Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7e291e8d-7ada-3134-b8bd-446c983d1df1.roa
File:                     7e291e8d-7ada-3134-b8bd-446c983d1df1.roa (raw, json)
Hash identifier:          4EEydwMYGaUt10GI//k4/sJnGtTWh2Y8Kf1KLSosWro=
Subject key identifier:   BC:A4:86:67:79:59:B2:73:D2:65:D3:2B:B5:A4:F9:9D:2B:02:94:D0
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858494039721BE002F4F25476DD00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7e291e8d-7ada-3134-b8bd-446c983d1df1.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        2607:8940:49a0::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:72:1b:e0:02:f4:f2:54:76:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=204b789a-2e10-4b7b-992f-ec98f24d887b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b2:46:88:4e:10:65:ed:c4:d4:ef:f5:b5:3f:
                    51:8e:0c:c9:1e:22:a8:08:34:9b:c2:b2:ea:9c:5a:
                    e4:e5:b5:c4:5e:48:22:9a:28:14:4d:44:f3:85:18:
                    97:e0:6c:9b:f6:66:9e:a2:35:d4:a2:91:51:99:af:
                    f6:83:6d:fa:46:10:23:5a:d2:ae:14:f6:08:5c:3d:
                    bf:5c:c1:ad:17:d9:31:4b:ab:da:c8:79:8c:98:65:
                    34:10:e4:6d:6e:e6:bb:39:31:f0:4c:1d:51:be:41:
                    21:d9:61:08:57:b9:21:b5:01:b8:5e:1c:6b:16:98:
                    76:bb:2b:dc:ad:9e:93:2a:4d:8e:a9:79:1d:bb:f6:
                    0c:39:3c:b8:d7:48:77:cf:58:bf:23:44:3d:8e:fc:
                    fc:58:b8:5c:09:7c:e3:cb:69:ba:e4:fa:7d:a0:60:
                    7c:dd:22:85:6f:eb:b5:66:41:99:99:fa:23:2c:7e:
                    02:cf:73:d6:7a:d7:37:d0:b2:36:af:b0:83:09:7f:
                    fe:3e:09:11:cc:97:9b:2d:69:7f:ef:37:10:5e:5f:
                    1f:5b:62:ab:33:56:b5:28:ea:84:48:f4:0e:cb:24:
                    22:90:73:10:12:db:b5:e4:34:6d:3f:58:9e:40:37:
                    d6:1f:e6:44:de:a7:43:cb:f2:79:b6:b8:cd:4e:e5:
                    9b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A4:86:67:79:59:B2:73:D2:65:D3:2B:B5:A4:F9:9D:2B:02:94:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7e291e8d-7ada-3134-b8bd-446c983d1df1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:49a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:e8:91:50:d3:0e:12:c0:8f:fb:12:ed:96:c0:98:7f:ba:d2:
         d5:90:95:9a:d3:e7:dd:da:b9:35:3b:f4:bd:88:52:3f:c6:ca:
         83:2c:ae:5e:69:3f:b9:47:1c:72:d4:c3:6f:da:78:73:31:31:
         fb:8c:e4:5c:b5:fc:d5:ed:21:87:ac:95:1d:bd:2c:f3:09:8f:
         70:61:eb:b7:9b:74:25:5d:cb:bf:ee:01:4e:30:87:5d:e9:fe:
         1d:d3:b0:34:1a:ca:d3:d6:12:c1:6b:44:6d:85:ad:df:72:73:
         5b:29:fd:64:24:58:04:18:ce:1a:11:01:24:d3:7d:b2:98:55:
         f7:54:8f:0f:4c:91:90:13:51:02:d6:5f:2b:3f:3b:b8:33:74:
         c3:ea:46:0f:f6:77:bc:47:6b:8f:bf:ad:92:5e:da:37:3b:e8:
         7d:1b:2b:df:26:c7:4e:9e:2e:26:ca:b1:e7:0c:d0:ab:10:f6:
         6a:2f:02:c5:0b:3e:e6:df:1c:c4:cf:b9:cd:67:90:72:18:5c:
         8c:e2:d7:d6:87:3a:df:72:79:c8:83:ff:31:65:db:91:8f:bc:
         af:17:0b:9c:d0:bf:b8:ab:22:c0:a1:72:1c:eb:a7:f2:48:d4:
         32:e4:b7:e1:81:41:1c:17:16:8b:7c:a6:6c:bc:a9:58:a4:d1:
         5d:3a:41:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----