Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ad1646d5-e9b0-3f73-af36-500c6f8e9659.roa
File:                     ad1646d5-e9b0-3f73-af36-500c6f8e9659.roa (raw, json)
Hash identifier:          O22RiaCNOgXGCcWWw+9ePtDv2wUj2dztgrZfE2T9AX4=
Subject key identifier:   C6:66:AC:BB:E6:C8:DE:5B:4E:FF:8F:8C:59:52:CC:D5:C4:54:67:89
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584981D4544FE90B25A4F5988DC0
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ad1646d5-e9b0-3f73-af36-500c6f8e9659.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     398549
IP address blocks:        2605:dd40:9005::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:54:4f:e9:0b:25:a4:f5:98:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=5f335512-2da1-4033-ade5-7ada5b8d8be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ae:ee:60:33:19:8d:3b:73:9b:90:5f:85:aa:
                    dd:83:d3:3e:96:5b:02:95:6d:58:ef:66:57:e7:37:
                    26:a3:14:1e:f3:5d:b3:56:9e:7c:7f:9b:d8:ff:09:
                    b0:71:ef:e3:d0:8d:f8:9a:bc:b1:dc:98:1c:22:ac:
                    b3:dc:58:4f:f2:0e:17:67:29:67:cd:22:75:aa:63:
                    5a:d0:39:1e:f6:6d:7e:f4:b3:84:2b:b4:d7:b7:83:
                    9a:49:fc:f6:1a:57:da:ff:76:e3:9f:aa:01:15:f2:
                    73:b5:28:d5:d7:62:83:af:72:83:e4:fb:e2:0c:7e:
                    70:0f:94:4e:4a:6a:c2:45:0e:ac:12:52:a7:7f:bf:
                    31:c2:c1:05:c3:25:d2:e9:f4:7d:56:b4:8d:7e:23:
                    0d:5a:13:87:86:5d:83:97:47:d2:b4:c9:bd:b6:f2:
                    58:01:02:79:10:f5:00:50:49:1d:a9:be:4e:3b:12:
                    9e:2b:b5:a0:a9:29:ab:67:c0:e6:d4:ba:aa:13:1f:
                    11:3f:eb:00:df:8c:43:ad:6e:4a:6b:f6:d3:71:38:
                    ed:10:91:1b:b1:e6:df:5b:58:fd:48:3b:89:3e:4f:
                    7c:c0:a2:74:68:46:98:0c:b7:5a:8b:79:c2:79:e0:
                    7b:70:f6:e1:86:6b:02:b3:ee:a1:de:f6:15:79:cf:
                    08:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:66:AC:BB:E6:C8:DE:5B:4E:FF:8F:8C:59:52:CC:D5:C4:54:67:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ad1646d5-e9b0-3f73-af36-500c6f8e9659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:9005::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:3b:c2:57:3b:7c:c3:4e:ab:6f:83:24:56:a7:e6:d6:b5:16:
         55:ec:e9:c2:bf:66:a3:76:c1:7d:88:36:3f:11:89:1d:ae:6a:
         67:c8:c4:23:ff:73:7a:15:fb:e0:17:2d:8d:9a:56:1b:b4:ae:
         60:b8:b9:a6:71:40:33:1a:7e:b5:55:fa:0f:10:72:3a:1d:96:
         80:e9:b0:14:7b:cc:a6:d4:4b:9b:bf:33:be:b0:5c:30:46:6e:
         77:d1:6c:7f:bc:59:4e:33:7e:13:6e:50:05:b3:6c:6f:cd:d4:
         f1:e0:4b:03:86:92:1d:ce:66:0c:f4:0b:8d:6c:3e:27:d5:ce:
         c6:f9:3c:dd:b8:1d:80:31:af:e0:ee:d4:ca:a7:18:cd:15:85:
         96:05:28:22:d2:87:42:32:34:dc:18:e5:ca:9d:28:fd:83:7c:
         4b:4b:c8:ae:89:51:00:af:e2:e4:81:83:25:97:0c:f6:9e:44:
         54:35:49:55:e3:53:eb:69:fb:9b:72:1c:c3:45:5f:39:0f:f0:
         81:c6:4f:08:9b:f2:cd:d9:c2:f3:e7:5d:60:c1:53:c4:82:4a:
         e8:4c:06:d7:2c:18:3a:de:12:58:e8:dc:6b:c0:2d:86:45:d5:
         b3:ba:68:11:3f:7a:1c:40:06:d6:23:59:2f:c1:ea:95:01:ba:
         67:bf:ae:8c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmB1FRP6QslpPWYjcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA4ZWRmM2EtNzNhNS00NjE0LTljNzYtNTcwMmQ1Yzg4
OTc3MB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk
NWYzMzU1MTItMmRhMS00MDMzLWFkZTUtN2FkYTViOGQ4YmU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta7uYDMZjTtzm5Bfhardg9M+llsClW1Y72ZX
5zcmoxQe812zVp58f5vY/wmwce/j0I34mryx3JgcIqyz3FhP8g4XZylnzSJ1qmNa
0Dke9m1+9LOEK7TXt4OaSfz2Glfa/3bjn6oBFfJztSjV12KDr3KD5PviDH5wD5RO
SmrCRQ6sElKnf78xwsEFwyXS6fR9VrSNfiMNWhOHhl2Dl0fStMm9tvJYAQJ5EPUA
UEkdqb5OOxKeK7WgqSmrZ8Dm1LqqEx8RP+sA34xDrW5Ka/bTcTjtEJEbsebfW1j9
SDuJPk98wKJ0aEaYDLdai3nCeeB7cPbhhmsCs+6h3vYVec8I4wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMZmrLvmyN5bTv+PjFlSzNXEVGeJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhl
ZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAyZDVjODg5NzcvYWQxNjQ2ZDUtZTliMC0z
ZjczLWFmMzYtNTAwYzZmOGU5NjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjA4ZWRmM2EtNzNhNS00NjE0LTlj
NzYtNTcwMmQ1Yzg4OTc3LzIwOGVkZjNhLTczYTUtNDYxNC05Yzc2LTU3MDJkNWM4
ODk3Ny5jcmwwHwYDVR0jBBgwFoAUjiG5m/w/KlKClNSwhb33vM87VUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhlZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAy
ZDVjODg5NzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgXdQJAF
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALY7wlc7fMNOq2+DJFan5ta1FlXs6cK/ZqN2wX2INj8RiR2uamfI
xCP/c3oV++AXLY2aVhu0rmC4uaZxQDMafrVV+g8QcjodloDpsBR7zKbUS5u/M76w
XDBGbnfRbH+8WU4zfhNuUAWzbG/N1PHgSwOGkh3OZgz0C41sPifVzsb5PN24HYAx
r+Du1MqnGM0VhZYFKCLSh0IyNNwY5cqdKP2DfEtLyK6JUQCv4uSBgyWXDPaeRFQ1
SVXjU+tp+5tyHMNFXzkP8IHGTwib8s3ZwvPnXWDBU8SCSuhMBtcsGDreEljo3GvA
LYZF1bO6aBE/ehxABtYjWS/B6pUBume/row=
-----END CERTIFICATE-----