Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1c72839c-8454-3141-a843-fab2b4890ac3.roa
File:                     1c72839c-8454-3141-a843-fab2b4890ac3.roa (raw, json)
Hash identifier:          sMm4enLLIuUWV2Gev6NHmLzRs6WWra+pXpOgzUn9XpU=
Subject key identifier:   72:4B:F7:CB:E2:9E:F3:35:EE:5F:53:91:1B:1C:99:AA:9B:DC:8A:0D
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584940395C52B30D903A58650360
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1c72839c-8454-3141-a843-fab2b4890ac3.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        2607:8940:4ef0::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:5c:52:b3:0d:90:3a:58:65:03:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=9c33547c-5252-4f4c-b7ab-9a76436570dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:20:76:a4:0d:bc:94:4d:93:61:4d:a4:f7:fd:
                    c8:9c:e2:09:50:83:b6:85:db:d0:fa:b4:9b:84:23:
                    62:5a:dc:fd:37:5e:f5:56:4b:9c:4d:bb:14:7f:b6:
                    fc:f3:ae:cb:66:de:a0:5b:ab:89:ae:29:ae:1d:b7:
                    2a:76:78:98:2f:a9:17:c6:e3:01:c4:64:d9:aa:77:
                    bc:ff:ac:64:78:04:ab:45:d2:1f:53:eb:70:11:fe:
                    a7:d1:03:90:20:74:b6:fa:0e:95:0e:ca:3e:44:9d:
                    52:46:8c:27:d5:34:ef:6f:00:12:e3:b3:e3:0d:41:
                    88:c4:6c:f8:4d:1b:54:a7:50:5d:b3:73:ff:3b:08:
                    81:d8:4c:f3:24:80:35:3b:74:ce:9d:c8:77:f8:bd:
                    d5:7c:f3:cb:87:d5:fa:40:51:27:2f:02:ac:cf:a9:
                    eb:b8:d4:1f:78:b0:12:cd:17:31:94:31:52:1e:7d:
                    9d:d2:96:90:4f:7d:9a:9e:40:08:e8:6c:2f:6b:75:
                    15:d6:18:5e:aa:1d:af:63:bd:39:04:37:91:fe:21:
                    04:37:dc:01:d4:91:e1:a7:16:21:0b:fc:2f:22:0a:
                    69:00:bb:66:1b:c0:cd:43:34:ce:cb:2a:80:a7:11:
                    eb:2a:49:6d:c2:e8:ff:b9:85:02:88:85:56:e7:25:
                    7f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:4B:F7:CB:E2:9E:F3:35:EE:5F:53:91:1B:1C:99:AA:9B:DC:8A:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1c72839c-8454-3141-a843-fab2b4890ac3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4ef0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:41:b6:e8:d6:db:07:10:c1:f0:2c:98:4c:3b:3b:2f:d0:1e:
         b1:73:98:2d:aa:76:8f:06:32:0f:88:57:54:3e:f9:4d:59:87:
         ce:7b:bd:00:25:44:37:b3:24:52:69:3d:1c:36:48:c6:72:dd:
         fa:92:52:25:58:19:10:b8:92:23:54:b6:80:d9:11:b8:ba:c1:
         44:ef:77:bd:ea:8a:30:7b:ac:dc:02:aa:73:ac:34:ad:ad:ec:
         76:16:9b:80:a7:7b:dd:78:d8:e9:23:fe:ca:e4:09:65:eb:4e:
         9b:f9:5b:08:f0:3a:f8:66:d4:49:0d:c4:6e:04:f7:af:bb:4e:
         ee:f4:37:80:4f:f5:ce:6e:6d:a1:3f:fb:6d:f9:85:3b:42:ef:
         7a:e9:d2:c6:c2:81:e2:48:af:de:4d:59:33:c2:86:bb:e6:7c:
         93:b7:07:14:79:29:20:1e:08:4f:27:99:5c:c9:56:76:ec:e8:
         45:e2:41:2c:fe:74:ac:db:cb:cc:d0:28:44:5a:c5:90:b8:87:
         26:d6:56:a5:e9:bf:6a:4d:89:7b:a3:fb:31:a1:22:af:d2:3f:
         df:d7:ce:47:a7:91:38:18:34:cd:4c:45:0c:03:6f:d2:b2:bf:
         81:0b:0d:73:b4:0e:73:93:62:76:8d:30:ca:c2:8e:dc:0d:5b:
         53:bb:15:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----