Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/1defe652-8137-3aca-948a-42e69cc5dfc9.roa
File:                     1defe652-8137-3aca-948a-42e69cc5dfc9.roa (raw, json)
Hash identifier:          nVVKSut0yL5NQOsOL0m9W9qRUwLyGiynYJPmCIUPji4=
Subject key identifier:   AC:0D:E1:7A:9C:CF:EB:33:59:4F:71:B0:46:33:B4:C2:69:96:F0:FB
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F432858496CE44F784F2A6DC3D9C13780
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/1defe652-8137-3aca-948a-42e69cc5dfc9.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     6453
IP address blocks:        2001:5a0::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:4f:78:4f:2a:6d:c3:d9:c1:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=76e54ab8-5fc6-44f0-85c6-ad5b9b3e9384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:61:e1:92:5c:58:0e:b2:48:d0:ab:65:71:dc:
                    83:64:a1:0d:76:d5:f3:21:98:11:11:6b:ea:2c:5a:
                    c5:ab:7f:48:93:8c:99:2e:17:f2:bc:7a:36:69:f0:
                    66:d6:f0:8f:97:c7:89:91:b6:32:11:08:84:54:4f:
                    07:93:94:e9:95:3e:29:4b:47:9c:09:ff:a2:16:f7:
                    c4:15:17:02:f4:eb:83:43:34:11:15:d4:8e:34:29:
                    6b:a4:b4:99:dc:95:6d:1a:bb:da:c0:41:8a:f1:fe:
                    6d:37:52:eb:49:16:2c:6a:29:b0:26:27:97:05:bd:
                    a7:39:fc:0f:e9:6e:13:41:6b:3d:20:ee:c3:69:8a:
                    f9:59:1d:95:51:bb:8d:b6:84:84:f7:f6:1a:c2:9f:
                    2f:39:61:fc:f7:d0:9c:5c:ff:14:9f:6b:bd:d5:5f:
                    db:5f:ff:bd:3b:75:da:40:4b:09:37:98:0a:12:12:
                    ad:1a:4f:16:11:42:c2:81:87:35:ce:0d:ea:50:3b:
                    bb:fd:cd:06:fb:da:12:bb:55:e2:3c:6e:f6:ec:74:
                    f8:d2:2e:a1:16:d7:03:b3:37:a1:89:54:cc:69:45:
                    e7:fd:fd:3c:06:85:46:cb:a7:47:82:74:b2:47:8b:
                    bb:e6:91:d7:fc:bf:d1:e8:78:ed:1c:c2:34:83:09:
                    17:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0D:E1:7A:9C:CF:EB:33:59:4F:71:B0:46:33:B4:C2:69:96:F0:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/1defe652-8137-3aca-948a-42e69cc5dfc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5a0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:f3:35:21:54:fa:fd:b7:63:d4:5f:24:2f:85:8b:cb:d3:52:
         60:3d:38:cf:61:13:61:43:9c:fc:dc:65:0f:02:4b:76:f9:eb:
         05:64:18:df:13:0f:e6:5c:f2:03:c6:a1:d3:dc:22:3e:da:ef:
         43:8d:ab:28:29:ca:af:6d:5e:2e:4b:c2:6c:e3:73:70:3c:55:
         c3:5c:c8:e4:4c:f0:7a:01:45:00:70:4d:0b:73:ea:50:63:87:
         ff:35:6e:12:07:de:49:0c:71:6c:64:aa:f1:23:64:d2:23:5e:
         35:72:e4:09:fd:06:03:fa:23:55:b4:8c:61:b2:d4:d2:e7:47:
         b4:5f:8b:e6:00:8b:99:73:eb:f1:e9:a0:ef:dc:96:36:a0:12:
         5b:47:9e:32:f6:42:8c:0a:1c:6c:e9:2a:a9:5d:11:d7:ce:42:
         df:10:5d:be:1a:b5:f8:45:85:00:82:c2:74:d3:66:95:c6:58:
         fb:2e:55:d1:4d:9c:e9:05:bd:b6:70:c5:41:bf:e4:0a:dc:c8:
         8c:a3:12:f8:45:5b:14:2f:f9:64:c8:68:d6:d0:b0:92:c7:83:
         e4:84:ff:ac:ae:1b:14:35:95:5c:65:25:30:9b:ed:0c:05:58:
         4b:cf:e6:fc:ab:db:66:22:9f:e2:ab:eb:30:88:08:ae:23:fd:
         cc:d9:bf:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----