Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/009ff865-9a4b-3afa-b5a7-9cfe5d443684.roa
File:                     009ff865-9a4b-3afa-b5a7-9cfe5d443684.roa (raw, json)
Hash identifier:          AskM/qT7v1/75M2ebYF3StzJLSkOlF3AjUXhZ5FEv6Q=
Subject key identifier:   AE:73:EF:01:33:DB:21:04:9F:DC:92:7C:01:AB:84:E5:92:A3:5D:74
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858494039580751391EBE75AA5B80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/009ff865-9a4b-3afa-b5a7-9cfe5d443684.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        2607:8940:4240::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:58:07:51:39:1e:be:75:aa:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=0a12b0f1-c931-4347-81fc-2e7e41bc111d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:35:b3:d2:7f:6c:5c:18:47:7d:90:1a:b4:a0:
                    ca:b8:62:e9:94:e8:3e:db:73:32:1a:11:e4:bf:ff:
                    d1:99:23:76:92:1a:af:a6:84:07:a0:cf:fa:2d:cc:
                    f9:21:a7:e9:a3:9d:e4:c4:ad:08:14:2f:8c:7b:ba:
                    a3:78:af:3a:97:b3:a4:a0:ed:5c:56:f8:8a:49:0c:
                    58:6b:8b:5c:42:74:55:b1:71:33:02:e8:2c:bb:f2:
                    18:d7:a0:6c:3f:a3:61:fd:7e:84:2f:10:d8:99:62:
                    4f:d6:d4:07:e5:c5:c3:6d:8d:35:d5:52:18:83:70:
                    01:7d:b2:1d:c7:6e:6a:c6:77:49:bb:8a:58:53:54:
                    da:18:ec:82:2d:27:ea:31:86:ca:4d:e1:e8:df:dc:
                    fe:06:09:eb:da:08:86:06:34:28:ac:60:f2:79:df:
                    4e:e6:78:a4:b6:30:72:a0:c0:7b:1e:05:d8:39:a0:
                    23:ec:62:8b:42:64:1d:26:8b:51:60:09:62:0d:45:
                    3b:16:0d:8a:56:d8:a3:39:9f:2d:fe:c3:5d:11:3e:
                    ef:22:da:98:58:0b:4c:2d:ca:6e:4d:ce:1d:0c:74:
                    fe:a7:9f:82:17:ec:d5:9e:7b:22:2e:86:02:ec:a5:
                    05:e9:92:fd:73:60:51:14:4c:2a:19:5c:6a:c8:af:
                    ab:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:73:EF:01:33:DB:21:04:9F:DC:92:7C:01:AB:84:E5:92:A3:5D:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/009ff865-9a4b-3afa-b5a7-9cfe5d443684.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4240::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:51:ac:ef:8c:b0:48:52:25:59:7b:4a:a4:3f:ff:cd:99:1b:
         86:4e:0b:64:d1:61:ae:a7:be:3f:c8:7f:01:1b:80:86:04:be:
         75:36:65:e6:7a:fe:73:4f:e8:f0:c6:a0:58:40:c6:02:81:a0:
         ef:6b:7c:a5:a7:de:94:79:18:b3:34:0e:4e:6e:9b:11:04:72:
         fb:32:58:ad:4a:78:68:67:73:a2:79:d6:15:7c:5e:e9:a9:23:
         e2:52:a1:b4:73:a4:67:87:31:4f:f5:6b:c6:c1:76:18:b4:43:
         3c:ab:34:2e:72:bc:53:75:f7:06:a3:7f:8e:64:58:14:07:2a:
         78:da:65:37:ce:16:94:c7:10:b1:d5:94:88:54:69:1c:de:e1:
         16:9a:c8:9d:2f:b7:da:dc:12:4d:09:6f:58:61:8c:60:07:26:
         8d:3d:06:21:0d:1b:e4:12:ee:bc:eb:50:31:4e:f0:88:c0:02:
         73:28:ba:34:72:67:5f:84:43:a8:39:94:01:43:fa:7a:8a:69:
         8c:5f:c9:6c:d1:a8:b0:ea:ca:c0:e8:54:77:56:e9:03:8d:1a:
         9c:34:83:07:df:f7:cb:28:1e:ae:78:a3:b2:d4:89:7e:da:ef:
         f1:f8:46:36:0d:c6:0d:a5:57:d5:2e:1c:ca:39:07:e4:2a:b3:
         a7:1a:ae:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----