Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c99ecf9a-6ef4-374c-bbcd-9880d12816df.roa
File:                     c99ecf9a-6ef4-374c-bbcd-9880d12816df.roa (raw, json)
Hash identifier:          4tae0YsNF+9arscRYt7nBzD6HYaJ1wXsZvwLFRHVpJc=
Subject key identifier:   EF:87:CA:33:17:1C:7A:98:6F:35:64:AC:E9:DB:5A:9E:34:9D:29:E2
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584912470AB513A9A3C7D497C500
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c99ecf9a-6ef4-374c-bbcd-9880d12816df.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     397217
IP address blocks:        2001:502:d399::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:47:0a:b5:13:a9:a3:c7:d4:97:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=00c5a7e2-f7f1-45ce-b197-698d91710537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1d:89:5e:d5:d5:4e:eb:ee:18:6e:31:50:9a:
                    26:80:da:5c:1d:46:a3:d5:07:46:ac:50:10:4b:4b:
                    a1:5b:d8:0d:b6:b3:c1:c8:5a:77:01:73:2b:ee:d1:
                    5a:6c:b8:9d:70:f0:8d:d2:ef:98:5d:ea:4f:db:01:
                    8a:a1:f2:f1:cd:2a:6b:a1:ad:db:5d:a1:36:8e:fe:
                    d8:d4:fa:ab:67:8c:01:6a:d0:6f:ba:a7:4d:fc:ac:
                    6c:b5:f6:b5:79:b4:36:fa:b5:f7:7d:29:ab:b8:51:
                    a3:e6:20:3b:01:03:01:dd:88:5d:6c:f7:2e:cf:00:
                    e3:4f:d6:a4:7e:82:5f:3f:8e:77:38:1a:12:d7:75:
                    70:c7:7f:91:b7:95:70:5d:d6:33:d7:d9:f7:d9:bd:
                    26:b2:ec:e8:c6:a7:dd:c3:16:50:11:dc:50:b4:31:
                    83:69:62:4b:11:90:4c:8d:24:0a:64:63:7e:ca:88:
                    e6:28:31:14:26:33:1b:7f:e0:1e:b4:27:18:87:d9:
                    63:5d:2c:ff:06:8a:c7:70:83:d8:e5:21:8c:2a:aa:
                    d8:a8:50:66:9c:ab:b4:a7:30:47:d8:bc:9d:bc:4e:
                    39:f5:81:57:5e:c1:de:43:36:25:45:82:87:03:bc:
                    bf:cc:d8:1d:81:1a:83:4f:56:6b:1b:fa:f6:ec:33:
                    ef:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:87:CA:33:17:1C:7A:98:6F:35:64:AC:E9:DB:5A:9E:34:9D:29:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c99ecf9a-6ef4-374c-bbcd-9880d12816df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:d399::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:d0:36:27:9a:49:c9:3a:a5:df:e1:51:d4:43:07:77:f3:80:
         7a:7a:50:e9:60:23:5a:d5:9f:6c:dd:8c:bc:79:89:03:55:66:
         18:d7:6f:50:18:53:2d:89:96:01:c0:3c:0e:de:9f:8d:31:30:
         61:66:97:c7:36:a8:c5:05:89:5b:63:44:62:68:e8:a5:59:cc:
         98:97:52:a1:81:5a:3c:5b:40:bf:97:ae:3d:72:30:4a:05:f0:
         1d:7f:59:ba:22:03:d1:ba:a6:90:20:3a:8c:78:9b:31:d7:cf:
         ad:48:a8:66:90:3f:79:2f:d3:69:64:0d:09:cb:86:5f:dc:eb:
         e8:bc:8f:a5:4f:8b:4a:d8:1c:39:b0:38:33:68:87:12:0f:bc:
         10:21:0a:af:85:2a:09:78:b9:6d:91:08:2c:13:af:2e:41:69:
         c0:66:a6:a9:77:27:19:c4:9f:19:57:da:28:32:35:58:7b:07:
         df:65:56:17:7d:3d:cb:21:8d:e2:5b:e7:52:a9:09:f9:88:2e:
         19:8e:f2:0a:c8:c0:cd:83:5e:6d:62:7a:ab:be:f2:0b:78:1a:
         2f:a2:c0:22:05:8f:97:71:1c:d5:3c:e8:0b:77:35:32:63:13:
         84:a3:e4:0b:b2:49:ae:6e:47:f2:f7:8b:b9:df:47:9b:6b:91:
         3b:75:bf:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----