Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c16ed97c-8646-379e-b507-327349487263.roa
File:                     c16ed97c-8646-379e-b507-327349487263.roa (raw, json)
Hash identifier:          JmgqdbSTa8Rg5g1D2j+shxEhQnCp2P22KW5Lad9Zru4=
Subject key identifier:   22:26:72:51:D8:5A:29:99:82:17:6D:78:4F:10:25:79:81:B2:AF:39
Certificate issuer:       /CN=c241be4c-9ded-4e11-a20d-5f2444f46b6a
Certificate serial:       010D0C9F4328584979744653B8BE7518516D8660
Authority key identifier: 27:8E:22:73:6C:9C:2F:55:11:74:B7:4D:DA:25:C1:B8:D2:D3:4E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c16ed97c-8646-379e-b507-327349487263.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     215568
IP address blocks:        2607:cf40::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:46:53:b8:be:75:18:51:6d:86:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c241be4c-9ded-4e11-a20d-5f2444f46b6a
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=30b11bd3-df3c-477c-994e-cb95879aab0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9f:69:ee:98:49:85:8e:56:92:3c:1b:74:9b:
                    92:b5:83:6b:49:ff:f3:8a:8b:11:e8:43:57:78:40:
                    bc:e9:55:66:e3:6a:62:20:c0:d9:b8:55:f6:eb:71:
                    7e:27:7f:9e:2b:37:6e:9f:d4:86:d4:dc:ab:09:97:
                    b6:b5:f3:f5:d6:a4:d0:e8:60:cf:a8:ff:a9:27:a6:
                    d7:f7:b4:26:c7:bc:4a:b4:5d:08:44:cf:35:45:64:
                    55:29:15:c6:ae:91:7a:f7:04:8f:f6:32:d1:b5:21:
                    cd:11:67:9f:26:dc:2b:29:42:9d:de:b1:d3:5c:0e:
                    b1:35:60:a8:df:b3:d0:8d:59:3a:1b:9f:76:e3:f1:
                    06:9d:21:c4:a1:31:7c:0d:c8:1b:83:57:ed:b6:db:
                    74:c5:ef:c5:14:0d:07:5c:6c:e4:4b:d0:33:6c:72:
                    5f:54:b5:86:12:2a:f2:fb:5e:90:7f:f4:e2:65:30:
                    e9:9c:d8:30:db:d2:c9:47:38:ca:fb:38:c1:36:ff:
                    e8:02:c1:07:57:bd:73:e4:a3:58:85:3b:6a:0d:9c:
                    ab:ce:25:3f:e5:5a:46:5c:cf:72:c8:04:dc:63:db:
                    24:d5:93:13:67:75:10:5d:ad:b2:86:2e:c3:30:93:
                    d8:2a:5d:73:fa:de:59:71:8d:c1:33:a4:ad:b6:cd:
                    d4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:26:72:51:D8:5A:29:99:82:17:6D:78:4F:10:25:79:81:B2:AF:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c16ed97c-8646-379e-b507-327349487263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c241be4c-9ded-4e11-a20d-5f2444f46b6a.crl

            X509v3 Authority Key Identifier:
                keyid:27:8E:22:73:6C:9C:2F:55:11:74:B7:4D:DA:25:C1:B8:D2:D3:4E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cf40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:ad:79:4d:c3:2d:ba:49:52:22:f2:9d:c1:57:ab:87:8d:43:
         be:d1:6d:48:bb:81:a5:c8:64:81:98:03:96:8e:35:4f:4d:d5:
         57:60:7a:b0:f0:4f:63:2b:31:46:46:32:74:10:f6:f9:34:06:
         38:61:47:db:c2:5a:38:aa:67:0f:e6:7e:5e:53:1e:f3:86:93:
         db:10:c3:42:74:87:51:d5:e8:2a:08:5b:5d:d7:67:af:df:f7:
         51:a4:1e:a2:4d:51:c8:a1:6a:79:e8:3b:9c:1e:85:6c:b2:7f:
         b6:bd:8f:70:9c:f3:95:87:e1:6e:8a:e7:43:ed:0d:f7:14:2a:
         61:8c:ae:f7:8c:80:55:33:2c:6e:f3:3a:cd:af:81:08:f0:34:
         ab:07:a1:df:18:b5:a9:e7:99:19:d3:24:f8:64:2c:0c:8e:ed:
         8b:87:e9:e9:ce:c8:6d:d6:6a:eb:71:f6:1c:cb:ab:59:69:de:
         da:54:9d:55:ed:b0:54:3c:7d:57:f7:9f:81:5e:cd:fa:a6:84:
         4b:51:11:0a:bd:7d:d0:83:67:9d:e6:f5:20:91:ac:99:15:24:
         fe:76:b1:07:4b:d7:3f:b6:bb:e4:15:49:b2:e1:d1:38:01:b4:
         a7:4e:52:fb:47:c2:b3:91:31:1c:5b:68:82:e2:ea:fc:49:f8:
         b7:3a:2a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----