Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/127ddba2-8066-3325-85dc-986c65d82987.roa
File:                     127ddba2-8066-3325-85dc-986c65d82987.roa (raw, json)
Hash identifier:          YsJjjCRigxq+w27mq9GaL/43aDjzS3JunKn4IcA7MeE=
Subject key identifier:   65:65:8B:A9:43:C4:76:B2:39:EA:49:1F:8A:7B:BF:21:F5:84:DB:1A
Certificate issuer:       /CN=b04c27dd-ce06-4d0a-ae84-1d675e85ce59
Certificate serial:       010D0C9F432858496A19AAEB88B763DBB4033D80
Authority key identifier: 0D:51:66:96:3A:07:C0:C9:56:4D:30:56:AC:3A:FF:0C:9C:F4:19:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/127ddba2-8066-3325-85dc-986c65d82987.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     32024
IP address blocks:        2607:69c0:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:aa:eb:88:b7:63:db:b4:03:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b04c27dd-ce06-4d0a-ae84-1d675e85ce59
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=bb3fb2ee-4089-47a5-955c-a88745f34152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ae:96:55:e7:a7:bd:3c:74:a9:f0:25:7d:e6:
                    05:59:ec:d5:e9:16:8b:9b:6c:e3:b5:9b:af:df:40:
                    fb:63:8f:f5:cc:34:8c:8c:ca:f5:90:fd:2f:c9:3a:
                    d3:93:ad:6a:0d:0a:4f:8e:44:67:9a:0b:97:1a:4e:
                    41:b7:f4:cc:80:05:96:75:f5:5a:87:b1:22:a7:73:
                    51:ac:4a:0d:92:bc:4d:69:7d:99:bb:6d:4b:10:3e:
                    9c:1c:c0:9f:56:5b:e2:17:54:0c:5a:18:21:58:ec:
                    a8:54:aa:5f:20:61:82:44:9d:c4:f4:d7:f7:50:1b:
                    9c:eb:f3:6e:3b:aa:f4:84:28:03:c1:fe:85:bd:a7:
                    cb:a2:3f:58:15:91:69:db:53:58:d9:ad:fe:af:dd:
                    ca:ff:ca:b9:4a:dc:e6:7e:35:51:80:c6:68:34:4b:
                    bc:e6:0e:fb:0d:68:0f:c8:74:20:90:3a:8c:a1:0c:
                    21:eb:51:00:ff:df:03:1a:55:87:fa:a6:e6:4c:99:
                    1e:f6:12:65:d3:da:31:c0:eb:cc:7a:3a:de:25:7c:
                    f7:1e:46:6a:28:79:ea:f2:37:fb:7b:b8:aa:f1:53:
                    a7:2c:78:65:c3:a4:c5:32:a8:07:dd:75:4f:91:51:
                    a0:c2:03:9b:ee:2d:d3:e3:5c:8d:65:df:b6:8d:2d:
                    b2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:65:8B:A9:43:C4:76:B2:39:EA:49:1F:8A:7B:BF:21:F5:84:DB:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/127ddba2-8066-3325-85dc-986c65d82987.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.crl

            X509v3 Authority Key Identifier:
                keyid:0D:51:66:96:3A:07:C0:C9:56:4D:30:56:AC:3A:FF:0C:9C:F4:19:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:69c0:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:78:27:b7:d8:14:88:b9:04:c0:78:ad:f0:e0:61:6a:03:3a:
         6c:62:fd:3c:1d:24:63:d9:19:1b:2d:03:29:c7:b9:55:eb:4c:
         1c:b8:95:95:d7:55:21:f5:7d:7a:a2:79:79:62:68:37:8d:66:
         1e:ec:a5:0a:10:8a:3d:c8:83:7d:a4:ca:21:ba:79:9b:f4:d0:
         31:dc:7a:2e:3d:be:57:b1:a1:b9:95:44:54:be:ca:45:b5:87:
         df:d2:2f:07:77:58:5c:85:7a:f4:24:f2:19:f1:d2:0b:9c:80:
         91:48:53:ae:e9:db:6b:52:d6:24:9a:3f:5d:33:10:a8:78:78:
         7c:5c:ab:7c:af:57:ba:2f:54:4c:ba:f5:de:12:12:ca:32:2d:
         21:80:81:f8:7b:82:c0:1e:04:34:cc:25:e7:a4:e6:58:48:4a:
         90:80:c8:0f:d2:cd:a5:01:59:a1:34:9d:e6:74:64:ed:cb:af:
         e5:97:33:54:fa:dc:53:2f:22:0e:c1:be:12:27:53:ad:1d:02:
         91:ed:f4:c9:f7:53:be:ce:75:83:36:b0:68:2e:e2:c1:c6:35:
         36:74:25:a6:06:59:94:13:43:78:fe:2e:dc:b1:ad:b7:49:6e:
         5c:2b:53:d5:60:18:a2:c1:52:f4:e1:ed:10:dd:78:d3:61:79:
         56:15:e7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----