Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/f63f3a7a-3760-30c0-b3df-bcc6e383c7c9.roa
File:                     f63f3a7a-3760-30c0-b3df-bcc6e383c7c9.roa (raw, json)
Hash identifier:          Qbj+08HXCDnqhtCP8ST3oHZeUfkRd++T6gO4KQKawUQ=
Subject key identifier:   FA:91:D4:3E:E6:29:27:0A:1F:BD:9C:D2:51:EE:B4:28:FA:FC:EE:C8
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F43285848F4F6A163B53CF482C38BB280
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/f63f3a7a-3760-30c0-b3df-bcc6e383c7c9.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     398549
IP address blocks:        2605:dd40:5005::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:a1:63:b5:3c:f4:82:c3:8b:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=1977a06f-ce3e-44bf-a501-02ef566832f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7c:4f:c7:24:25:92:9d:34:d9:67:d4:69:70:
                    75:26:9c:b3:07:3b:6b:47:d8:76:1a:b6:01:ac:bf:
                    c4:ac:a0:47:55:d2:39:86:be:96:24:4b:3b:1d:f4:
                    77:49:61:69:6b:59:b0:40:95:2a:63:98:54:79:e3:
                    8b:41:70:6a:be:20:ca:79:96:db:e8:24:1f:2b:1b:
                    aa:41:8e:15:7f:b9:6b:46:05:2a:9c:49:a4:e8:38:
                    9f:6a:11:c9:92:1e:68:00:79:ea:b8:79:ff:54:fe:
                    ec:4f:0f:30:32:b4:12:f2:17:4a:d1:11:e4:3a:9e:
                    02:19:67:6f:4a:35:df:f8:34:ad:40:dc:2e:19:17:
                    63:33:5e:1f:13:f8:73:d4:d3:0a:b0:d2:e9:2c:63:
                    9a:71:d5:22:a2:a9:26:61:a6:01:ff:b6:dc:90:4f:
                    fa:bb:ca:fc:eb:86:b4:24:bb:ef:f2:2f:51:4c:c1:
                    37:a1:0b:3c:22:73:5c:ba:fa:8b:55:5f:89:80:8b:
                    77:34:4e:09:36:fe:40:5b:9a:9e:e5:d1:ab:39:81:
                    27:45:4a:42:8c:61:0c:d7:7f:e8:bb:a1:69:24:69:
                    4c:b9:67:4c:16:0d:28:7d:e5:ab:1e:ac:df:61:33:
                    c7:74:c8:96:13:1f:49:7a:f5:29:7e:22:4d:30:b2:
                    32:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:91:D4:3E:E6:29:27:0A:1F:BD:9C:D2:51:EE:B4:28:FA:FC:EE:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/f63f3a7a-3760-30c0-b3df-bcc6e383c7c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:5005::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:2f:e4:09:38:07:8a:f9:d8:ee:2c:62:19:a3:4a:e4:7d:db:
         96:2c:76:ad:39:5a:07:48:b2:01:ee:d0:21:da:47:9a:26:c1:
         98:55:80:c2:cf:07:2b:b4:20:bc:30:b2:66:b7:95:1e:07:93:
         2c:fe:07:01:10:6b:e5:36:a3:1d:7f:71:ce:bc:7c:42:10:e0:
         f4:31:b0:b0:96:a1:88:ae:15:b2:d6:aa:0c:48:7a:6c:9a:86:
         8e:95:83:64:dd:73:7c:93:46:e6:60:85:54:c4:31:c8:f5:e9:
         a1:13:c0:23:c3:8c:e4:b8:92:f0:21:d2:71:13:dd:7e:a9:ff:
         ba:e0:6b:4a:24:f8:60:6f:55:72:7c:b5:d1:6d:0f:0d:c6:ca:
         ad:7c:e4:18:f1:b1:05:5a:8c:8a:d3:9b:55:11:5e:e1:1c:f3:
         b7:13:97:94:f4:cb:54:74:b8:b6:38:2b:7b:18:ef:ae:ed:1c:
         54:6b:7b:f0:5c:ab:6b:9d:9a:d8:79:7d:47:8e:eb:cf:cf:41:
         4c:82:48:f8:76:8a:0a:45:68:7c:5f:7f:53:a2:a5:fd:a9:91:
         85:d9:0f:a2:91:eb:a6:93:f4:10:f9:f3:51:b4:95:e6:d7:8a:
         6b:b1:6f:51:1d:d4:ea:c1:ef:bb:d5:eb:97:31:c8:3f:46:d8:
         1c:1c:eb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----