Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3d7da0e6-6daf-37e2-bb89-97c403f5e023.roa
File:                     3d7da0e6-6daf-37e2-bb89-97c403f5e023.roa (raw, json)
Hash identifier:          c7FYKVkFYByrzNYJSpMCUMLvQPwFK6IGM93AS63laeM=
Subject key identifier:   EE:8E:DF:54:C7:BD:94:C0:B2:F6:28:FD:A7:A0:B1:22:2B:B4:39:65
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285849403962AADAC866801CF12E00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3d7da0e6-6daf-37e2-bb89-97c403f5e023.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        2607:8940:4130::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:62:aa:da:c8:66:80:1c:f1:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=93f9f1e4-ee79-42dc-b1e0-fa9a20d03a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:04:31:5d:7d:b1:ce:2f:b3:94:e6:ae:79:ff:
                    60:a5:6e:b6:dd:f4:f7:fa:ca:8e:42:b6:43:44:90:
                    aa:0e:b2:85:9f:b1:04:33:2e:df:b5:f7:3a:3b:04:
                    ed:2a:6d:69:53:f3:7d:df:3e:af:23:a5:08:60:a8:
                    4c:fa:96:ef:8f:e7:59:39:20:f5:e0:3c:58:bb:31:
                    ab:4f:b0:8d:94:0a:b9:16:88:56:ca:60:00:59:86:
                    df:45:dd:85:90:e8:41:1d:b3:c8:7d:19:c4:39:62:
                    0b:de:34:98:df:a5:35:91:0b:d0:3d:f6:2f:1b:f1:
                    7d:af:53:57:4c:5f:f0:27:b7:d2:be:ab:65:e5:ef:
                    33:99:d7:f3:4f:fc:0c:43:52:59:c7:86:8f:7e:11:
                    d9:f5:d0:77:b3:67:ee:5e:2f:95:7d:ea:50:2b:31:
                    5e:c5:6f:a7:9d:99:dd:81:27:9d:10:4a:b2:ff:c1:
                    ca:f3:92:ce:d7:f6:8d:ac:e8:c0:71:4e:96:de:21:
                    4a:40:e9:a7:db:a0:c5:78:02:7a:d3:b5:b7:1a:2b:
                    32:96:f4:d0:2b:08:27:33:13:0d:66:55:08:10:a3:
                    10:21:15:a3:b6:5b:36:47:59:14:56:bc:f2:f3:45:
                    b1:d6:83:19:f5:66:30:7a:7f:05:6e:2e:25:91:79:
                    ed:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8E:DF:54:C7:BD:94:C0:B2:F6:28:FD:A7:A0:B1:22:2B:B4:39:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3d7da0e6-6daf-37e2-bb89-97c403f5e023.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4130::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:0a:c6:7e:78:a6:35:9e:ef:38:28:79:0c:c5:f0:90:6d:f6:
         71:25:11:77:a3:b4:18:8d:13:20:53:85:ae:cd:15:0b:92:43:
         f8:3a:9e:86:55:7f:7f:67:d9:02:4e:ca:d2:7f:3c:51:ae:43:
         dd:65:12:e1:09:a4:90:3c:2a:9b:21:26:12:94:cd:14:c2:de:
         18:f1:62:7f:a7:a0:ba:af:df:a3:1d:b5:ef:41:45:23:85:60:
         d7:c3:17:54:58:84:a7:a7:f5:d6:de:dd:b3:21:90:26:cc:d0:
         7e:77:3b:8f:8f:04:8b:9a:9f:e7:71:76:a2:a7:c2:30:f4:d7:
         d5:cf:9a:93:17:c1:6a:bf:90:cd:7b:6c:c2:2a:22:b8:ff:10:
         e8:0a:cd:87:38:0a:5b:47:fb:f9:8e:ed:e0:b7:b6:0e:49:ac:
         22:96:a8:7c:38:76:b5:6b:e8:bb:62:7e:ac:2d:fd:f0:e0:01:
         50:63:01:47:b6:c6:32:80:32:5a:89:82:16:e2:67:c9:bf:50:
         f7:14:65:b4:da:6b:82:f3:8f:cc:a4:25:6c:80:ea:a9:1e:ad:
         f2:91:6e:b5:98:46:f5:78:54:71:60:87:a7:e9:26:13:07:b0:
         fc:af:61:b4:58:2e:65:15:3f:2e:b8:2a:07:ce:7d:aa:13:d0:
         e4:17:5e:4f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOWKq2shmgBzxLgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk
OTNmOWYxZTQtZWU3OS00MmRjLWIxZTAtZmE5YTIwZDAzYTdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggQxXX2xzi+zlOauef9gpW623fT3+sqOQrZD
RJCqDrKFn7EEMy7ftfc6OwTtKm1pU/N93z6vI6UIYKhM+pbvj+dZOSD14DxYuzGr
T7CNlAq5FohWymAAWYbfRd2FkOhBHbPIfRnEOWIL3jSY36U1kQvQPfYvG/F9r1NX
TF/wJ7fSvqtl5e8zmdfzT/wMQ1JZx4aPfhHZ9dB3s2fuXi+VfepQKzFexW+nnZnd
gSedEEqy/8HK85LO1/aNrOjAcU6W3iFKQOmn26DFeAJ607W3GisylvTQKwgnMxMN
ZlUIEKMQIRWjtls2R1kUVrzy80Wx1oMZ9WYwen8Fbi4lkXntMwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFO6O31THvZTAsvYo/aegsSIrtDllMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvM2Q3ZGEwZTYtNmRhZi0z
N2UyLWJiODktOTdjNDAzZjVlMDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEEw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFAKxn54pjWe7zgoeQzF8JBt9nElEXejtBiNEyBTha7NFQuSQ/g6
noZVf39n2QJOytJ/PFGuQ91lEuEJpJA8KpshJhKUzRTC3hjxYn+noLqv36Mdte9B
RSOFYNfDF1RYhKen9dbe3bMhkCbM0H53O4+PBIuan+dxdqKnwjD019XPmpMXwWq/
kM17bMIqIrj/EOgKzYc4CltH+/mO7eC3tg5JrCKWqHw4drVr6Ltifqwt/fDgAVBj
AUe2xjKAMlqJghbiZ8m/UPcUZbTaa4Lzj8ykJWyA6qkerfKRbrWYRvV4VHFgh6fp
JhMHsPyvYbRYLmUVPy64KgfOfaoT0OQXXk8=
-----END CERTIFICATE-----