Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/163035d2-3110-385e-b03a-b7a0c1af0388.roa
File:                     163035d2-3110-385e-b03a-b7a0c1af0388.roa (raw, json)
Hash identifier:          BhqOx9QuwQNzY2t9frXXrrd/nJ1oOr/VtEcwY35bDHQ=
Subject key identifier:   4E:4A:7E:7D:FF:AA:7D:B5:0B:AE:C1:99:5C:A0:C1:B3:A7:25:BE:BA
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858494039702101B52B3E2CF15780
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/163035d2-3110-385e-b03a-b7a0c1af0388.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        2607:8940:5c10::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:70:21:01:b5:2b:3e:2c:f1:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=6eedabf6-a6e8-49a3-a738-e51665df6916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f5:d6:97:d5:a9:8e:f4:a0:7b:bc:8a:45:4d:
                    91:e9:93:78:ff:78:17:2c:b7:33:27:af:cb:4d:e9:
                    75:5f:65:1b:e1:0a:4f:c6:08:81:bd:57:de:37:6a:
                    12:9d:80:1a:34:a9:2f:9e:d8:58:fa:f4:ac:f6:69:
                    d8:bc:59:6c:ef:ae:2b:9b:cc:e2:80:62:55:ab:e0:
                    55:7c:48:00:ce:da:5f:87:d5:7f:bc:f3:8f:45:42:
                    fe:0d:f7:a9:76:59:25:b3:af:ce:58:3b:46:da:77:
                    2a:94:1e:d4:05:e8:ed:1f:cd:22:a6:60:d5:82:48:
                    cf:a3:4a:ce:04:0f:dd:9c:79:2e:d1:1e:bd:b6:40:
                    e3:b6:54:12:fc:45:a8:c0:05:9c:d9:3c:b8:b5:fe:
                    c0:d0:7d:f4:d7:e8:f7:dc:84:e8:50:97:de:5e:8d:
                    37:fe:56:99:e4:5d:b9:03:f7:a1:eb:7a:75:9a:a8:
                    0d:94:c2:73:94:8f:6d:88:d5:ef:30:c9:6e:87:cd:
                    54:1b:48:b1:48:eb:2d:97:7c:6b:0c:fc:0b:03:b2:
                    89:94:ae:ba:4f:c1:a8:0b:8a:9c:b5:ca:30:78:d5:
                    a8:72:52:af:c7:89:08:4d:93:b3:8a:ff:aa:8d:41:
                    08:e7:41:2c:ef:5c:3c:18:6c:5b:73:7a:c8:68:29:
                    c0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:4A:7E:7D:FF:AA:7D:B5:0B:AE:C1:99:5C:A0:C1:B3:A7:25:BE:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/163035d2-3110-385e-b03a-b7a0c1af0388.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5c10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:b5:23:2e:85:28:1f:e7:ad:c2:a1:78:be:45:b8:ad:9b:a1:
         88:27:2d:00:d4:76:91:e2:f5:3f:d8:3d:62:f0:8e:fd:ba:6d:
         8b:0d:7f:e9:41:40:8b:51:68:1d:bb:ba:e1:59:da:22:c3:0f:
         37:ac:e8:33:0f:e0:08:19:70:98:de:7f:2d:5a:51:59:75:c6:
         43:74:e3:ff:95:29:57:bf:aa:32:c8:b4:ed:ff:54:b3:89:65:
         c5:80:3b:c3:5a:48:b5:45:73:9a:f8:36:eb:5e:25:21:15:ff:
         14:ea:30:9b:a8:e5:86:0c:bb:16:2a:1b:a8:61:05:bf:f6:d8:
         0c:93:c2:5e:e4:20:08:27:b0:b5:b0:63:89:2b:0b:0e:4a:35:
         e9:4d:02:fa:b3:81:83:40:24:82:1d:89:63:f1:cb:48:08:c6:
         d8:e5:47:9e:f9:1a:b4:8f:1a:c9:7b:4b:40:27:31:39:fc:84:
         73:f3:05:d7:78:6a:0f:af:6a:a5:91:e0:96:2b:75:ba:10:24:
         3e:66:3e:5f:60:4c:78:08:6f:4c:37:a8:7a:f2:3a:b8:18:c1:
         63:71:2a:8f:26:0a:5f:2d:cc:91:c6:fa:90:b4:68:15:36:0a:
         59:3d:dc:c2:68:17:6a:b7:d2:38:5c:d3:59:7d:de:45:f9:3d:
         89:d4:77:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----