Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/5a92c1cb-8171-3746-9840-5294314655b0.roa
File:                     5a92c1cb-8171-3746-9840-5294314655b0.roa (raw, json)
Hash identifier:          qFr2wsIqlDB5VHNkbKlDc1o7Ky5MpQsLZXHJmWiFbLs=
Subject key identifier:   C7:62:34:20:83:AE:46:12:61:C7:0B:48:7C:67:85:7D:7C:98:8C:C9
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F432858494B6415EF591FB9CF70167AF0
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/5a92c1cb-8171-3746-9840-5294314655b0.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     398549
IP address blocks:        2605:dd40:9030::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:15:ef:59:1f:b9:cf:70:16:7a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=c5a64c4b-52a6-4636-8355-e925b9d9b933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e2:0e:42:43:06:bc:33:50:f8:3b:0b:9b:13:
                    71:17:99:73:4b:1b:8b:21:f8:05:fb:df:38:3e:4a:
                    f6:eb:65:a0:e5:0f:4b:87:eb:91:1b:81:c6:12:f0:
                    61:63:41:1a:d7:51:0b:56:d6:a5:5b:18:b3:6f:a7:
                    03:78:a9:d7:5b:33:89:e6:c1:b0:e4:97:82:4e:42:
                    9a:a2:46:db:67:c8:f0:b3:49:2e:90:b4:f4:ed:09:
                    65:1e:9c:84:d0:50:ee:71:4e:8e:93:62:6e:7a:5d:
                    8b:46:06:72:1f:8b:a9:4f:d4:61:9b:b6:be:40:14:
                    56:ad:fc:95:c0:4b:d6:27:c0:5b:f9:7f:f7:e9:53:
                    c7:b6:8e:6a:e0:71:da:bb:8c:3b:a8:8a:d2:22:9e:
                    49:21:42:f0:7a:7d:dc:9f:b3:01:7d:8b:1d:5a:83:
                    44:97:38:b3:ac:7d:58:42:b9:f7:5d:c5:15:dd:bd:
                    2c:c6:9b:b0:21:a0:a7:c5:37:3d:a9:fe:8a:60:78:
                    85:a2:4b:12:f3:97:65:c9:60:f6:9a:a1:41:9c:36:
                    cf:c4:ba:1e:0d:b8:08:5c:d9:16:0b:a2:90:83:0c:
                    a9:cd:ef:98:ca:62:92:28:b5:7f:31:4c:34:b3:24:
                    ac:8c:24:60:cb:a9:dc:4c:91:b5:16:fa:d3:82:54:
                    70:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:62:34:20:83:AE:46:12:61:C7:0B:48:7C:67:85:7D:7C:98:8C:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/5a92c1cb-8171-3746-9840-5294314655b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:9030::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:78:7b:b8:a2:66:93:52:da:33:2a:32:15:9f:fd:1e:52:f9:
         5d:50:62:fe:b4:02:57:67:0b:73:df:f5:95:a3:54:c4:3f:85:
         1b:a6:33:e7:66:5c:73:ab:b1:fe:7d:fb:32:bb:dd:f8:b9:ea:
         01:76:c2:d2:05:d3:93:9b:94:3d:16:f7:be:c1:19:04:1c:85:
         9e:ab:ff:a4:bc:d5:5f:11:2c:5b:60:c5:5f:59:42:8c:c5:7d:
         66:02:0a:37:1c:3a:1c:d6:67:39:84:d0:94:44:de:98:24:80:
         b0:d0:87:ae:68:07:8b:ad:3a:e2:77:21:c9:f9:12:9c:96:c5:
         88:bd:48:72:e2:fb:84:57:f8:42:71:37:80:2a:10:4d:89:c4:
         41:08:f8:56:ff:83:66:49:b1:d8:8f:00:a2:fb:69:96:db:4a:
         e3:c2:1d:07:f4:25:35:b1:96:69:6c:c0:32:06:13:f6:c5:46:
         f7:9b:74:7f:bb:5f:30:ad:c2:ca:46:a9:fb:0d:57:52:16:ed:
         ff:cc:c7:7b:b4:26:8c:a7:a8:09:5c:99:76:0a:9b:7c:98:ae:
         37:d1:92:c1:b8:26:1f:7e:37:1b:6b:f8:4b:35:68:01:ee:e3:
         91:b4:1d:62:5a:2d:6d:de:c4:5e:14:21:c9:99:9f:f7:5c:0c:
         d9:7f:0d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----