Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8be78f32-6795-38a8-a107-c194971bf485.roa
File:                     8be78f32-6795-38a8-a107-c194971bf485.roa (raw, json)
Hash identifier:          5Hao+Xz7d2z4fPgdg7oy5B7YVsluppeEDvM5xusKKEo=
Subject key identifier:   7E:26:EA:82:23:04:A7:EC:0E:4C:7A:D6:A4:95:FD:8B:2D:98:B3:E8
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584940396F903C630B4467EBE480
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8be78f32-6795-38a8-a107-c194971bf485.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        2607:8940:5060::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:6f:90:3c:63:0b:44:67:eb:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=abf1892b-b677-4536-a57d-d8311957f0f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:89:4d:18:9b:5f:d8:0e:f6:a5:2e:4b:c0:62:
                    7f:e5:e2:06:cf:e3:33:a2:57:d3:76:98:25:66:2d:
                    05:1e:f6:53:ba:72:35:72:ea:1a:f5:e1:5c:87:8e:
                    76:0f:9b:70:fb:e6:97:ce:bc:5c:27:6a:36:44:75:
                    62:0f:c7:b7:a5:1c:83:36:13:a1:12:d7:cd:f8:11:
                    87:8a:4d:6f:e2:ce:b1:9d:06:2d:fc:e1:6f:10:88:
                    90:72:dc:d1:97:85:9c:2e:28:bf:ff:b8:57:f1:18:
                    35:de:7c:19:e8:4c:dc:05:e9:2a:69:5e:e4:21:43:
                    c3:67:71:0d:ff:5e:ab:ee:a2:b8:f1:ca:e0:42:9d:
                    5b:0e:be:a5:9b:f5:da:5e:4c:e6:56:02:b9:58:ab:
                    27:9f:f7:d1:92:bb:96:70:4a:e9:0b:00:3d:91:b5:
                    3f:95:20:9d:b9:58:7d:b1:1a:73:dd:bb:3c:0f:a9:
                    f4:89:c1:23:c4:0b:42:a2:50:56:33:04:98:ab:ef:
                    49:06:a0:49:a3:4c:94:a2:6d:c9:d1:c3:0a:ab:7b:
                    03:5f:b6:14:55:7e:7b:9e:6b:6e:f7:b2:86:ed:12:
                    cc:fe:3d:8e:55:46:e6:53:64:dd:1d:74:63:08:69:
                    c6:a8:af:cf:a9:cb:58:b7:b6:cf:3c:a8:92:40:5b:
                    c3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:26:EA:82:23:04:A7:EC:0E:4C:7A:D6:A4:95:FD:8B:2D:98:B3:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8be78f32-6795-38a8-a107-c194971bf485.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5060::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:9d:8f:7b:38:5a:e8:9c:07:d6:e5:51:78:b8:02:d0:4d:8d:
         4b:28:a8:17:7b:ef:9f:18:6f:12:fe:76:b3:20:5d:31:7c:9f:
         21:f9:62:14:3e:3a:39:c0:47:79:de:21:0a:4f:9f:3b:98:2e:
         86:62:35:5b:72:c1:cb:a9:5f:b8:ba:13:25:63:81:d9:cc:5c:
         ad:25:5a:04:16:fb:97:a1:f2:b1:63:7c:25:79:3c:28:87:34:
         f3:b7:30:5b:92:f0:49:dc:0b:a1:02:e9:45:e5:1b:07:10:25:
         84:1e:97:45:85:40:b4:be:54:19:be:ed:e6:e0:55:99:fa:24:
         f8:32:36:0e:f7:43:6c:4b:c5:0b:ab:27:e2:d6:40:be:c6:dd:
         82:89:71:65:5f:ee:71:c1:4c:6e:54:ef:28:8b:7a:ce:9b:23:
         23:ed:e4:d8:66:52:ba:81:e8:32:5a:6b:47:e5:8f:61:58:e4:
         b4:06:05:7a:21:70:bf:38:2c:3b:c5:62:47:8f:85:26:c0:76:
         39:9e:ba:a9:a8:2e:35:c6:83:2b:14:29:e0:c1:f9:29:30:04:
         92:bd:8f:50:b0:5f:9a:23:5a:57:62:1e:3f:42:d5:63:49:87:
         df:2f:3b:db:5c:2d:c5:d1:d7:bd:92:d6:4d:8d:55:98:8c:de:
         a9:50:03:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----