Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e/88e05931-0c14-3925-9e24-ef2218634232.roa
File:                     88e05931-0c14-3925-9e24-ef2218634232.roa (raw, json)
Hash identifier:          UKVNVDWovKi98vEOCiOhXh5l9Zue9BaEmJWGoF0MkFo=
Subject key identifier:   C4:22:4B:26:51:95:83:6B:51:6C:C6:FC:82:7C:30:55:5E:AE:74:DB
Certificate issuer:       /CN=21846a97-ea37-4a3f-89db-5c537c294e8e
Certificate serial:       010D0C9F432858495EEEEF4790E9DE5BF285DB00
Authority key identifier: F5:24:25:6D:75:45:45:38:2E:73:85:15:F9:D6:3A:37:69:A7:BB:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e/88e05931-0c14-3925-9e24-ef2218634232.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     400678
IP address blocks:        2604:a6c0::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:ef:47:90:e9:de:5b:f2:85:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21846a97-ea37-4a3f-89db-5c537c294e8e
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=39dece3c-a7d3-47b3-9cab-cf5a91377b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a2:5e:1e:63:c2:e8:f1:0e:0a:d9:b2:ec:78:
                    1f:f3:15:61:20:47:26:e7:6b:cb:ad:5b:15:b0:f6:
                    c1:75:8f:86:e7:31:df:1a:58:b5:97:7b:6f:e1:4c:
                    4a:e7:f8:de:86:42:fb:09:35:90:6e:a7:29:21:97:
                    98:b5:d0:5c:96:52:85:de:43:d6:85:ea:8e:4e:d0:
                    34:7c:90:8b:45:a0:5d:9a:7e:44:6b:00:44:a2:67:
                    5e:61:7d:95:f2:66:2a:54:f2:76:b5:b7:0a:77:15:
                    82:98:8f:ea:79:af:43:02:f9:a5:c5:a1:1d:24:2a:
                    fe:b0:7d:93:0a:8f:da:74:49:ab:7f:30:94:1b:39:
                    5d:c0:18:6d:f1:9e:f4:0f:f3:2a:9f:09:9f:8e:19:
                    63:cc:5a:bf:e9:9d:3b:f2:9e:d4:fe:f1:dc:d1:d9:
                    71:a9:fd:87:8b:bc:5a:10:ef:51:9a:48:86:3e:66:
                    67:90:5b:48:a5:c1:4e:de:aa:8b:5d:a6:7c:7d:81:
                    4e:9b:7a:3e:f0:d4:e9:fc:44:d1:eb:95:4d:d6:74:
                    74:51:15:81:59:33:74:1e:6d:b2:2f:74:2c:3b:80:
                    b4:f0:91:8c:e9:b3:77:b6:20:43:e6:b6:6b:b0:4a:
                    6b:6f:50:6c:52:7c:3d:ec:51:c0:35:77:40:d3:f0:
                    9e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:22:4B:26:51:95:83:6B:51:6C:C6:FC:82:7C:30:55:5E:AE:74:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e/88e05931-0c14-3925-9e24-ef2218634232.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e/21846a97-ea37-4a3f-89db-5c537c294e8e.crl

            X509v3 Authority Key Identifier:
                keyid:F5:24:25:6D:75:45:45:38:2E:73:85:15:F9:D6:3A:37:69:A7:BB:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a6c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:cb:3d:fe:6d:be:a0:f2:6b:3d:2e:c6:ff:1c:62:d6:79:1c:
         91:1d:2f:28:2f:13:1b:92:4e:4c:2d:52:22:ca:11:f9:b2:b0:
         79:ef:da:b5:45:7d:d9:91:33:a1:c2:0f:d9:de:c5:c4:e3:8d:
         7b:86:d3:81:0c:67:c9:b5:e4:c3:ab:79:56:a1:d3:11:d8:18:
         68:09:43:ae:79:a9:ae:d7:df:c7:a9:72:41:92:68:85:20:b0:
         8e:4e:5d:96:5a:3d:db:d5:6a:22:5c:c5:37:d9:3c:fa:b7:b9:
         ac:36:3d:c8:ac:ee:14:60:8a:04:ea:99:a2:f7:35:4b:cf:e0:
         46:ea:46:60:db:98:a1:58:1c:f6:d8:55:78:29:2f:2e:ab:de:
         07:6a:61:e6:70:9b:90:5e:5d:04:40:77:f6:c8:56:d5:d4:fb:
         7a:13:48:5b:d7:43:74:65:5f:9c:42:33:9b:63:a5:02:09:b1:
         ac:cf:c6:eb:0a:84:19:11:fc:6f:aa:e7:00:04:e2:28:bf:ed:
         2c:3f:7f:e7:98:01:4a:1a:54:e3:d7:2b:c7:88:e7:8b:2b:1c:
         be:df:0a:ad:6f:24:5d:04:2c:da:86:27:06:65:c0:26:72:b2:
         89:8a:b3:37:e5:61:66:a3:fc:4e:e1:ac:21:ab:ac:ae:f5:81:
         f1:d7:64:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----