Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8ac29bee-ed81-34f0-a0dc-6c3c089246a9.roa
File:                     8ac29bee-ed81-34f0-a0dc-6c3c089246a9.roa (raw, json)
Hash identifier:          GfHNfWCPYRwIZvpWY8oJNhJH7yhNehc/dDRfjxs0G4A=
Subject key identifier:   CD:B0:AB:D3:87:C2:58:6A:DC:69:87:C1:95:16:D2:2F:AB:A4:49:60
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F432858495ABEEC3F2DF11FB2178472C0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8ac29bee-ed81-34f0-a0dc-6c3c089246a9.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     54113
IP address blocks:        2620:11a:c028::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:ec:3f:2d:f1:1f:b2:17:84:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=4e7a59ab-88c4-4097-9d6b-f97341985946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:40:fc:37:83:fb:b3:23:91:c9:92:69:e2:9c:
                    2e:d9:9a:bc:d5:28:73:f8:1b:86:b2:34:9b:d1:f1:
                    c4:ef:70:9c:ab:3c:b6:2c:b5:01:f9:21:da:79:af:
                    cd:b0:28:e1:92:74:cd:1e:31:9a:14:57:0a:0e:df:
                    55:f9:bb:e9:2b:e8:da:16:b4:53:c9:a1:74:bc:4e:
                    ef:36:e3:6d:b5:be:59:19:97:2a:bb:cf:d8:68:d9:
                    a0:2e:44:2c:fd:28:1b:9c:2d:b3:2f:bc:cd:21:75:
                    55:9a:33:a7:e0:e9:c6:1c:a6:79:8e:4d:95:39:fc:
                    43:bc:9e:ab:4a:48:1a:ef:62:d1:31:92:a2:dd:5e:
                    10:c5:8c:94:33:14:e2:42:24:10:81:38:23:6f:6f:
                    b3:3e:f6:97:91:f0:9a:b6:a6:a3:da:df:50:88:3e:
                    c9:57:d2:3a:b5:43:30:df:fc:16:42:a4:e2:06:a7:
                    1a:10:51:a9:83:b3:98:4a:de:9d:a8:7d:f6:46:06:
                    37:b8:a9:84:40:ae:29:49:27:d9:bf:95:4e:32:60:
                    2a:91:36:59:ce:24:e3:6a:62:cb:41:5e:f7:40:e5:
                    19:b9:37:ee:b5:60:47:df:49:73:ab:0f:bf:cb:a0:
                    b7:92:57:ca:de:3f:4d:4f:8e:82:fe:23:60:ef:d7:
                    08:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B0:AB:D3:87:C2:58:6A:DC:69:87:C1:95:16:D2:2F:AB:A4:49:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8ac29bee-ed81-34f0-a0dc-6c3c089246a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:c028::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:43:2c:23:3a:5b:2e:97:2c:05:0c:4d:ba:36:04:2d:e4:ea:
         b5:6c:64:d4:38:ee:f4:f0:6d:68:14:c1:a2:20:1b:02:80:d4:
         68:ef:ea:e3:49:e1:d3:76:ac:7b:a2:d0:46:2d:0c:53:52:10:
         38:66:ad:75:f4:31:6a:c5:5a:e5:ea:56:b1:47:ce:ff:09:76:
         5c:59:b7:bb:f8:58:11:b3:3c:6b:0f:42:50:a0:7f:4b:db:62:
         39:92:8b:f1:d8:fa:a1:08:77:95:c2:7a:0b:f8:c4:79:5e:1b:
         22:2c:33:37:6a:b4:40:78:41:a9:2e:ca:18:fc:23:ad:31:a5:
         72:b5:f7:9f:41:3a:cf:5c:ee:68:b1:6b:ec:c7:5f:f1:f9:0d:
         07:74:fc:12:c2:0e:59:f4:53:94:28:ab:ed:32:3c:0f:33:0d:
         6e:f1:9f:a1:9a:72:37:81:65:c6:d1:e2:75:35:e2:20:51:7e:
         c5:df:5e:38:2b:91:99:a8:e6:19:44:eb:1f:9b:3c:92:37:8d:
         da:06:37:f1:cb:3b:30:a4:79:1f:79:3f:3c:66:31:a9:e4:05:
         c6:98:bf:c8:a0:da:aa:ba:86:70:75:2f:20:32:31:29:76:67:
         ca:0c:64:1b:36:fe:0f:54:7c:81:cf:df:c5:ab:19:46:86:41:
         2d:25:66:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----