Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/6238038a-869e-3775-ae7b-b340d12bbefa.roa
File:                     6238038a-869e-3775-ae7b-b340d12bbefa.roa (raw, json)
Hash identifier:          2lhgmtl6UcHn+Oa0MlolA7atIEvMG7MpPHexXG+aJ0w=
Subject key identifier:   98:B7:65:D9:6A:EE:51:E7:B5:EB:70:4F:13:A4:54:E6:06:51:71:8D
Certificate issuer:       /CN=007561fe-4b04-417a-b423-349b8b4b047d
Certificate serial:       010D0C9F43285848DA70FB7DD2F04B08FE916880
Authority key identifier: 6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/6238038a-869e-3775-ae7b-b340d12bbefa.roa
Signing time:             Wed 12 Feb 2025 02:00:39 +0000
ROA not before:           Wed 12 Feb 2025 02:00:39 +0000
ROA not after:            Tue 13 May 2025 01:00:39 +0000
asID:                     51965
IP address blocks:        2602:f9ec:cc::/48 maxlen: 48
                          2602:f9ec:cd::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:da:70:fb:7d:d2:f0:4b:08:fe:91:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007561fe-4b04-417a-b423-349b8b4b047d
        Validity
            Not Before: Feb 12 02:00:39 2025 GMT
            Not After : May 13 01:00:39 2025 GMT
        Subject: CN=b5fdd6d7-8a6b-46d9-ac01-229dd3c2ce5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dd:5d:b5:47:28:53:ac:80:6c:c8:4a:60:2a:
                    ce:b3:ed:22:03:38:f2:d7:b0:f0:29:e1:f2:78:88:
                    87:db:dc:48:f8:80:28:65:3e:2e:53:50:ae:9e:af:
                    59:f8:78:03:f4:06:ee:12:ea:56:d8:83:4b:76:79:
                    d8:f2:90:85:48:2e:d8:b1:05:80:c6:4d:29:09:ad:
                    ae:03:bd:70:41:46:c3:ab:0c:3c:c5:c8:7c:23:72:
                    fe:8c:52:24:bf:81:a2:4c:4c:d3:a5:da:8e:61:f9:
                    77:67:bb:cd:b7:41:f5:46:63:52:30:5c:ba:81:2a:
                    93:cb:d2:be:89:81:b2:5f:2f:cc:ff:d6:86:82:81:
                    9c:99:9c:a7:f3:ed:1a:d7:93:d7:91:8e:f1:4a:b9:
                    69:c5:94:71:09:c3:76:ed:a1:e5:ff:d5:42:4c:bf:
                    e8:ca:7b:09:ef:3b:32:4d:38:8d:cd:3d:e0:94:45:
                    18:68:75:9e:c7:cd:c7:f1:c0:5a:16:1d:30:be:72:
                    ec:57:b4:a4:e2:80:08:0e:57:bc:9c:6c:28:26:4c:
                    a2:1e:d3:a0:36:89:8a:4a:c1:cb:d8:66:d8:89:5d:
                    b5:2c:dc:1e:19:fa:00:c2:63:d4:42:03:5f:46:c3:
                    d5:db:34:8d:6c:5c:68:f8:24:a2:63:00:8f:1d:58:
                    56:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B7:65:D9:6A:EE:51:E7:B5:EB:70:4F:13:A4:54:E6:06:51:71:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/6238038a-869e-3775-ae7b-b340d12bbefa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ec:cc::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:95:07:cc:92:b0:28:62:b1:56:03:8a:bd:03:32:18:7a:1b:
         c9:51:ee:53:84:8f:64:04:cb:49:74:44:c5:db:0e:15:ec:b0:
         d7:01:33:d5:31:d3:dc:48:aa:8b:19:b1:e1:92:0d:ec:7f:7e:
         05:cd:df:21:9c:f4:e4:28:df:6f:0c:5c:2a:b1:4a:bb:61:90:
         25:04:03:a1:e0:80:3f:ae:34:1d:f8:ef:6e:4a:18:9a:9b:f4:
         bd:3c:cb:8d:d8:e5:b2:14:5f:45:9c:87:55:aa:84:bd:b8:8f:
         88:0a:8c:2e:a7:df:d0:29:3a:30:14:8a:9f:e5:d0:9e:72:c1:
         98:8e:ea:5f:95:8e:85:48:9f:aa:92:10:92:bf:6a:9e:28:6f:
         54:97:af:4b:c5:fb:68:aa:f0:0c:53:67:ec:8d:99:dc:5e:35:
         02:90:13:52:7f:1d:70:1f:91:64:96:07:85:ff:1e:1b:58:13:
         35:4f:fd:f0:92:d2:fb:19:1c:76:a1:7e:bf:18:00:ba:b4:b3:
         83:e2:84:cf:8f:a4:3d:c5:b7:6d:8b:b4:ad:b7:7f:4a:d3:f1:
         59:8e:ae:d1:d5:45:04:db:35:3d:6e:22:9a:58:b1:92:39:70:
         58:62:49:53:bd:f1:96:16:ea:16:b8:11:fd:0c:71:7f:3b:ef:
         11:c5:38:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----