Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/41b614f9-8bf2-3058-beb3-ba91615edf63.roa
File:                     41b614f9-8bf2-3058-beb3-ba91615edf63.roa (raw, json)
Hash identifier:          yFYxax+S1EzbKwitNpLGlnBYA42z25agaeCHSScSJNo=
Subject key identifier:   AF:EA:68:65:98:A5:E5:4E:34:73:42:6D:3B:D4:6E:EA:80:3B:75:CF
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584902EC09D2DBC5D110248DD480
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/41b614f9-8bf2-3058-beb3-ba91615edf63.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     16509
IP address blocks:        2605:dd40:8f80::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:09:d2:db:c5:d1:10:24:8d:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=9abeb012-d3ef-4c75-adb9-a036a5a47413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:64:7b:c3:ac:e7:09:f4:17:e6:a8:92:79:1e:
                    d6:6e:80:82:83:0c:46:16:ef:23:81:86:9f:e1:72:
                    62:6f:61:c4:10:e4:2a:d1:6e:72:98:e3:02:c3:ab:
                    60:a5:0d:4f:86:6f:dd:7b:cf:86:4a:22:b8:76:f4:
                    1b:40:2c:77:df:5d:2b:79:e8:04:db:38:94:76:f0:
                    fb:74:fa:1c:11:3e:92:e9:52:0b:97:27:56:53:27:
                    49:ee:56:05:89:0c:45:9e:f8:f8:d1:2d:e5:59:97:
                    10:0e:40:dd:7f:b7:f8:d2:5f:4a:c4:d8:37:41:b1:
                    38:6a:24:36:9e:a7:ba:c0:65:9b:41:52:13:06:37:
                    a5:3f:03:2a:e5:60:9c:c8:17:22:35:39:f4:ae:97:
                    cf:72:21:df:60:8d:4e:db:8f:20:66:ba:0e:fb:e2:
                    e7:9b:75:c9:01:82:12:4f:40:82:38:8e:c1:9b:b4:
                    fb:25:eb:f9:19:76:a0:f0:3a:50:b0:12:c3:bf:ef:
                    8d:08:fe:50:08:48:8b:13:3c:eb:ea:46:d8:2e:ac:
                    5a:03:29:94:fe:db:a0:cd:77:4d:36:af:6d:2b:86:
                    a1:ae:6e:4b:63:3a:79:dd:7f:22:ff:1a:a4:a4:77:
                    92:3d:ac:e8:07:a0:d4:41:f9:c2:93:8b:c6:47:c2:
                    28:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:EA:68:65:98:A5:E5:4E:34:73:42:6D:3B:D4:6E:EA:80:3B:75:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/41b614f9-8bf2-3058-beb3-ba91615edf63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8f80::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:fe:c0:35:34:d0:a5:c1:ce:b5:57:b7:ef:4c:7e:22:cc:9e:
         af:7f:4e:c0:3b:11:79:3c:44:8e:e2:af:9e:2f:87:8c:c9:a6:
         3b:a4:63:8f:24:e8:81:8f:33:2e:d4:3c:5b:b1:84:33:e8:95:
         d5:af:67:b1:cf:ab:19:ef:57:b5:9b:7c:7e:95:8d:e8:d3:b7:
         33:7f:05:fb:a8:67:7e:58:ee:3c:c4:fa:f9:f1:1b:1c:19:4b:
         c6:b8:b5:6e:b1:a2:90:47:13:66:4f:bd:0b:9b:b1:9c:61:50:
         c8:bc:f8:91:b9:c8:a6:fd:b4:50:b7:e2:ae:b1:f7:85:da:30:
         53:03:13:51:92:31:93:59:cf:ba:ab:47:b5:9c:d4:be:14:b3:
         a1:3d:90:08:2b:fd:d7:46:77:a3:df:0d:7b:86:16:8a:97:6b:
         1f:43:a1:e9:37:35:3f:2f:3f:b6:4d:41:1e:89:d5:70:79:14:
         0d:c2:a1:b0:a1:34:0d:b1:86:69:e3:96:af:97:ab:ec:3c:f4:
         60:f9:ba:37:e3:b4:b8:d2:8a:ee:a7:58:6d:f2:88:76:2c:80:
         37:3b:52:6c:00:fb:1b:ce:2a:18:29:b2:ae:ae:45:07:e2:e3:
         5d:32:d0:2f:ab:2d:0d:c0:43:3f:0d:40:e6:bb:60:89:f0:7c:
         bc:6c:0a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----