Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/cdbf7809-2cad-3a97-b1b0-ceb4ac5a7f5c.roa
File:                     cdbf7809-2cad-3a97-b1b0-ceb4ac5a7f5c.roa (raw, json)
Hash identifier:          FQBcA7QVSEAQVMjYoOIANC7Lql2KkOIdz28ReP7SlMg=
Subject key identifier:   08:E1:BE:59:16:66:A9:3A:EA:21:06:F9:B8:75:C6:C7:83:22:1F:FB
Certificate issuer:       /CN=0575435f-d6e9-4d29-9519-fff0e513c74e
Certificate serial:       010D0C9F432858498339F689DA2EC75E516938A0
Authority key identifier: 41:C9:F1:A1:D4:C8:09:6A:B2:CC:4B:35:7E:06:B0:CE:91:7E:EE:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/cdbf7809-2cad-3a97-b1b0-ceb4ac5a7f5c.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     396319
IP address blocks:        2601:1308::/30 maxlen: 30

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:f6:89:da:2e:c7:5e:51:69:38:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0575435f-d6e9-4d29-9519-fff0e513c74e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=e959daa5-802f-40c4-855f-02aa049fa4fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:af:26:6a:de:70:85:e4:7a:30:38:3b:89:db:
                    28:88:9f:d1:44:b9:8c:e7:80:58:d8:44:84:13:ed:
                    67:e6:94:41:fb:a6:b7:01:64:70:29:ec:18:50:37:
                    a5:69:0f:10:bf:cd:97:e1:d3:40:54:bb:be:df:4e:
                    b7:19:ec:f9:ea:30:e6:d8:2c:7b:10:7b:21:60:3c:
                    64:00:d0:da:20:1f:e4:e3:1e:56:f9:71:3e:25:43:
                    49:15:e8:f0:76:67:f1:48:87:56:bd:4e:3f:6e:e6:
                    95:01:47:91:ed:93:db:c9:00:f4:6a:ec:62:d2:f2:
                    a1:20:c6:53:fb:1f:73:f1:b6:be:99:2b:7f:02:87:
                    35:c2:40:3f:ec:c0:69:eb:a7:51:30:93:7d:47:90:
                    5c:cd:9f:68:d5:68:9c:c2:32:c4:99:30:ce:3b:62:
                    b3:11:2e:a2:f5:6b:29:49:54:8f:2a:e0:b1:3d:1f:
                    39:65:8b:62:46:3b:79:f0:6b:57:8c:6f:0f:19:91:
                    ce:31:6c:c4:ac:e4:7c:be:a6:7f:13:d0:5e:c2:06:
                    27:eb:84:33:be:46:ec:be:b7:73:9b:59:31:0c:52:
                    ea:56:3c:ff:3b:30:92:66:ad:a3:7a:f5:5a:7b:fa:
                    90:67:7e:3c:fe:5c:d9:2d:62:c6:b4:4c:4e:59:55:
                    02:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E1:BE:59:16:66:A9:3A:EA:21:06:F9:B8:75:C6:C7:83:22:1F:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/cdbf7809-2cad-3a97-b1b0-ceb4ac5a7f5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0575435f-d6e9-4d29-9519-fff0e513c74e.crl

            X509v3 Authority Key Identifier:
                keyid:41:C9:F1:A1:D4:C8:09:6A:B2:CC:4B:35:7E:06:B0:CE:91:7E:EE:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1308::/30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:5e:52:d3:d1:17:a0:70:5a:14:2e:40:88:e9:5b:65:82:9e:
         da:ad:40:e5:af:78:13:b9:43:af:90:a2:89:4b:e9:81:38:66:
         74:73:e6:32:19:60:be:c5:28:e3:1c:32:93:b5:e2:71:ad:92:
         fd:1c:af:a1:aa:57:d2:97:d6:f9:3a:bc:14:83:c1:1f:ba:4b:
         95:d5:94:11:88:e0:ad:48:9a:30:91:1e:6c:98:39:26:ef:11:
         12:5b:2f:62:c9:0e:d9:61:82:69:b5:2e:e0:54:00:a7:55:17:
         50:d4:fa:41:e4:25:be:63:a4:02:4b:98:3c:ec:b1:96:63:8e:
         36:7a:82:0d:aa:05:44:f2:7e:5b:9f:af:6e:29:da:94:32:16:
         2f:e4:1a:3d:bb:a6:e0:2f:92:e4:09:24:9e:28:57:a7:1e:cb:
         ac:de:81:94:a6:34:9a:a1:90:a7:86:85:90:38:14:73:2f:76:
         ff:75:ca:28:2b:c6:7c:2d:ff:af:d8:ef:95:9a:ff:a2:27:11:
         d1:75:bf:0a:37:6d:22:b0:0e:8a:17:78:61:c9:2b:d1:35:ad:
         2b:7e:4b:4e:81:78:84:30:31:b0:13:31:31:4c:68:dd:4b:a6:
         9f:f9:a4:cf:15:c4:8f:f8:6a:40:c9:23:f8:f8:9d:a5:87:2c:
         76:44:65:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:30 2025 by rpki-client on console.sobornost.net