Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77b2405a-dcbf-3fc3-90cc-ea40c5235597.roa
File:                     77b2405a-dcbf-3fc3-90cc-ea40c5235597.roa (raw, json)
Hash identifier:          hBQi4ysBwiq79+A0NbXtLcmn4YVR+RsuPPn4PhTjJ6M=
Subject key identifier:   D3:9D:77:4A:43:B7:ED:61:2B:42:3F:E1:34:ED:90:FE:E9:5F:15:8E
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285849403965A96313E65C11284B80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77b2405a-dcbf-3fc3-90cc-ea40c5235597.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        2607:8940:4f10::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:65:a9:63:13:e6:5c:11:28:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=bf5588a2-1de3-4ac5-a37b-0a5acb4502b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:58:b4:1c:27:35:0f:12:9e:de:31:de:6c:71:
                    35:41:54:cf:55:9b:22:17:d9:e3:6f:36:42:8c:39:
                    a3:1f:4b:97:19:80:d6:bc:8a:1f:c2:0f:ef:e9:c9:
                    4e:88:45:f9:4a:78:c0:a1:b8:2e:c0:2c:14:fe:15:
                    22:42:59:b6:44:f3:3c:22:06:d9:62:52:ee:89:8a:
                    48:6e:c6:7a:f4:14:10:dd:c5:06:bc:09:5b:3f:bd:
                    bb:7c:08:62:a1:e4:8d:16:da:3d:80:05:7c:f8:52:
                    56:e4:55:3d:11:af:10:a5:0d:34:dd:48:e6:7b:43:
                    d9:cd:f8:8a:e2:e3:fc:69:f9:e4:61:c3:18:37:a7:
                    fb:a1:72:fa:2e:04:1e:fc:94:67:41:2f:1a:07:43:
                    69:ec:d1:26:e1:3a:b0:d8:3a:78:d1:6f:30:81:2d:
                    41:72:53:45:8c:62:74:dc:36:5a:96:cf:28:e7:d2:
                    e8:4a:7f:28:e8:40:01:bb:6b:9b:c0:1f:46:ad:36:
                    c3:99:8a:5d:49:91:54:79:42:35:b7:20:6f:fa:7c:
                    19:ee:05:ae:31:23:b4:a4:16:1e:06:1c:4f:a8:c3:
                    d1:a1:54:3c:f3:a4:f5:3d:3e:54:40:10:44:57:5a:
                    f8:7d:97:b6:80:59:4d:1a:6c:c1:b6:5d:47:48:01:
                    00:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9D:77:4A:43:B7:ED:61:2B:42:3F:E1:34:ED:90:FE:E9:5F:15:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77b2405a-dcbf-3fc3-90cc-ea40c5235597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4f10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:53:53:cd:01:c4:63:e6:1d:10:83:cd:34:cf:83:4b:d2:8a:
         c5:11:05:44:f0:82:33:60:c0:63:e2:6e:51:a7:be:51:ca:f5:
         cd:4b:3f:85:71:e3:b4:8a:e8:0d:67:b1:73:3a:29:d7:0b:eb:
         2d:d7:d9:11:a8:ac:43:75:67:5b:cc:ef:dc:df:5a:15:c4:0e:
         c1:52:e8:73:c5:b8:0b:54:0d:ab:52:17:9b:e1:84:97:8a:46:
         5a:23:99:9f:9c:25:c6:19:57:e5:9b:ce:9e:45:83:49:a7:32:
         70:5b:ec:3b:73:0c:42:5d:00:5e:d3:cf:fa:82:cd:ec:04:7f:
         49:0b:36:8e:97:9a:50:14:cc:35:15:7f:8f:4a:ac:b5:9f:c1:
         c0:d3:5f:0f:1f:c2:60:d0:c6:07:5a:33:8f:d0:05:6f:37:4c:
         68:44:d8:17:5f:e2:4b:f4:aa:02:c1:84:a3:da:b1:a9:74:1d:
         96:5e:ec:c8:d5:3c:a8:2f:0b:80:c7:c5:cd:04:0e:e5:c5:e7:
         75:c3:17:26:3f:7c:13:fd:b4:fa:c9:ed:92:7c:e4:5b:af:4e:
         77:77:cd:14:26:a2:c5:d4:fc:3e:10:f5:11:9d:12:31:37:c3:
         8e:f1:4b:db:ae:b5:db:39:86:ab:a1:f9:b3:5b:a8:bb:af:27:
         83:d5:e5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----