:00:cb:df:75:35:84:6f:c9:35:38:
                    9e:44:75:a6:1f:64:36:4f:95:b5:33:80:ce:67:01:
                    45:34:e8:33:48:07:7e:4b:3b:ee:76:d3:06:bc:21:
                    a3:4c:af:87:5a:1b:0d:da:3d:b0:ae:d6:03:e9:e0:
                    38:4d:c7:9b:de:c2:65:56:70:5e:9d:54:e2:47:78:
                    6f:e6:1e:89:e9:b9:ec:55:7b:17:c0:70:d3:3c:81:
                    91:35:1b:87:6f:ee:50:29:68:f4:70:98:23:bb:66:
                    32:6e:d5:f9:cf:09:91:38:6c:04:e7:93:56:a5:3b:
                    db:1a:94:18:12:7e:0d:72:97:c5:ff:62:b7:0f:40:
                    f1:6e:2f:dd:c8:9b:50:cf:05:b0:0e:38:fd:0f:e3:
                    d8:56:ee:82:5e:76:95:2c:ab:21:d8:ae:fa:78:ec:
                    19:ce:ff:87:6e:ce:f0:d9:f9:3a:67:38:1b:fb:2b:
                    b6:64:d6:dd:8f:e4:6e:32:ff:c1:be:0f:8d:dd:a8:
                    fe:52:d1:9d:fd:37:18:ef:75:de:88:54:fb:10:3f:
                    fa:3b:0a:ae:12:b5:f7:07:a0:64:3f:47:10:37:e8:
                    48:a9:3e:ac:a4:1d:c0:3f:d7:0a:25:59:50:87:27:
                    a4:c8:02:21:e7:80:c0:de:77:e1:18:a4:6e:4c:03:
                    ee:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:64:97:26:F1:14:22:DF:77:4C:E4:E0:02:7F:04:33:2E:BE:5C:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/47c2089f-a8d9-3ab0-9033-ff13d22e0a25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl

            X509v3 Authority Key Identifier:
                keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:6fce::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:3a:92:5f:28:09:56:18:4f:61:12:3e:74:b8:61:5b:75:2a:
         63:9d:45:b0:9d:3f:18:2e:6e:7c:21:0f:f1:9e:54:af:28:14:
         97:4e:2a:70:b7:47:95:11:38:b7:3a:88:2b:d0:6f:e6:46:e8:
         43:54:19:e3:6b:6b:58:0d:d6:46:72:53:bf:3c:2a:7e:f6:85:
         2f:d1:8d:63:3d:78:36:0e:89:61:68:04:c2:13:a1:42:7c:7a:
         38:49:41:37:b6:5f:76:9b:50:63:b5:57:59:92:81:a8:df:28:
         e1:35:a3:4a:d8:08:80:cd:cf:60:f2:03:96:8d:55:0a:4e:fb:
         1e:2f:bf:38:0c:89:9a:24:f5:32:ed:cd:8b:6e:c4:0e:30:d5:
         4b:3f:5f:f6:7c:c0:c5:26:fa:40:9e:aa:50:0e:0d:07:cb:e9:
         46:7b:52:1b:bb:56:5f:79:0e:ac:37:ca:32:8b:78:f3:e4:00:
         1a:63:95:12:87:af:33:9e:bf:48:36:da:c6:19:d0:fb:ab:82:
         18:11:81:c4:66:c7:51:c7:16:ec:e2:f2:f0:20:b1:98:b2:93:
         c7:8a:2c:ca:2a:f2:b6:2a:0e:62:a5:9e:82:f3:4b:73:af:0c:
         7b:bc:56:af:e8:4e:78:af:df:0d:34:ff:5e:47:f6:f6:9f:24:
         74:98:26:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----