Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/45bf080b-be9d-3dfd-a821-593709ce5852.roa
File:                     45bf080b-be9d-3dfd-a821-593709ce5852.roa (raw, json)
Hash identifier:          lOIAR82Iy4a2OyQLrAj6MTAIhhVQVEmMOodTFPjCcPw=
Subject key identifier:   50:F3:FF:17:45:E2:78:F3:42:B8:10:86:1F:94:F4:78:7E:08:48:46
Certificate issuer:       /CN=53d9715a-5edc-4d9f-a9a2-830a16826131
Certificate serial:       010D0C9F432858491D68ECDF170EF7C60DF34940
Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/45bf080b-be9d-3dfd-a821-593709ce5852.roa
Signing time:             Sat 08 Mar 2025 01:43:41 +0000
ROA not before:           Sat 08 Mar 2025 01:43:41 +0000
ROA not after:            Fri 06 Jun 2025 00:43:41 +0000
asID:                     62787
IP address blocks:        2602:f6d0:ff::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:68:ec:df:17:0e:f7:c6:0d:f3:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131
        Validity
            Not Before: Mar  8 01:43:41 2025 GMT
            Not After : Jun  6 00:43:41 2025 GMT
        Subject: CN=f9795c3a-ba41-496c-afb4-fa0357bd1aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b3:ea:2e:6f:c0:ba:41:7d:68:bb:d4:09:48:
                    e1:b5:b7:a3:b8:24:70:47:68:48:a9:ea:25:46:c2:
                    12:d0:12:79:88:b4:6c:76:e2:50:10:31:6a:38:53:
                    9f:a4:5e:da:ad:f2:50:85:a6:2c:cb:01:55:b8:b0:
                    d4:49:ce:da:a2:e1:db:28:fd:ca:1d:74:06:63:94:
                    bb:db:9a:97:2e:81:b7:62:ea:da:c9:76:0b:34:06:
                    2f:b6:f5:2a:f3:dd:95:84:4e:9e:6d:40:53:6d:bd:
                    6f:0c:60:3f:c8:00:02:95:eb:5c:61:67:43:3b:b1:
                    72:56:44:07:22:21:17:2e:2d:2b:c3:6c:56:2b:16:
                    a7:b5:a3:8e:81:37:39:54:60:c5:6d:79:42:fa:25:
                    ea:a2:9d:21:9e:82:6c:2a:44:46:13:62:85:5a:3f:
                    a2:82:76:d5:af:fb:29:4b:ef:47:01:61:50:11:4b:
                    d2:6c:6b:72:f9:d9:bf:ad:47:48:e5:ce:93:e0:1e:
                    95:14:d3:87:ac:85:7a:d0:d6:f9:1c:05:96:64:e3:
                    c3:bd:19:ce:15:7b:d1:73:1a:b8:bc:a4:6b:54:df:
                    dd:81:b9:89:e8:02:34:40:b1:3b:fc:7f:73:b3:e0:
                    8d:ad:93:01:d3:54:7d:4c:ad:39:40:4b:d9:23:db:
                    3b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F3:FF:17:45:E2:78:F3:42:B8:10:86:1F:94:F4:78:7E:08:48:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/45bf080b-be9d-3dfd-a821-593709ce5852.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl

            X509v3 Authority Key Identifier:
                keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6d0:ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:17:6f:59:08:95:58:92:fb:0a:75:a4:00:8a:34:12:3c:da:
         d6:f8:89:8b:38:bb:99:31:01:00:df:b6:95:16:3c:2c:a9:93:
         7c:6a:f5:7d:13:69:4c:0b:9a:9c:ad:b5:5b:de:0e:91:41:5e:
         11:44:be:9b:57:a8:7c:15:b4:52:cf:b3:ae:65:55:4a:87:49:
         b5:cd:0d:78:ba:1f:24:eb:c3:f0:ba:30:6a:e5:37:f1:7e:5a:
         2a:a3:6f:8a:40:86:54:fb:a1:5b:0b:42:36:01:83:66:22:a5:
         7a:b0:5f:1e:61:68:09:5b:35:f9:89:18:d3:09:55:c2:bb:c5:
         e9:e4:1d:4f:95:d2:4d:bb:d4:b5:e0:f5:6e:96:37:61:74:01:
         21:78:9d:37:e0:dc:ee:7a:1d:89:e1:c8:a8:37:c7:bc:5f:c3:
         75:6f:b0:43:e3:79:5c:3f:cb:70:5b:1d:55:6d:8c:06:03:4a:
         75:00:2b:97:20:d8:a4:d5:b6:6e:0d:26:c8:6c:86:2b:ca:ac:
         15:ae:a5:5c:81:32:45:f8:90:24:bd:c3:f4:23:ad:16:b7:3a:
         f2:8c:e9:1b:f0:cd:e8:54:b9:96:2b:32:45:b1:ad:23:9d:1d:
         3c:12:93:f0:db:81:08:0a:10:b8:e3:62:29:28:b5:09:62:b5:
         35:c2:fe:10
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkdaOzfFw73xg3zSUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTNkOTcxNWEtNWVkYy00ZDlmLWE5YTItODMwYTE2ODI2
MTMxMB4XDTI1MDMwODAxNDM0MVoXDTI1MDYwNjAwNDM0MVowLzEtMCsGA1UEAxMk
Zjk3OTVjM2EtYmE0MS00OTZjLWFmYjQtZmEwMzU3YmQxYWVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7PqLm/AukF9aLvUCUjhtbejuCRwR2hIqeol
RsIS0BJ5iLRsduJQEDFqOFOfpF7arfJQhaYsywFVuLDUSc7aouHbKP3KHXQGY5S7
25qXLoG3YurayXYLNAYvtvUq892VhE6ebUBTbb1vDGA/yAACletcYWdDO7FyVkQH
IiEXLi0rw2xWKxantaOOgTc5VGDFbXlC+iXqop0hnoJsKkRGE2KFWj+ignbVr/sp
S+9HAWFQEUvSbGty+dm/rUdI5c6T4B6VFNOHrIV60Nb5HAWWZOPDvRnOFXvRcxq4
vKRrVN/dgbmJ6AI0QLE7/H9zs+CNrZMB01R9TK05QEvZI9s7HQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFDz/xdF4njzQrgQhh+U9Hh+CEhGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81M2Q5
NzE1YS01ZWRjLTRkOWYtYTlhMi04MzBhMTY4MjYxMzEvNDViZjA4MGItYmU5ZC0z
ZGZkLWE4MjEtNTkzNzA5Y2U1ODUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTNkOTcxNWEtNWVkYy00ZDlmLWE5
YTItODMwYTE2ODI2MTMxLzUzZDk3MTVhLTVlZGMtNGQ5Zi1hOWEyLTgzMGExNjgy
NjEzMS5jcmwwHwYDVR0jBBgwFoAUZwucipDtk9MgM+wjN5eQ+ihFt5EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi81M2Q5NzE1YS01ZWRjLTRkOWYtYTlhMi04MzBh
MTY4MjYxMzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL20AD/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF8Xb1kIlViS+wp1pACKNBI82tb4iYs4u5kxAQDftpUWPCypk3xq
9X0TaUwLmpyttVveDpFBXhFEvptXqHwVtFLPs65lVUqHSbXNDXi6HyTrw/C6MGrl
N/F+Wiqjb4pAhlT7oVsLQjYBg2YipXqwXx5haAlbNfmJGNMJVcK7xenkHU+V0k27
1LXg9W6WN2F0ASF4nTfg3O56HYnhyKg3x7xfw3VvsEPjeVw/y3BbHVVtjAYDSnUA
K5cg2KTVtm4NJshshivKrBWupVyBMkX4kCS9w/QjrRa3OvKM6RvwzehUuZYrMkWx
rSOdHTwSk/DbgQgKELjjYikotQlitTXC/hA=
-----END CERTIFICATE-----