Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0db0bae7-6ba0-350d-9ab6-9060370b9315.roa
File:                     0db0bae7-6ba0-350d-9ab6-9060370b9315.roa (raw, json)
Hash identifier:          IkLOyhx9ud1Hris07wIoqLPExHs8z7rkIdH6ibjjrWg=
Subject key identifier:   7E:57:84:F4:CF:4C:72:53:A6:DB:F2:12:61:9F:26:64:9F:85:0B:24
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285849403964C6C7C16E6D8A7B1E40
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0db0bae7-6ba0-350d-9ab6-9060370b9315.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        2607:8940:5e30::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:64:c6:c7:c1:6e:6d:8a:7b:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=3d4ab7ae-6aa6-4fe3-b731-1846f7d1476f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8d:e6:f8:7d:af:d8:8a:3c:1b:d4:d0:2c:aa:
                    63:a4:fd:a1:cd:42:6c:49:8d:a8:f3:c1:54:a1:1c:
                    2a:f3:f7:6e:86:af:25:c2:91:a5:fe:80:d6:9b:a9:
                    2e:b9:4e:f0:29:61:46:d5:c3:c1:cc:96:b8:90:d5:
                    78:3a:e2:e5:e0:5c:f0:1a:28:4a:81:19:99:c9:f6:
                    31:d9:1c:ec:f4:a9:36:64:23:08:3d:e0:cc:a3:87:
                    94:1c:91:5b:66:b9:41:96:ad:e3:a5:c6:3a:63:72:
                    e1:3f:94:b9:35:7b:e2:55:0f:f2:49:43:72:7c:a7:
                    2b:b5:d1:5b:78:7f:c2:fb:4b:b7:a6:b8:26:b7:3a:
                    36:bd:04:cd:a8:7e:fb:44:01:82:30:53:17:7f:28:
                    a7:6c:a7:56:b8:39:c4:e0:b9:18:8a:f6:3b:14:f4:
                    f8:c1:f0:7f:18:e1:fe:19:fa:71:ee:bb:64:28:47:
                    a4:7c:74:86:ac:ce:eb:a5:b4:5a:d6:38:ee:6a:40:
                    d1:c2:b9:52:a1:2b:da:6e:3e:4b:cf:a4:32:0d:20:
                    7b:52:ca:c7:f2:67:31:e9:ab:03:97:45:ca:0f:21:
                    6f:b4:19:39:b8:dc:25:95:90:28:b6:6b:4b:57:d7:
                    61:d8:be:3a:06:83:d2:94:be:85:49:ef:fe:ff:d3:
                    3e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:57:84:F4:CF:4C:72:53:A6:DB:F2:12:61:9F:26:64:9F:85:0B:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0db0bae7-6ba0-350d-9ab6-9060370b9315.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5e30::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:c3:bd:bf:4e:04:9e:65:92:70:93:8f:8c:fc:2d:bb:d7:68:
         cb:b8:ac:bb:00:b5:a2:11:1a:7b:92:60:da:bd:27:16:b0:9c:
         49:69:7d:37:d9:a0:15:07:e3:1a:51:d9:99:b5:87:e9:5f:ba:
         62:80:b4:3e:79:be:d0:b0:57:99:e5:bf:ff:22:1d:f1:93:02:
         23:5e:45:18:6f:0e:d9:22:a1:70:87:72:3a:3f:fe:f6:b9:67:
         e4:c4:92:56:1c:fc:b1:ef:bd:89:97:c0:fb:e5:19:6c:98:40:
         c3:d7:ec:9e:05:a5:38:57:aa:8b:5a:b0:e0:71:59:03:f1:db:
         04:d2:18:6a:52:98:fa:92:31:0f:21:82:cf:d6:65:98:14:8f:
         a9:07:9f:f8:45:40:a9:0d:34:39:f7:3f:94:a1:7f:13:82:c4:
         41:e6:a9:29:c6:8c:ff:75:48:b3:eb:73:a1:38:6a:0b:b9:da:
         a7:14:ce:42:08:ff:70:5e:0f:a5:04:8a:ec:df:df:73:a8:f8:
         78:f5:b3:8a:f6:7f:9a:21:cc:42:8c:dc:e9:b5:fc:16:15:63:
         63:ec:08:cd:29:8e:eb:75:0e:d7:2b:50:3e:ba:f7:cc:be:dd:
         7a:2f:27:06:28:9a:91:59:e0:1a:1a:ee:c2:c7:aa:1b:87:aa:
         48:02:a7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----