Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/353633ec-62d2-3249-a2df-1cda625ec9e9.roa
File:                     353633ec-62d2-3249-a2df-1cda625ec9e9.roa (raw, json)
Hash identifier:          2gTnK++JF8wFN56kNCDgTySJhwTZH90iOEHOAAOueus=
Subject key identifier:   46:F6:23:65:F6:01:F6:FF:53:A5:8C:B6:61:52:18:B3:5F:B8:7B:7D
Certificate issuer:       /CN=e9687864-e283-4f19-98f3-a437efb373e8
Certificate serial:       010D0C9F432858497F09A26F2AA70AF66DEC17C0
Authority key identifier: 0E:B9:83:27:01:F7:06:7A:CB:A5:9C:9A:5E:61:CB:C7:D9:58:C3:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/353633ec-62d2-3249-a2df-1cda625ec9e9.roa
Signing time:             Sat 12 Apr 2025 01:00:48 +0000
ROA not before:           Sat 12 Apr 2025 01:00:48 +0000
ROA not after:            Fri 11 Jul 2025 01:00:48 +0000
asID:                     22772
IP address blocks:        2605:8e00::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7f:09:a2:6f:2a:a7:0a:f6:6d:ec:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9687864-e283-4f19-98f3-a437efb373e8
        Validity
            Not Before: Apr 12 01:00:48 2025 GMT
            Not After : Jul 11 01:00:48 2025 GMT
        Subject: CN=5c30b975-b4e4-4b86-9634-a63493ad91d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a1:ea:1a:e0:78:23:e3:43:90:96:e2:1e:8b:
                    3d:94:6b:10:bf:f8:a6:6a:5b:21:2c:ce:ca:d0:28:
                    2c:22:77:f6:40:7c:74:57:02:2a:b7:41:6c:c3:be:
                    e2:5f:78:f5:07:7d:cd:f8:84:a9:47:c8:a2:46:81:
                    12:cd:de:99:da:f2:20:60:4d:d6:8d:9c:ea:51:2e:
                    a8:e5:2a:b0:76:81:26:e7:fe:79:17:c2:8f:a5:72:
                    3e:0d:0c:b3:99:c0:9d:df:0d:e9:07:f1:6d:9d:89:
                    4a:4d:72:00:28:62:2c:b8:7e:9b:e8:5a:b6:9b:c0:
                    17:2c:82:b2:75:42:f1:8d:99:4b:e9:df:1c:c4:75:
                    93:23:ec:c1:9b:ed:86:76:4f:46:8b:d6:ac:2f:d7:
                    13:7d:37:00:8d:e0:58:bb:da:3b:1e:d4:85:2d:80:
                    a5:d7:82:c9:22:42:cb:0f:7c:15:3b:fa:17:43:3e:
                    8a:2b:7b:7c:23:31:d5:6c:f2:97:20:f7:35:e7:56:
                    db:1c:8a:33:f9:45:04:64:2d:e0:b0:3c:95:65:c0:
                    e3:2b:30:ef:40:69:11:fe:39:68:d5:b3:4a:b7:f6:
                    79:1e:8c:70:c6:4f:ea:05:aa:32:53:e0:35:6a:9d:
                    e7:c5:c7:ba:cb:f4:ec:2f:eb:b5:1d:e7:eb:fb:f9:
                    00:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F6:23:65:F6:01:F6:FF:53:A5:8C:B6:61:52:18:B3:5F:B8:7B:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/353633ec-62d2-3249-a2df-1cda625ec9e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/e9687864-e283-4f19-98f3-a437efb373e8.crl

            X509v3 Authority Key Identifier:
                keyid:0E:B9:83:27:01:F7:06:7A:CB:A5:9C:9A:5E:61:CB:C7:D9:58:C3:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8e00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:ec:99:9b:c9:7d:b4:a9:56:cd:c7:04:57:cf:7f:e8:52:dd:
         4a:b3:62:86:54:bb:73:35:e1:73:2d:8a:88:cf:b7:d6:ef:61:
         3b:f8:90:74:6e:ba:7f:d3:16:6a:31:28:b5:7e:af:df:9a:65:
         1f:63:cf:dc:bf:ac:67:5f:5f:26:25:b2:81:4b:6b:2c:4c:96:
         c2:c1:68:b9:a8:46:77:02:70:3a:e0:1b:c7:6b:a2:20:94:88:
         22:6b:87:d3:6a:6a:a9:8e:ee:63:d1:c2:04:d9:34:7c:c5:ef:
         84:90:37:75:68:e1:1e:3c:b0:73:12:d5:05:00:8d:74:c9:7f:
         3e:4f:01:f2:1b:a4:43:f9:cd:5b:43:d3:97:d5:c9:29:13:57:
         10:b4:1c:61:43:72:e7:e8:60:9c:75:0d:a5:6d:a6:10:93:f3:
         2f:3a:59:1b:c6:21:22:60:35:c5:ac:de:14:35:ad:46:5f:94:
         a6:26:3f:67:01:d8:58:51:f4:27:b2:31:f2:48:40:65:d9:4d:
         49:40:a3:15:a1:8b:b6:a0:40:99:a4:1f:54:37:42:af:4e:77:
         1f:2b:f5:50:e0:92:e0:9b:ba:ef:eb:e2:29:c0:f9:81:35:fe:
         c3:06:d6:a0:d3:1f:7d:5b:5a:d4:a4:ef:79:af:86:b3:30:2d:
         b5:ef:9a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----