Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f639f2ac-d645-4aae-9b08-738d5297eda9/8bf39d84-5649-3180-ad36-57465cf33131.roa
File:                     8bf39d84-5649-3180-ad36-57465cf33131.roa (raw, json)
Hash identifier:          wgWv6ixhRefD+GpbhHrY0z+q0TOI9pz/WVxEQ3kDhr4=
Subject key identifier:   EF:3C:80:C3:94:0B:CF:1A:01:2D:30:5A:F5:3D:58:67:44:22:97:35
Certificate issuer:       /CN=f639f2ac-d645-4aae-9b08-738d5297eda9
Certificate serial:       010D0C9F4328584971143653789D6D198C121F80
Authority key identifier: 90:4E:88:BE:74:FA:85:78:7D:63:5D:8E:74:62:79:C1:32:38:B2:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f639f2ac-d645-4aae-9b08-738d5297eda9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f639f2ac-d645-4aae-9b08-738d5297eda9/8bf39d84-5649-3180-ad36-57465cf33131.roa
Signing time:             Mon 07 Apr 2025 01:00:47 +0000
ROA not before:           Mon 07 Apr 2025 01:00:47 +0000
ROA not after:            Sun 06 Jul 2025 01:00:47 +0000
asID:                     401425
IP address blocks:        2620:98:4000::/36 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:71:14:36:53:78:9d:6d:19:8c:12:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f639f2ac-d645-4aae-9b08-738d5297eda9
        Validity
            Not Before: Apr  7 01:00:47 2025 GMT
            Not After : Jul  6 01:00:47 2025 GMT
        Subject: CN=9a6e35cc-5db8-40f1-bbd8-112a32caba57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:26:ff:20:81:aa:d2:54:fe:33:89:46:bc:bd:
                    82:3c:17:4d:22:dc:79:e9:98:97:95:89:42:f7:e6:
                    5a:22:92:d8:54:03:a6:42:db:12:14:78:92:cf:ea:
                    fb:60:2b:a8:28:f9:04:f7:1b:19:27:d5:6c:e3:8a:
                    99:e7:52:2b:93:83:9e:a3:d1:fa:df:5e:dc:d3:06:
                    ef:d7:86:da:00:9c:fb:f6:57:ba:8a:a7:bd:34:dc:
                    87:bb:88:25:76:44:6d:1c:a8:71:fc:8c:43:b6:4a:
                    70:cb:8d:ae:d0:41:3e:93:4d:01:60:3e:85:0a:b0:
                    9a:27:61:a7:98:13:c6:e2:2b:5f:5d:95:e8:25:dd:
                    b8:2e:1d:9e:d6:4d:77:ca:f9:ad:8c:48:b6:1c:12:
                    c9:e1:67:2c:3d:b1:0c:fc:92:1c:2c:97:02:4e:21:
                    09:93:30:3e:b6:12:ad:7a:de:40:6b:85:7b:29:18:
                    c4:a5:0c:53:22:cd:e8:f3:82:f8:ba:fd:58:e0:14:
                    28:96:0c:ff:8b:99:47:41:9b:9f:65:07:c8:f1:71:
                    bf:82:82:c8:c2:a8:a7:bb:a8:8a:61:32:3d:e8:e4:
                    e5:8b:87:06:ec:d0:4b:45:51:b4:27:b7:6a:2f:e7:
                    c3:9b:fd:46:83:e1:a6:9c:95:bc:ba:36:46:86:60:
                    19:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:3C:80:C3:94:0B:CF:1A:01:2D:30:5A:F5:3D:58:67:44:22:97:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f639f2ac-d645-4aae-9b08-738d5297eda9/8bf39d84-5649-3180-ad36-57465cf33131.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f639f2ac-d645-4aae-9b08-738d5297eda9/f639f2ac-d645-4aae-9b08-738d5297eda9.crl

            X509v3 Authority Key Identifier:
                keyid:90:4E:88:BE:74:FA:85:78:7D:63:5D:8E:74:62:79:C1:32:38:B2:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f639f2ac-d645-4aae-9b08-738d5297eda9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:98:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:1f:4a:32:92:f4:29:b9:4c:dd:dd:13:bb:47:fd:e5:18:01:
         de:0b:52:c6:c8:d1:2f:de:bd:f6:0e:8c:c1:da:e4:81:95:61:
         89:37:6a:40:ca:e1:32:77:d6:d0:c8:4a:1a:1e:fc:a3:cc:74:
         5e:f1:3b:18:33:f0:cf:2a:52:c6:09:5d:63:cb:32:92:60:f1:
         63:83:ab:e1:11:8c:db:f6:78:6c:3a:9d:c9:68:c9:fb:6d:35:
         a6:ee:92:a9:24:fa:91:41:86:e0:5a:b1:9f:df:3f:a3:89:99:
         9e:fa:1a:38:a7:1a:c2:e9:e0:e8:35:9d:34:b6:66:b6:39:f5:
         ed:bf:f7:2e:9d:43:f6:18:67:cb:0b:71:8b:08:ac:00:7e:0d:
         30:0d:63:71:c1:19:9a:e9:74:fd:bf:e1:af:93:c4:60:ff:86:
         a4:3f:f8:3f:9b:87:e3:28:60:1d:04:96:0d:26:c7:08:ff:0f:
         a2:1d:21:b2:02:f6:8e:3f:ec:e0:26:31:ce:ba:c5:c7:3e:64:
         e4:83:4d:32:c3:32:40:0e:2e:70:b7:0e:0e:2a:a1:97:f1:15:
         69:de:8e:1c:12:41:e8:0a:8a:66:05:68:93:92:b5:40:68:a8:
         30:eb:ad:7e:b0:79:9b:21:8f:03:3a:9c:11:63:04:b6:27:86:
         53:0d:b7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:27:27 2025 by rpki-client on console.sobornost.net