Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/25011387-72eb-330c-8418-a7095dd54d97.roa
File:                     25011387-72eb-330c-8418-a7095dd54d97.roa (raw, json)
Hash identifier:          5EDtIXw0Mz3jWJj+dV1Ddr/5lKbTCdE/vRDt5pQ4Hn4=
Subject key identifier:   26:96:39:BD:B1:DB:35:E7:61:A6:03:8F:89:3A:C0:CE:B8:50:78:93
Certificate issuer:       /CN=ef5c1789-96e4-4a63-9ba3-f0ef903cb0de
Certificate serial:       010D0C9F432858496A0CF35131C76B8D0CF98140
Authority key identifier: 8E:9B:FD:39:5A:35:D2:4A:95:36:C7:BB:98:35:6C:D3:E7:7A:4B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/25011387-72eb-330c-8418-a7095dd54d97.roa
Signing time:             Fri 04 Apr 2025 12:35:36 +0000
ROA not before:           Fri 04 Apr 2025 12:35:36 +0000
ROA not after:            Thu 03 Jul 2025 12:35:36 +0000
asID:                     399272
IP address blocks:        2602:81b:5000::/44 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:0c:f3:51:31:c7:6b:8d:0c:f9:81:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef5c1789-96e4-4a63-9ba3-f0ef903cb0de
        Validity
            Not Before: Apr  4 12:35:36 2025 GMT
            Not After : Jul  3 12:35:36 2025 GMT
        Subject: CN=0aca8abd-62d3-4e00-865d-334872508843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:dc:5b:b0:64:62:a0:6c:16:ed:3c:d8:81:a2:
                    2e:29:7b:e2:42:66:7f:71:7e:b2:80:49:ec:2a:4f:
                    6e:16:c8:6c:36:0e:7b:8a:64:da:32:95:79:30:c5:
                    23:4c:bf:ff:90:19:c9:36:08:2b:27:b0:cf:bc:6d:
                    ea:04:22:66:58:ea:1d:80:24:22:ed:b6:8c:f0:4d:
                    d4:91:0c:8f:1c:91:c8:6f:3a:13:e0:6a:49:70:53:
                    0b:55:a4:9b:f0:47:b6:9c:74:76:96:8c:13:0e:8d:
                    38:da:2f:b7:cf:13:01:e1:12:33:c7:4a:c9:3c:82:
                    b9:db:57:f2:e5:68:db:7f:02:c0:37:3b:0f:c3:6c:
                    18:e1:fa:a6:de:e3:08:50:d5:29:78:24:ed:78:ce:
                    25:b9:81:86:d0:01:15:dc:cc:41:bb:53:13:a9:67:
                    58:a4:59:51:ea:80:1b:c8:57:52:3c:8f:f4:7e:37:
                    bd:b4:09:0e:53:ba:5f:d5:07:cc:da:09:95:7a:12:
                    5c:19:72:81:79:e7:4d:bc:93:c8:93:65:0a:32:bb:
                    a5:0b:b8:4a:81:0e:a2:35:d8:d3:9f:a4:29:f0:84:
                    82:6d:b7:ca:da:f6:d3:b2:1c:07:1c:89:04:92:0f:
                    79:9b:e4:7e:87:15:89:22:4b:58:38:74:78:6c:9f:
                    b0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:96:39:BD:B1:DB:35:E7:61:A6:03:8F:89:3A:C0:CE:B8:50:78:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/25011387-72eb-330c-8418-a7095dd54d97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.crl

            X509v3 Authority Key Identifier:
                keyid:8E:9B:FD:39:5A:35:D2:4A:95:36:C7:BB:98:35:6C:D3:E7:7A:4B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:81b:5000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:e3:3b:79:fe:9c:02:b0:ba:92:67:ad:8a:b0:f7:72:82:31:
         b5:1f:f2:69:d3:b2:14:d9:cc:ed:78:f2:00:04:bf:63:a0:26:
         51:58:bc:4a:ec:60:ab:d1:d3:f7:10:9b:15:fc:bb:ff:7b:94:
         fb:cb:ac:85:89:69:e1:cd:16:c7:ac:2d:a4:d2:a1:be:bd:9b:
         4b:55:cb:7c:6e:a6:03:39:5c:6c:49:7d:46:16:f9:98:be:ed:
         ba:97:ef:b5:dd:56:91:1e:99:51:8f:bf:e5:1b:8a:53:42:f1:
         9c:c2:2f:2c:f7:56:8a:40:1a:2c:3f:1f:5c:df:f2:55:00:15:
         08:39:8b:19:c0:c8:4a:6a:4d:c6:9f:85:93:ad:8b:ca:b7:bd:
         36:61:2a:d1:ea:74:41:9d:d7:a2:6c:2b:9b:6b:99:72:16:32:
         2d:4f:39:e1:4e:9c:bb:b6:df:14:01:0c:45:ae:a1:99:d2:a4:
         9b:ec:a2:8c:c5:c3:a3:b2:f5:7b:01:36:10:ba:31:9d:15:df:
         7f:a4:26:ff:49:e5:dd:60:60:26:fc:1b:e8:4d:5a:da:3a:d1:
         95:e8:7b:69:a8:c4:4e:15:89:39:56:89:26:8d:7e:2a:f5:ba:
         20:60:94:41:bd:a1:f4:7e:27:70:b8:db:2e:ad:12:6d:db:a4:
         49:ab:48:68
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElqDPNRMcdrjQz5gUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWY1YzE3ODktOTZlNC00YTYzLTliYTMtZjBlZjkwM2Ni
MGRlMB4XDTI1MDQwNDEyMzUzNloXDTI1MDcwMzEyMzUzNlowLzEtMCsGA1UEAxMk
MGFjYThhYmQtNjJkMy00ZTAwLTg2NWQtMzM0ODcyNTA4ODQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodxbsGRioGwW7TzYgaIuKXviQmZ/cX6ygEns
Kk9uFshsNg57imTaMpV5MMUjTL//kBnJNggrJ7DPvG3qBCJmWOodgCQi7baM8E3U
kQyPHJHIbzoT4GpJcFMLVaSb8Ee2nHR2lowTDo042i+3zxMB4RIzx0rJPIK521fy
5WjbfwLANzsPw2wY4fqm3uMIUNUpeCTteM4luYGG0AEV3MxBu1MTqWdYpFlR6oAb
yFdSPI/0fje9tAkOU7pf1QfM2gmVehJcGXKBeedNvJPIk2UKMrulC7hKgQ6iNdjT
n6Qp8ISCbbfK2vbTshwHHIkEkg95m+R+hxWJIktYOHR4bJ+w+QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCaWOb2x2zXnYaYDj4k6wM64UHiTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lZjVj
MTc4OS05NmU0LTRhNjMtOWJhMy1mMGVmOTAzY2IwZGUvMjUwMTEzODctNzJlYi0z
MzBjLTg0MTgtYTcwOTVkZDU0ZDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWY1YzE3ODktOTZlNC00YTYzLTli
YTMtZjBlZjkwM2NiMGRlL2VmNWMxNzg5LTk2ZTQtNGE2My05YmEzLWYwZWY5MDNj
YjBkZS5jcmwwHwYDVR0jBBgwFoAUjpv9OVo10kqVNse7mDVs0+d6S2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lZjVjMTc4OS05NmU0LTRhNjMtOWJhMy1mMGVm
OTAzY2IwZGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIG1AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACbjO3n+nAKwupJnrYqw93KCMbUf8mnTshTZzO148gAEv2OgJlFY
vErsYKvR0/cQmxX8u/97lPvLrIWJaeHNFsesLaTSob69m0tVy3xupgM5XGxJfUYW
+Zi+7bqX77XdVpEemVGPv+UbilNC8ZzCLyz3VopAGiw/H1zf8lUAFQg5ixnAyEpq
TcafhZOti8q3vTZhKtHqdEGd16JsK5trmXIWMi1POeFOnLu23xQBDEWuoZnSpJvs
oozFw6Oy9XsBNhC6MZ0V33+kJv9J5d1gYCb8G+hNWto60ZXoe2moxE4ViTlWiSaN
fir1uiBglEG9ofR+J3C42y6tEm3bpEmrSGg=
-----END CERTIFICATE-----