Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/15b457f1-ce86-351a-b4a7-793f8738ed54.roa
File:                     15b457f1-ce86-351a-b4a7-793f8738ed54.roa (raw, json)
Hash identifier:          7zUuItZV0S5d3CKpZSxF5EUbz2aZoiFbJiXhOAbk3sA=
Subject key identifier:   6D:C9:F6:D8:3D:2A:79:4C:BD:C8:34:6D:FE:BF:C2:06:FB:52:C2:0E
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285848F7C144018B8BBA7E2BC5C200
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/15b457f1-ce86-351a-b4a7-793f8738ed54.roa
Signing time:             Sat 22 Feb 2025 14:00:52 +0000
ROA not before:           Sat 22 Feb 2025 14:00:52 +0000
ROA not after:            Fri 23 May 2025 13:00:52 +0000
asID:                     60117
IP address blocks:        172.94.62.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f7:c1:44:01:8b:8b:ba:7e:2b:c5:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Feb 22 14:00:52 2025 GMT
            Not After : May 23 13:00:52 2025 GMT
        Subject: CN=e8296cb4-8f54-49b1-9e34-8e7af790fe68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:21:f5:eb:21:49:b8:32:ae:48:05:91:24:9d:
                    36:fd:a8:94:2f:f9:0d:40:17:e8:c3:a2:97:80:ab:
                    cd:0a:33:90:cc:7a:99:80:3f:63:d8:ac:43:17:d2:
                    42:08:82:49:3d:c3:38:6d:59:61:10:27:85:21:48:
                    49:60:42:0a:b2:7d:36:c0:c1:72:80:57:5c:57:72:
                    fc:11:85:dd:bd:ef:af:83:80:d7:a2:0d:3f:2a:aa:
                    e8:a1:59:6b:83:2e:70:c5:3e:e0:26:a6:9b:04:d4:
                    8c:9e:99:65:aa:2a:62:f8:4a:1d:97:4c:9c:15:fd:
                    44:03:96:bf:5d:54:99:1a:da:b1:ee:b1:e7:31:a0:
                    79:c5:c9:ea:65:2e:86:74:07:ea:24:ad:95:d7:e8:
                    6c:72:77:59:52:d0:68:e0:f9:1f:92:e8:aa:2f:2c:
                    57:0b:7a:30:c8:72:9f:56:bd:98:99:87:d7:f3:4f:
                    98:ac:89:77:8b:eb:0b:53:30:91:42:ee:4b:e7:9c:
                    69:91:b5:85:d8:d4:bd:96:e8:bd:91:7e:45:54:c0:
                    4b:d9:e0:74:9b:ee:8f:fd:b2:41:ff:b5:50:5c:22:
                    71:43:a5:56:17:8b:6b:07:ee:a1:c1:de:0e:69:04:
                    4a:7a:f3:04:1d:d8:26:43:cf:f5:21:c6:49:29:dc:
                    3d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C9:F6:D8:3D:2A:79:4C:BD:C8:34:6D:FE:BF:C2:06:FB:52:C2:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/15b457f1-ce86-351a-b4a7-793f8738ed54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:24:fc:aa:d9:65:e1:a2:62:da:0e:2d:5e:f5:76:42:f9:a5:
         1c:41:11:60:b2:87:53:fb:97:95:20:57:ef:04:d0:5f:ed:be:
         fd:e5:6b:17:d8:bf:c1:72:58:33:c8:85:94:87:6e:71:37:45:
         8e:01:21:28:39:14:45:c1:ca:66:e8:73:af:bb:c9:67:71:f8:
         0c:0f:bd:5b:bb:75:2e:51:46:27:92:c8:a6:bd:bc:9a:cd:74:
         0e:40:28:0f:b5:0a:28:02:1a:58:ac:94:76:fc:95:95:ca:9b:
         c4:44:6d:a9:96:4d:c6:a4:20:cb:cf:5a:ec:22:c5:d0:10:67:
         1c:35:8c:62:29:2f:3c:dd:2a:58:85:ef:00:a1:e7:62:f5:f6:
         69:f3:c5:30:92:7a:0b:d6:a9:8f:c5:c0:1e:a8:64:4d:64:64:
         10:35:bc:89:2c:2c:2f:a2:8f:9d:b9:59:25:7e:d4:85:05:ae:
         2a:58:46:07:df:fd:07:3b:a4:f5:71:a4:0c:e0:c9:5d:3b:18:
         1a:1f:22:c4:18:dd:fa:1b:bf:23:10:a5:56:5a:f4:39:3d:1c:
         93:20:bb:9b:c1:02:b4:38:99:6c:32:c6:a7:f3:2f:fe:82:0f:
         f8:30:69:00:00:b7:3a:c6:62:eb:10:32:82:18:3c:a6:b5:3d:
         d1:41:72:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj3wUQBi4u6fivFwgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDIyMjE0MDA1MloXDTI1MDUyMzEzMDA1MlowLzEtMCsGA1UEAxMk
ZTgyOTZjYjQtOGY1NC00OWIxLTllMzQtOGU3YWY3OTBmZTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSH16yFJuDKuSAWRJJ02/aiUL/kNQBfow6KX
gKvNCjOQzHqZgD9j2KxDF9JCCIJJPcM4bVlhECeFIUhJYEIKsn02wMFygFdcV3L8
EYXdve+vg4DXog0/KqrooVlrgy5wxT7gJqabBNSMnpllqipi+Eodl0ycFf1EA5a/
XVSZGtqx7rHnMaB5xcnqZS6GdAfqJK2V1+hscndZUtBo4PkfkuiqLyxXC3owyHKf
Vr2YmYfX80+YrIl3i+sLUzCRQu5L55xpkbWF2NS9lui9kX5FVMBL2eB0m+6P/bJB
/7VQXCJxQ6VWF4trB+6hwd4OaQRKevMEHdgmQ8/1IcZJKdw9RQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG3J9tg9KnlMvcg0bf6/wgb7UsIOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTViNDU3ZjEtY2U4Ni0z
NTFhLWI0YTctNzkzZjg3MzhlZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGck/KrZZeGiYtoOLV71dkL5pRxBEWCyh1P7l5UgV+8E0F/tvv3laxfY
v8FyWDPIhZSHbnE3RY4BISg5FEXBymboc6+7yWdx+AwPvVu7dS5RRieSyKa9vJrN
dA5AKA+1CigCGlislHb8lZXKm8REbamWTcakIMvPWuwixdAQZxw1jGIpLzzdKliF
7wCh52L19mnzxTCSegvWqY/FwB6oZE1kZBA1vIksLC+ij525WSV+1IUFripYRgff
/Qc7pPVxpAzgyV07GBofIsQY3fobvyMQpVZa9Dk9HJMgu5vBArQ4mWwyxqfzL/6C
D/gwaQAAtzrGYusQMoIYPKa1PdFBcqw=
-----END CERTIFICATE-----