Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535/27772857-84f2-33a8-8a3f-87c1f9f453ab.roa
File:                     27772857-84f2-33a8-8a3f-87c1f9f453ab.roa (raw, json)
Hash identifier:          w0B+51/WtxMNKyHGclACKJ+JOcMy41f8pziiSg3p2SI=
Subject key identifier:   CB:0D:CE:88:A3:D4:C8:1F:48:C8:13:BF:E3:7C:AF:4E:F5:19:1E:49
Certificate issuer:       /CN=9a5b5033-d8da-42ef-92ee-144938eb4535
Certificate serial:       010D0C9F4328584981D455FA09AFEF50F54AA900
Authority key identifier: 61:D8:B3:17:DD:B6:24:E7:4C:7E:84:36:37:92:85:44:72:6B:1E:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535/27772857-84f2-33a8-8a3f-87c1f9f453ab.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     30174
IP address blocks:        2604:e140::/32 maxlen: 64

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:55:fa:09:af:ef:50:f5:4a:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a5b5033-d8da-42ef-92ee-144938eb4535
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=2555670c-2c8a-4a48-b41b-2f1a2882558e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:44:74:b5:2e:52:79:d2:05:9e:96:a0:39:32:
                    7d:78:6c:a1:da:41:3f:5a:63:57:ed:17:49:cc:8c:
                    ae:39:33:50:10:df:f7:db:c5:2b:08:30:51:d5:64:
                    aa:8f:88:22:b5:bd:62:b7:a9:15:fd:11:13:44:2b:
                    c8:e3:b4:da:db:5e:6c:d0:a4:d1:27:2a:fb:47:36:
                    85:e6:aa:12:c8:24:db:d3:6e:54:88:47:0a:a4:04:
                    a6:0f:78:72:dc:f9:a0:01:6f:96:9f:53:5c:99:90:
                    93:d8:99:63:99:e8:2f:f8:c3:c6:cf:b6:9f:90:42:
                    9e:b8:b5:89:c4:72:19:68:6c:cc:50:1f:d3:2e:5f:
                    c8:5f:03:37:71:df:6b:01:49:a3:9e:02:12:c3:e9:
                    28:55:51:38:bf:fc:69:6f:1d:db:29:54:e8:6e:8c:
                    17:fa:24:ea:66:05:f3:da:af:26:cf:31:41:eb:22:
                    5a:1e:0b:42:38:f4:c1:33:0c:a7:f1:80:af:ea:68:
                    fc:9d:dc:9d:dd:3e:66:ab:92:02:3f:7d:34:6d:1e:
                    a1:95:9b:2d:94:ef:f4:0d:bf:7d:eb:f0:02:74:30:
                    19:5b:42:ef:04:93:a4:0c:7f:d8:06:65:9d:9c:3d:
                    34:57:e6:f4:10:d0:a3:7c:23:d7:6f:fb:0a:78:e6:
                    ee:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:0D:CE:88:A3:D4:C8:1F:48:C8:13:BF:E3:7C:AF:4E:F5:19:1E:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535/27772857-84f2-33a8-8a3f-87c1f9f453ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535/9a5b5033-d8da-42ef-92ee-144938eb4535.crl

            X509v3 Authority Key Identifier:
                keyid:61:D8:B3:17:DD:B6:24:E7:4C:7E:84:36:37:92:85:44:72:6B:1E:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9a5b5033-d8da-42ef-92ee-144938eb4535.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e140::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:cd:2e:3a:c8:c8:b0:90:66:b9:9a:fe:24:a3:40:3e:47:78:
         a6:68:6d:10:ec:97:19:3f:a2:ba:7e:ee:43:99:99:1c:6c:a8:
         04:1b:4c:f6:8d:34:13:16:a2:30:1c:44:75:3b:1c:6d:90:08:
         a0:65:16:58:46:7a:89:65:72:17:4c:47:0d:15:30:44:c5:e0:
         e2:eb:a0:c6:ac:44:d2:8e:77:6a:62:00:02:fe:72:b4:18:a5:
         a6:67:7e:3a:be:80:f9:f5:97:c4:44:63:34:ed:8d:1d:1c:5e:
         b1:e7:4a:0c:53:4d:30:f0:67:a2:f9:ee:d5:bb:a8:c1:c5:83:
         bc:94:35:51:cd:22:67:a3:1b:79:c1:e5:8e:04:bd:7b:19:0d:
         bb:06:24:c8:1d:cb:f9:16:72:c1:96:d8:ee:00:ec:43:56:75:
         39:8b:b4:69:89:7e:d4:b9:8b:c9:20:0e:86:7d:e4:58:cc:14:
         d3:34:c4:d1:44:1b:43:80:5e:82:63:b2:20:1b:d0:3e:77:6a:
         13:74:dc:26:b0:78:cf:d9:bb:26:5e:5d:f8:41:7d:34:4c:48:
         79:bf:5d:5c:d9:3b:96:89:70:f4:78:62:f1:33:45:82:82:68:
         d8:11:5c:2f:0f:c4:2f:a3:79:6c:56:18:7f:4d:0e:5f:57:9c:
         06:02:64:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----