Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/588727a0-232d-39b2-909a-8fb46c9ad17d.roa
File:                     588727a0-232d-39b2-909a-8fb46c9ad17d.roa (raw, json)
Hash identifier:          6u16hXNV8lJCuTA/APPSr8AN8cQpzXOaqF1fe5L+tY4=
Subject key identifier:   E5:39:D5:6A:B4:1A:F4:97:70:BC:01:F6:38:5B:33:CF:7F:B5:70:F3
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F432858493ED3D7F11E2F992A8B339660
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/588727a0-232d-39b2-909a-8fb46c9ad17d.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     398549
IP address blocks:        2605:dd40:ae0::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:d7:f1:1e:2f:99:2a:8b:33:96:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=6e633a37-22ec-41de-9452-18a2ccbfe0e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9b:fe:8f:51:e1:97:ca:4a:cb:85:6b:fd:c7:
                    52:46:ce:65:d2:75:31:5d:ec:d9:c7:e8:7a:22:1d:
                    64:21:ae:c8:18:36:33:b3:95:e9:89:2c:54:8e:40:
                    7f:84:f4:65:55:db:11:54:cb:a9:00:63:0c:41:5c:
                    0e:cb:65:be:86:fa:70:ce:7a:45:f1:52:19:a7:68:
                    02:26:79:c0:db:80:77:1f:dc:a6:f4:4e:24:50:40:
                    81:24:28:46:37:24:c1:40:1e:9c:2e:43:2a:0e:d6:
                    c9:af:63:8b:d9:58:8a:42:be:ef:c1:3d:80:15:3e:
                    14:f7:92:c6:50:ab:f6:9c:6b:24:a5:d5:86:2c:55:
                    1b:3d:0b:78:66:aa:2f:e2:7b:db:2b:60:fa:b1:8c:
                    62:f5:cc:b9:bb:7e:2b:2d:fb:22:35:c0:81:d9:12:
                    a7:96:71:c1:94:0d:5b:61:b3:d5:c7:dd:e8:b1:2b:
                    7f:d7:ea:a0:09:e3:f2:9a:3f:32:24:f4:bc:78:61:
                    f6:1f:91:13:c0:a1:ac:df:dd:ac:ae:30:e7:06:af:
                    ec:08:3a:74:ac:92:8d:d2:d5:bc:84:22:b7:48:c6:
                    85:99:fe:e1:47:ee:0e:17:5c:14:33:43:f6:67:9f:
                    aa:41:5b:e9:73:aa:09:3e:10:45:7e:50:99:28:81:
                    36:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:39:D5:6A:B4:1A:F4:97:70:BC:01:F6:38:5B:33:CF:7F:B5:70:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/588727a0-232d-39b2-909a-8fb46c9ad17d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:ae0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:9e:64:15:6b:39:ee:3b:09:35:3e:68:bc:c2:4b:68:d5:64:
         95:69:d2:50:f8:2d:ad:e7:87:12:af:72:13:e9:8d:28:49:fe:
         bf:bd:b3:76:8e:f0:98:6e:ac:7c:41:0e:2d:23:c3:50:6e:8f:
         a2:d4:01:cc:80:a2:14:cb:6e:bc:61:12:a1:21:3b:52:f9:58:
         64:14:aa:09:ec:9a:96:ec:0a:2b:c5:6d:9d:07:0c:94:bd:5a:
         1f:9a:3f:b1:dd:b7:48:33:3e:da:1c:e4:33:fb:d7:a1:c0:60:
         b5:c4:8e:57:c8:d3:a7:ee:bd:ed:12:b0:e5:13:13:50:90:5e:
         6e:a3:18:58:66:b5:a7:32:9e:da:34:4b:f7:46:ba:45:96:0f:
         f2:b5:45:4c:f8:ef:90:d3:48:fc:bc:a2:27:44:f2:5a:7b:65:
         05:31:e3:bc:2f:35:7c:f3:50:bd:e8:86:56:d5:47:07:6e:b7:
         ff:b0:b7:af:d5:46:7c:58:22:2a:3d:3a:d2:9e:e1:f5:96:09:
         26:ee:d6:03:e5:0f:1a:c2:fc:a6:10:3f:1a:82:2a:85:37:7b:
         e5:f6:51:a5:2e:1c:38:9f:44:46:2e:43:03:7c:b2:0b:06:65:
         6a:f0:88:88:51:ac:7b:55:33:7d:30:d4:eb:9e:63:9e:9a:83:
         c4:37:b8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----