Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa
File:                     935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa (raw, json)
Hash identifier:          b0KNiGVbvtcIWe0RBIeWPJy1ZmXVgghZTyxPuAuwaLs=
Subject key identifier:   03:A6:94:C5:47:D4:98:B5:43:56:09:6C:64:7B:AE:41:91:F3:6A:AF
Certificate issuer:       /CN=256d2a2e-9ac7-4d29-bd15-75874d49df66
Certificate serial:       010D0C9F43285848ADC611E40906A4EB335CE440
Authority key identifier: E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     33000
IP address blocks:        2605:fdc0::/32 maxlen: 64

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:11:e4:09:06:a4:eb:33:5c:e4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256d2a2e-9ac7-4d29-bd15-75874d49df66
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=d9d0d21b-a6cb-4028-bc3d-1b2405357b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:38:89:1a:cc:30:89:52:9a:31:f6:07:61:1d:
                    88:89:0c:a6:05:7b:f9:cb:57:13:90:ea:2f:08:54:
                    9b:1a:31:73:04:75:92:77:57:b0:95:2a:c7:c4:9b:
                    df:da:8d:7b:e4:5b:ed:0b:49:bd:05:4b:38:12:6d:
                    39:5f:b0:86:b8:cf:28:41:e2:b0:14:fe:9f:b4:9e:
                    10:6b:32:14:56:d3:d9:c4:5d:00:ca:87:b5:03:51:
                    77:83:b0:03:bd:37:4c:db:90:7e:52:79:3e:69:66:
                    f9:83:51:54:7b:50:88:ab:e0:a1:c1:cb:f1:75:0a:
                    f8:7c:75:03:68:91:fa:ac:76:64:55:98:06:a0:f1:
                    21:0f:a0:44:0d:43:3e:3e:37:21:18:44:9e:ef:e6:
                    89:5f:71:30:b5:68:ba:af:37:b2:31:84:f8:e4:ab:
                    ab:5b:53:d4:8c:73:77:cd:4a:dd:42:65:e1:66:32:
                    bc:0c:88:15:fd:f7:d1:af:01:77:2d:38:84:5e:46:
                    00:b3:33:14:ca:28:72:2f:f8:ba:ef:18:d6:8a:98:
                    aa:9b:27:fe:7e:cf:37:45:cd:7c:e2:7c:e2:05:42:
                    90:c5:f9:58:53:fb:70:e6:28:7e:c0:85:fb:b8:b3:
                    f5:50:e2:2d:64:bc:0b:de:d1:b6:64:50:59:dd:85:
                    9b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A6:94:C5:47:D4:98:B5:43:56:09:6C:64:7B:AE:41:91:F3:6A:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl

            X509v3 Authority Key Identifier:
                keyid:E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:fdc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:bb:55:00:7b:c5:8a:6b:64:bf:a1:fd:62:f4:7b:ef:f4:13:
         b6:21:8d:f1:79:9d:30:7c:0b:90:fc:6b:91:7d:86:62:78:ee:
         4a:08:74:f3:8a:ae:10:02:80:03:03:93:ef:b3:18:18:87:cf:
         cb:a9:28:6a:d7:56:a3:52:5a:0d:fe:97:a9:93:c6:9a:f4:07:
         01:fa:83:29:61:a4:cf:4e:5e:1d:de:70:a2:fc:ac:bd:d5:f1:
         3c:5c:96:f4:61:43:bc:bd:08:00:10:d0:4c:01:6b:27:af:e1:
         0a:93:df:98:82:5e:11:29:ba:40:3c:82:e6:df:b9:e4:1c:7d:
         f9:56:19:b8:85:3b:4d:d6:4c:30:40:2e:3b:0c:56:05:0b:07:
         e9:35:50:75:28:7e:a3:16:98:ee:e7:ca:07:dc:49:28:ec:56:
         ba:47:19:b9:44:f6:14:0f:02:90:0c:8b:e9:45:00:b2:98:12:
         ab:84:11:a0:dc:8f:9b:2b:5b:f2:b4:58:dd:d2:38:da:52:d4:
         b1:d8:c6:f2:e9:8f:c8:15:54:86:24:f9:df:57:37:74:62:3a:
         c5:4d:b6:c7:b7:07:18:64:34:1c:80:96:f9:04:9a:fa:32:1c:
         00:88:03:3a:d7:bc:a6:ed:89:6a:46:4e:39:0f:0a:af:67:e6:
         f7:b4:3b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:16 2025 by rpki-client on console.sobornost.net