Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/7eacd1c3-cf58-3723-a088-db5e61f4b37c.roa
File:                     7eacd1c3-cf58-3723-a088-db5e61f4b37c.roa (raw, json)
Hash identifier:          6LlTnDcwuIsyvKP35V+3ZYICSKLJWhMy1l9etbcrIAM=
Subject key identifier:   21:63:43:DB:A1:EA:61:76:E9:54:E1:0C:C5:0F:D0:CE:69:96:BA:FF
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584981D4543E0944A0A6A0B35100
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/7eacd1c3-cf58-3723-a088-db5e61f4b37c.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     398549
IP address blocks:        2605:dd40:8210::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:54:3e:09:44:a0:a6:a0:b3:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=b943956a-4145-40b2-ad30-c95b13afde06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7b:c1:80:07:eb:c9:9f:0f:99:c0:3f:77:11:
                    2b:7c:be:c7:82:c9:9f:28:f6:e6:b5:97:ad:73:47:
                    35:4a:04:8c:e1:72:67:2d:87:3e:a8:5d:6e:ca:60:
                    ea:42:a7:12:29:c2:8d:0b:84:6f:df:60:67:6f:f1:
                    2c:24:d8:26:4d:83:de:30:c0:06:f6:dd:d2:18:34:
                    38:3d:8d:8c:97:ca:5b:f2:8c:77:e1:9d:7c:c4:04:
                    be:07:8b:16:c0:7a:19:20:7a:4a:a9:60:f8:43:2e:
                    69:55:8c:9e:34:89:1e:07:37:9c:48:0e:2c:71:d7:
                    20:63:5c:ea:0d:dd:26:61:71:8f:66:41:eb:7f:41:
                    b2:f4:2a:c0:2b:6f:b3:a7:20:dc:4d:de:5f:0a:14:
                    9f:fd:8d:3e:b2:cb:c3:dd:62:ec:67:b9:63:bf:74:
                    f9:7e:13:eb:6c:45:4b:9b:56:5f:ec:e7:c8:d4:f2:
                    e7:33:31:b4:0c:43:94:5b:c5:26:f4:54:2d:b8:98:
                    ee:f4:bf:62:43:e8:91:e9:9f:65:50:97:65:91:a9:
                    49:62:67:02:f2:d6:e5:22:80:02:5e:25:70:04:24:
                    39:6f:3a:29:31:08:54:87:4b:cc:77:96:1d:87:42:
                    eb:b8:93:d0:8c:ec:28:18:09:4f:87:0d:f8:a8:6b:
                    be:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:63:43:DB:A1:EA:61:76:E9:54:E1:0C:C5:0F:D0:CE:69:96:BA:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/7eacd1c3-cf58-3723-a088-db5e61f4b37c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8210::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:24:8e:b4:d7:b4:b4:c9:4c:dc:1a:0d:0e:25:c6:ac:b8:25:
         e0:e8:2d:1e:1f:c4:38:01:92:37:fb:63:4d:82:45:60:b5:be:
         0f:cc:3b:54:0d:c0:84:0e:b8:9d:45:f9:0a:e2:78:03:52:fd:
         66:c6:fd:64:3a:75:8a:80:ab:ee:be:6e:cc:0c:23:02:85:65:
         78:ff:9b:47:63:42:32:53:95:40:ce:51:15:f3:17:45:1a:d5:
         e7:54:01:66:e3:98:1f:d4:1b:94:a8:9a:43:b1:fe:05:a2:c2:
         c1:6a:52:01:49:de:9e:3a:56:8e:ee:a1:b8:c6:f3:35:41:6f:
         87:c2:2c:51:4d:3d:f4:31:16:93:8d:34:93:be:70:22:90:f5:
         94:a0:bf:c2:7b:86:1f:ba:08:e4:0a:50:a2:60:93:72:84:f4:
         ba:88:26:1e:44:b4:89:07:73:65:82:83:81:9c:f8:4b:50:6d:
         79:df:2f:41:53:55:89:db:7a:ba:c5:50:c5:7a:2e:95:6b:9b:
         e6:ef:1f:99:1c:72:5c:83:b9:2b:5a:1a:ee:85:a4:32:38:a6:
         49:8f:4a:a2:4c:4e:07:55:76:9f:ec:82:9e:1b:90:f6:8a:d5:
         0f:26:79:21:fa:0c:7f:96:85:bc:08:47:a2:7e:fc:d3:d9:3b:
         74:a8:11:08
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmB1FQ+CUSgpqCzUQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA4ZWRmM2EtNzNhNS00NjE0LTljNzYtNTcwMmQ1Yzg4
OTc3MB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk
Yjk0Mzk1NmEtNDE0NS00MGIyLWFkMzAtYzk1YjEzYWZkZTA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3vBgAfryZ8PmcA/dxErfL7HgsmfKPbmtZet
c0c1SgSM4XJnLYc+qF1uymDqQqcSKcKNC4Rv32Bnb/EsJNgmTYPeMMAG9t3SGDQ4
PY2Ml8pb8ox34Z18xAS+B4sWwHoZIHpKqWD4Qy5pVYyeNIkeBzecSA4scdcgY1zq
Dd0mYXGPZkHrf0Gy9CrAK2+zpyDcTd5fChSf/Y0+ssvD3WLsZ7ljv3T5fhPrbEVL
m1Zf7OfI1PLnMzG0DEOUW8Um9FQtuJju9L9iQ+iR6Z9lUJdlkalJYmcC8tblIoAC
XiVwBCQ5bzopMQhUh0vMd5Ydh0LruJPQjOwoGAlPhw34qGu+dwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCFjQ9uh6mF26VThDMUP0M5plrr/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhl
ZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAyZDVjODg5NzcvN2VhY2QxYzMtY2Y1OC0z
NzIzLWEwODgtZGI1ZTYxZjRiMzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjA4ZWRmM2EtNzNhNS00NjE0LTlj
NzYtNTcwMmQ1Yzg4OTc3LzIwOGVkZjNhLTczYTUtNDYxNC05Yzc2LTU3MDJkNWM4
ODk3Ny5jcmwwHwYDVR0jBBgwFoAUjiG5m/w/KlKClNSwhb33vM87VUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhlZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAy
ZDVjODg5NzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgXdQIIQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFMkjrTXtLTJTNwaDQ4lxqy4JeDoLR4fxDgBkjf7Y02CRWC1vg/M
O1QNwIQOuJ1F+QrieANS/WbG/WQ6dYqAq+6+bswMIwKFZXj/m0djQjJTlUDOURXz
F0Ua1edUAWbjmB/UG5SomkOx/gWiwsFqUgFJ3p46Vo7uobjG8zVBb4fCLFFNPfQx
FpONNJO+cCKQ9ZSgv8J7hh+6COQKUKJgk3KE9LqIJh5EtIkHc2WCg4Gc+EtQbXnf
L0FTVYnberrFUMV6LpVrm+bvH5kcclyDuStaGu6FpDI4pkmPSqJMTgdVdp/sgp4b
kPaK1Q8meSH6DH+WhbwIR6J+/NPZO3SoEQg=
-----END CERTIFICATE-----