Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5eda57ea-8e0c-30fc-a06e-54e2d251e137.roa
File:                     5eda57ea-8e0c-30fc-a06e-54e2d251e137.roa (raw, json)
Hash identifier:          SLPMinzZzc4V/7R14H/p8zsQ1r7+knSJHR7yc4DkZ0g=
Subject key identifier:   83:25:25:7B:68:06:46:0E:54:45:4C:7C:E7:D8:BA:88:73:B7:86:FE
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285849403967056F2154E1FD020F80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5eda57ea-8e0c-30fc-a06e-54e2d251e137.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        2607:8940:4070::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:67:05:6f:21:54:e1:fd:02:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=874a1eea-73db-4c52-84e5-caf1fb999f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:34:58:39:70:2b:30:c9:ff:e3:f0:a0:a0:82:
                    11:28:e0:c2:6c:56:76:5d:79:aa:68:e0:09:b3:b2:
                    a4:44:38:c3:1a:69:a5:9e:db:1c:92:49:9d:a7:73:
                    90:4f:fd:00:b8:90:36:b9:83:16:dd:17:a6:04:92:
                    d4:4a:d4:0a:6b:a0:7c:7d:96:89:76:b7:ea:09:69:
                    ee:3f:b4:e3:53:77:04:5c:f7:f6:bd:b8:82:fb:24:
                    bb:34:73:9e:53:f8:56:e7:af:4d:9c:3c:40:11:bd:
                    9d:de:ba:9a:da:b1:8e:cb:b1:5d:a3:36:ca:1b:5f:
                    65:2e:0e:c4:f6:04:13:2a:2a:81:10:ef:cf:81:f7:
                    2e:ca:6a:ae:09:4e:44:48:7b:c2:04:d7:c7:75:56:
                    47:82:a0:2b:c3:cf:55:6e:f7:06:d4:4a:9b:a8:e1:
                    d2:8f:65:ba:1d:f3:1f:84:6a:6a:f2:fc:23:75:d3:
                    f9:bd:84:d1:ce:28:9a:11:ee:c6:91:ff:5c:12:d5:
                    e4:46:72:97:55:c8:db:a4:34:0e:0e:3c:c5:20:ea:
                    d6:cc:af:bb:57:43:8d:5e:8d:f2:f1:b6:bc:dd:61:
                    ac:11:ba:14:22:bc:e0:d4:d6:c3:b2:4b:0b:96:b7:
                    f9:cf:10:f6:31:1d:d2:50:71:da:ec:c3:a7:3e:74:
                    d4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:25:25:7B:68:06:46:0E:54:45:4C:7C:E7:D8:BA:88:73:B7:86:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5eda57ea-8e0c-30fc-a06e-54e2d251e137.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4070::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:0a:0c:7a:20:58:6c:e0:53:d8:67:a7:ec:3c:0c:a6:69:4f:
         5c:2a:bf:70:a2:5c:69:5d:32:88:d3:b8:23:dd:6a:e2:73:97:
         4a:aa:f9:c9:36:13:71:e5:f8:10:7b:bf:f5:40:90:8d:d9:ab:
         ea:62:19:9f:53:30:e5:05:0b:79:c1:76:92:50:8b:80:d1:bb:
         42:66:19:f0:a8:22:f8:ca:f2:9b:be:b3:af:3a:17:2a:bd:aa:
         27:6c:9c:63:7b:44:8a:66:64:67:c3:41:02:e3:c2:08:43:2d:
         47:7f:ec:6f:76:7c:e7:fb:c4:04:af:11:88:a1:94:b1:e3:65:
         2d:f2:5e:88:fc:b7:77:a8:72:2f:5e:4f:f5:c0:a4:5c:f7:2e:
         71:2a:5c:aa:61:09:40:1b:f0:88:8d:fe:62:43:f8:6a:a2:9b:
         65:f6:ae:80:99:f7:d6:80:b8:91:37:fd:c5:e2:b2:01:79:19:
         56:9f:e8:6c:29:5a:fd:6d:c0:ce:bf:2e:69:d0:de:97:5f:2f:
         62:a4:7e:65:8b:13:0b:f1:e8:b2:ce:04:9d:d4:f9:9b:46:40:
         28:2e:df:b9:87:8b:ac:e2:c3:67:62:00:03:14:98:69:c2:8b:
         76:29:9e:b0:38:b7:f3:0c:d8:92:e9:46:39:78:b9:1d:d1:94:
         24:d8:ae:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----