Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/b9fed38b-7833-339a-a34b-0e0e40f943aa.roa
File:                     b9fed38b-7833-339a-a34b-0e0e40f943aa.roa (raw, json)
Hash identifier:          5Ef9rGwR+y/RYpiHhv2S9hyc0gGqTJpEn6uMVgtVHUA=
Subject key identifier:   0F:5D:AE:CD:31:B1:7A:52:4E:84:50:70:E7:0C:95:5A:33:67:6B:51
Certificate issuer:       /CN=7245cdbf-97d7-4376-9d8d-298cda5d3854
Certificate serial:       010D0C9F4328584964843BFD59AF4BAC02832510
Authority key identifier: 16:E1:82:B0:4E:45:0C:2A:9E:DD:0D:F0:AA:AC:06:28:3E:D9:97:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/b9fed38b-7833-339a-a34b-0e0e40f943aa.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     32726
IP address blocks:        2620:12f:2000::/40 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:3b:fd:59:af:4b:ac:02:83:25:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7245cdbf-97d7-4376-9d8d-298cda5d3854
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=9f0a8877-cb54-4f6a-a60f-fe691c6c552a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7a:7f:dd:76:4e:be:22:e3:a6:15:d9:41:24:
                    86:c0:cd:ff:26:80:8b:e1:67:76:70:02:90:bf:94:
                    79:d6:70:f6:31:b0:fe:4c:c1:3a:91:7c:11:90:e3:
                    12:81:02:39:80:6b:d8:df:63:26:de:c6:68:a4:19:
                    c5:39:00:8e:26:61:37:da:88:29:f6:75:e1:11:b0:
                    43:f5:9e:0e:b0:7e:73:ce:07:3d:a9:d1:6e:a6:16:
                    b8:ae:cb:43:ac:51:72:e7:c8:fb:d5:ef:38:e4:02:
                    88:2f:e9:ac:28:87:3e:e6:9f:02:aa:61:d5:6c:71:
                    30:06:c5:2f:f4:92:c7:c8:28:a5:ee:89:72:f7:bc:
                    df:39:45:35:d7:a9:a7:d1:ac:28:10:a2:ed:e7:c2:
                    22:06:1a:12:f8:94:cb:4f:3b:f7:14:28:e2:e9:38:
                    1c:4c:a2:db:c8:23:5d:df:8a:3a:66:d6:e5:d5:a3:
                    0a:43:7f:f0:a7:53:d7:ef:a7:29:d2:3e:be:c6:c6:
                    64:b1:f0:d7:02:c3:8d:b5:f2:02:c5:0e:64:3c:df:
                    08:bb:5b:16:f8:36:2d:b5:d9:ff:57:50:fd:be:17:
                    59:f4:1e:e6:ca:02:43:bb:a1:47:bd:87:02:bd:43:
                    bb:c0:f5:ba:3d:6e:39:c4:c9:0d:b1:6a:e0:c3:dd:
                    bc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5D:AE:CD:31:B1:7A:52:4E:84:50:70:E7:0C:95:5A:33:67:6B:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/b9fed38b-7833-339a-a34b-0e0e40f943aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/7245cdbf-97d7-4376-9d8d-298cda5d3854.crl

            X509v3 Authority Key Identifier:
                keyid:16:E1:82:B0:4E:45:0C:2A:9E:DD:0D:F0:AA:AC:06:28:3E:D9:97:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:12f:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:22:ea:45:43:38:52:75:49:1e:08:ba:a7:28:7b:18:ad:25:
         d9:73:2c:9d:b1:aa:ed:31:42:c8:af:82:07:0c:52:43:73:eb:
         ab:4e:8c:47:c7:9e:a9:51:0c:41:f3:1e:f1:de:4f:e7:d8:ff:
         18:64:63:cc:a2:53:5d:d6:b5:17:46:3f:26:72:b7:be:5d:2f:
         6e:d8:06:76:26:9e:39:33:7f:89:4e:c8:fc:96:d5:8b:ad:cd:
         5b:e6:3b:7a:d6:cc:40:ff:79:d5:5b:8c:b3:65:d3:a0:fd:cb:
         f6:21:c4:3b:95:75:f2:6a:7e:ad:66:1b:33:2a:fe:02:4d:7d:
         35:e2:90:45:76:e0:6c:f7:eb:b5:1a:b0:97:c5:b0:c3:15:63:
         6b:d4:b0:e6:f0:7f:2e:76:56:ac:b0:7d:c3:83:fd:4d:9e:e1:
         f5:d9:e3:99:ee:0e:84:6f:94:19:7c:d8:a5:94:05:e3:3c:26:
         79:06:61:0e:3c:b6:98:07:20:14:02:6f:99:57:65:c4:e4:29:
         5f:19:04:a6:51:f3:64:78:bc:e9:89:bd:15:45:d6:38:f1:85:
         47:b7:0f:11:16:94:cc:ff:12:9e:86:67:b4:c1:b9:3c:27:68:
         13:c7:d3:0d:c5:38:83:49:d7:6f:0e:4f:fc:d8:31:da:a2:4d:
         c8:53:b2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----