Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/f66b416c-5dab-3844-8338-a35fca55e64d.roa
File:                     f66b416c-5dab-3844-8338-a35fca55e64d.roa (raw, json)
Hash identifier:          IKztS6zHg46v3sRXzXewqUVrmgPF1P4JZ8hAJrJoD9I=
Subject key identifier:   FA:54:8D:E4:96:4F:92:C2:44:03:54:64:13:49:85:54:91:ED:D4:3A
Certificate issuer:       /CN=093d143f-009a-4f7c-beb4-ce9c73352417
Certificate serial:       010D0C9F432858492067C1073C71C48CD929DB80
Authority key identifier: C3:0A:EC:72:62:13:1C:C8:8E:82:E5:2F:43:B6:2F:EA:8A:4B:DE:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/f66b416c-5dab-3844-8338-a35fca55e64d.roa
Signing time:             Sun 09 Mar 2025 03:28:45 +0000
ROA not before:           Sun 09 Mar 2025 03:28:45 +0000
ROA not after:            Sat 07 Jun 2025 02:28:45 +0000
asID:                     216360
IP address blocks:        2602:f974::/36 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:67:c1:07:3c:71:c4:8c:d9:29:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093d143f-009a-4f7c-beb4-ce9c73352417
        Validity
            Not Before: Mar  9 03:28:45 2025 GMT
            Not After : Jun  7 02:28:45 2025 GMT
        Subject: CN=caac1fef-31f3-4b1a-946c-b59c6daa1b89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:43:14:0e:aa:16:db:3e:25:fd:13:bc:56:70:
                    7f:43:d3:b5:6a:14:39:b1:be:71:a0:d1:20:38:7b:
                    7b:ee:20:0e:7a:ca:c1:97:1d:c1:63:a0:f8:0a:08:
                    dc:f9:81:54:32:34:c0:13:13:02:1e:65:8e:a8:1f:
                    17:72:82:ff:4d:24:07:1a:55:c4:60:84:5b:52:bb:
                    3a:54:46:62:4e:bc:bf:25:db:52:ef:12:86:4e:f7:
                    2e:23:c6:06:31:15:81:2d:fa:d5:af:fe:b0:f9:fc:
                    32:5a:48:b5:5a:2d:b0:41:69:2d:bf:71:58:60:02:
                    da:1e:da:b3:17:82:f2:e0:12:62:ab:30:67:3f:e1:
                    66:a4:42:85:16:54:14:66:23:45:f3:de:f5:f8:83:
                    ca:74:a1:ab:ff:c8:5f:06:1b:1d:fa:de:c7:e6:6a:
                    8f:d2:45:90:a7:4a:75:e0:9b:f9:00:09:6b:bb:1e:
                    88:57:6a:0c:bf:70:71:71:a6:bf:4b:6e:1d:1b:05:
                    53:20:d8:4b:4f:84:af:68:53:5f:92:77:be:e2:67:
                    40:d1:48:b1:e0:11:64:6d:73:58:dd:f7:6d:86:63:
                    12:35:17:d1:8a:0a:29:3c:22:58:bb:2d:c2:b2:94:
                    f5:4f:1e:6d:b5:b2:45:b7:cf:ef:b1:03:9a:5f:46:
                    10:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:54:8D:E4:96:4F:92:C2:44:03:54:64:13:49:85:54:91:ED:D4:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/f66b416c-5dab-3844-8338-a35fca55e64d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/093d143f-009a-4f7c-beb4-ce9c73352417.crl

            X509v3 Authority Key Identifier:
                keyid:C3:0A:EC:72:62:13:1C:C8:8E:82:E5:2F:43:B6:2F:EA:8A:4B:DE:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f974::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:29:3a:8d:c9:9a:16:a2:a1:68:bf:44:22:09:6a:34:3c:44:
         2b:1b:15:5d:6b:91:6a:e0:18:92:a4:fe:35:86:d9:43:22:fc:
         ff:aa:03:8e:bc:fb:27:c1:96:a4:61:ae:af:f9:7f:e0:62:87:
         2d:1c:e9:7d:c8:da:f6:54:84:18:a4:4b:f4:98:61:e9:26:6e:
         6e:2f:13:26:9c:9a:d5:4b:14:cb:73:e9:79:ef:b0:05:18:71:
         8c:6b:ea:ea:5f:6a:5a:a7:6f:34:40:aa:16:9c:5f:36:b1:68:
         51:99:3a:08:45:9f:c4:d0:7a:3a:bc:e1:d9:10:a3:64:f3:1b:
         93:bd:d1:29:25:8d:90:e8:f8:78:ce:e4:75:83:87:1e:63:bb:
         db:bc:26:82:71:c3:58:db:75:c2:44:2d:1e:9f:47:ab:4d:7a:
         e4:c5:46:27:72:f2:2d:6b:13:0f:e2:93:ad:71:1e:a2:51:0d:
         2d:7e:c1:ed:7d:71:38:19:f9:0e:af:38:da:24:89:2c:54:35:
         cb:a3:87:df:2b:ca:c0:89:47:d0:a3:49:f2:cb:67:c7:19:50:
         ae:be:0d:9b:d8:16:d6:d8:ce:17:55:9d:3a:ee:d9:8b:14:7b:
         cb:74:ad:3a:39:13:30:3e:ba:fd:fc:2f:c3:83:f0:50:b4:9c:
         e5:bb:5d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:34 2025 by rpki-client on console.sobornost.net