Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d/c7b35c91-fdf8-3fcd-abe2-3e5f920b476a.roa
File:                     c7b35c91-fdf8-3fcd-abe2-3e5f920b476a.roa (raw, json)
Hash identifier:          UOtKSM8JT1j44EvDN/1wBr/4c689FRisLN+Kk5Ev1DY=
Subject key identifier:   EF:84:79:F5:03:38:19:E4:62:ED:C5:5E:F5:FF:0C:44:C0:2C:DE:77
Certificate issuer:       /CN=12139121-8c82-4685-a6f3-76023bbcab6d
Certificate serial:       010D0C9F432858490021632886461EB251FF8C00
Authority key identifier: B4:10:4B:21:6F:C5:D1:99:DB:83:24:BD:79:A3:90:B8:67:C8:60:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d/c7b35c91-fdf8-3fcd-abe2-3e5f920b476a.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     53356
IP address blocks:        2602:f8de::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:63:28:86:46:1e:b2:51:ff:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12139121-8c82-4685-a6f3-76023bbcab6d
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=9f53d9bb-bcff-484e-8756-703cd3eb71ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c4:86:45:a6:41:9d:96:de:c6:7a:a3:c6:f0:
                    47:bd:0e:8a:b0:f9:ce:77:c1:d1:f1:69:b2:e9:11:
                    5d:d9:6a:c7:40:52:de:f5:f4:f4:8f:f1:32:be:41:
                    65:16:e4:81:4f:38:73:73:53:45:80:ac:d7:46:57:
                    61:f5:0d:fc:b1:04:6e:f6:2d:61:cd:ce:63:ca:af:
                    9f:2f:a0:57:83:f1:0c:a5:3b:03:97:da:45:1a:ce:
                    35:ad:09:70:f4:a3:e8:05:8d:76:71:ea:be:ac:b2:
                    05:59:85:16:56:c8:c8:3e:94:78:eb:67:ef:6c:d7:
                    f7:5b:ff:63:fd:4b:e0:a9:b6:39:45:8e:37:5f:f7:
                    17:ec:6a:97:95:9a:ea:5e:e7:cb:21:e9:29:0f:db:
                    6c:e0:a0:c6:76:4e:76:8e:34:25:c6:ab:d5:ca:bb:
                    6b:6f:a8:2a:e5:6e:95:26:7d:8b:00:ae:18:6a:18:
                    5f:ac:14:1e:65:f9:41:41:6f:21:23:5d:87:dd:76:
                    94:b7:45:97:3c:c0:7f:50:6e:7a:54:b8:bd:79:49:
                    77:9a:89:c5:f7:4e:4f:ba:a7:9d:b1:b2:1b:29:a6:
                    40:47:bc:64:1c:e3:f5:61:06:38:5c:35:a8:b5:29:
                    1c:a5:f7:35:a1:f6:2d:b9:54:0c:5c:97:e4:2e:87:
                    cd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:84:79:F5:03:38:19:E4:62:ED:C5:5E:F5:FF:0C:44:C0:2C:DE:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d/c7b35c91-fdf8-3fcd-abe2-3e5f920b476a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d/12139121-8c82-4685-a6f3-76023bbcab6d.crl

            X509v3 Authority Key Identifier:
                keyid:B4:10:4B:21:6F:C5:D1:99:DB:83:24:BD:79:A3:90:B8:67:C8:60:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8de::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:7c:e3:e2:bd:38:a6:4c:33:04:13:39:f1:17:51:dd:4c:f2:
         fd:82:f2:42:99:ec:53:ae:24:9f:04:2f:02:11:c4:4c:1b:d4:
         20:fe:94:4d:87:c5:ba:23:f7:fd:fc:7d:b8:b9:3c:89:e8:7c:
         65:a2:88:4d:4b:b6:da:d7:65:d2:bc:80:58:f8:0d:e5:3f:4c:
         3f:79:55:98:68:3a:a8:67:74:a4:09:8e:99:67:99:88:8b:fb:
         21:b6:9a:cc:04:5b:bc:28:67:6e:62:2b:f0:7c:c3:3b:8a:2e:
         87:0a:ad:b2:53:61:e0:4b:75:f5:92:88:03:b8:75:68:f2:4b:
         33:a2:02:40:e0:08:ed:bc:1c:0d:6a:ae:01:99:e2:c6:2d:7f:
         9c:f5:3e:c3:a3:ea:44:61:a5:2c:ba:fd:4a:48:77:02:dd:13:
         e3:0f:0a:31:f1:1f:97:3c:d3:e0:b1:30:25:0b:0d:2a:07:c5:
         5e:c1:bd:ae:c0:7e:f3:4a:0a:e8:14:ec:56:d0:bb:71:f0:70:
         25:fb:76:b3:1a:c0:dc:b0:cc:bf:0a:61:35:b3:cf:1b:2e:62:
         a2:d7:48:95:d2:29:37:be:fb:00:39:39:9a:16:b3:3e:6a:38:
         69:af:4a:30:bd:14:da:59:7a:95:16:69:6b:a5:91:e9:26:b0:
         ba:a4:9b:a6
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkAIWMohkYeslH/jAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTIxMzkxMjEtOGM4Mi00Njg1LWE2ZjMtNzYwMjNiYmNh
YjZkMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk
OWY1M2Q5YmItYmNmZi00ODRlLTg3NTYtNzAzY2QzZWI3MWVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsSGRaZBnZbexnqjxvBHvQ6KsPnOd8HR8Wmy
6RFd2WrHQFLe9fT0j/EyvkFlFuSBTzhzc1NFgKzXRldh9Q38sQRu9i1hzc5jyq+f
L6BXg/EMpTsDl9pFGs41rQlw9KPoBY12ceq+rLIFWYUWVsjIPpR462fvbNf3W/9j
/UvgqbY5RY43X/cX7GqXlZrqXufLIekpD9ts4KDGdk52jjQlxqvVyrtrb6gq5W6V
Jn2LAK4YahhfrBQeZflBQW8hI12H3XaUt0WXPMB/UG56VLi9eUl3monF905Puqed
sbIbKaZAR7xkHOP1YQY4XDWotSkcpfc1ofYtuVQMXJfkLofNMQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFO+EefUDOBnkYu3FXvX/DETALN53MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMjEz
OTEyMS04YzgyLTQ2ODUtYTZmMy03NjAyM2JiY2FiNmQvYzdiMzVjOTEtZmRmOC0z
ZmNkLWFiZTItM2U1ZjkyMGI0NzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTIxMzkxMjEtOGM4Mi00Njg1LWE2
ZjMtNzYwMjNiYmNhYjZkLzEyMTM5MTIxLThjODItNDY4NS1hNmYzLTc2MDIzYmJj
YWI2ZC5jcmwwHwYDVR0jBBgwFoAUtBBLIW/F0ZnbgyS9eaOQuGfIYBMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xMjEzOTEyMS04YzgyLTQ2ODUtYTZmMy03NjAy
M2JiY2FiNmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL43gAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEApXzj4r04pkwzBBM58RdR3Uzy/YLyQpnsU64knwQvAhHETBvUIP6U
TYfFuiP3/fx9uLk8ieh8ZaKITUu22tdl0ryAWPgN5T9MP3lVmGg6qGd0pAmOmWeZ
iIv7IbaazARbvChnbmIr8HzDO4ouhwqtslNh4Et19ZKIA7h1aPJLM6ICQOAI7bwc
DWquAZnixi1/nPU+w6PqRGGlLLr9Skh3At0T4w8KMfEflzzT4LEwJQsNKgfFXsG9
rsB+80oK6BTsVtC7cfBwJft2sxrA3LDMvwphNbPPGy5iotdIldIpN777ADk5mhaz
Pmo4aa9KML0U2ll6lRZpa6WR6SawuqSbpg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:29 2025 by rpki-client on console.sobornost.net