Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/0cff2462-5e8e-33ef-a063-6c882723edbf.roa
File:                     0cff2462-5e8e-33ef-a063-6c882723edbf.roa (raw, json)
Hash identifier:          QGhEHlwro27+MHL1b3EZNi4GMzD8sIRGe7piHQujN34=
Subject key identifier:   72:65:CC:84:7B:38:70:9F:9F:19:4C:B8:2F:A7:7C:90:93:A6:2D:4A
Certificate issuer:       /CN=ea3f9044-c185-4062-8dad-240b32b11348
Certificate serial:       010D0C9F43285848AF6C5A4D6A50466502174900
Authority key identifier: FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/0cff2462-5e8e-33ef-a063-6c882723edbf.roa
Signing time:             Mon 27 Jan 2025 16:11:40 +0000
ROA not before:           Mon 27 Jan 2025 16:11:40 +0000
ROA not after:            Sun 27 Apr 2025 15:11:40 +0000
asID:                     22363
IP address blocks:        62.164.182.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:6c:5a:4d:6a:50:46:65:02:17:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea3f9044-c185-4062-8dad-240b32b11348
        Validity
            Not Before: Jan 27 16:11:40 2025 GMT
            Not After : Apr 27 15:11:40 2025 GMT
        Subject: CN=813493e4-b018-482b-83a1-6acb161d2cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f8:24:54:0b:11:2b:7d:de:7f:de:b1:f5:82:
                    1e:6a:0a:73:0d:50:6a:81:0a:39:98:54:85:dc:cf:
                    86:50:0c:ff:d3:c8:7d:db:5f:79:51:e8:c4:ea:fb:
                    71:17:35:3a:d5:e3:af:68:1a:27:a8:20:82:fb:c8:
                    86:c4:3c:24:3e:5e:18:c3:f1:63:14:2b:e9:a3:f0:
                    13:44:ad:64:76:01:16:4a:dc:3f:35:2a:b5:91:9b:
                    47:37:22:34:e5:55:8a:bc:bc:d1:5d:b1:88:4a:ac:
                    a5:e2:51:37:22:7f:c4:82:c5:ea:e8:7e:a5:4c:49:
                    be:e4:43:9c:f6:3f:c6:fc:59:2c:5e:23:4e:bc:0f:
                    0b:a3:74:f9:69:b7:de:19:e0:0b:77:f8:70:5d:ad:
                    0a:64:43:69:03:a9:12:cd:c2:d4:99:7f:0d:8f:e9:
                    01:6b:d3:9d:50:4e:4d:b4:c3:bc:6a:b6:fa:b9:9a:
                    29:62:31:72:51:71:ee:fc:db:27:94:7e:93:3f:d8:
                    44:85:31:a3:9b:e8:fe:ae:cd:b7:56:0f:73:55:0e:
                    68:a5:97:f2:c0:4e:d6:f0:9b:95:1c:98:f3:11:58:
                    cd:b8:63:cd:68:04:e3:6c:f3:e6:a9:c9:8f:2f:2b:
                    d1:2c:4f:bb:e1:05:dd:b6:24:fd:95:4a:3f:bc:40:
                    6f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:65:CC:84:7B:38:70:9F:9F:19:4C:B8:2F:A7:7C:90:93:A6:2D:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/0cff2462-5e8e-33ef-a063-6c882723edbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.crl

            X509v3 Authority Key Identifier:
                keyid:FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.164.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:3a:4e:bc:49:0e:2a:a5:aa:19:d5:33:11:45:4b:ae:e5:23:
         57:08:99:96:f6:00:b0:18:da:96:7f:93:81:f9:95:17:3a:76:
         a8:5b:38:91:33:6c:75:29:06:09:80:83:ef:60:33:10:35:85:
         2a:16:c7:ef:ce:21:2e:b9:f7:c4:5f:b5:8b:26:9a:54:25:25:
         15:a7:96:bb:7a:3b:47:31:3a:95:77:72:c3:a9:42:a8:49:9f:
         94:9e:3f:52:bd:b4:44:84:93:7e:ec:c7:19:fc:fb:55:77:58:
         9f:53:2e:47:53:ae:27:44:8f:3a:77:e3:e0:7c:e7:bf:27:1c:
         34:49:35:be:bd:ea:4a:c9:20:0d:5e:45:43:e1:07:94:ca:56:
         24:31:a5:1f:32:3b:67:67:c9:73:74:66:72:69:d9:7b:1a:2c:
         40:ec:cd:c5:4d:44:87:e1:c6:72:d8:2f:39:25:5c:e8:ee:7c:
         b6:82:da:86:fb:e6:4b:69:71:e4:c1:01:dc:d0:41:4c:36:2d:
         98:b7:bc:b9:2c:bf:e9:4d:35:b8:ce:7a:63:46:d2:c1:af:b0:
         96:c7:6c:75:6b:fe:ca:c3:be:d1:3a:a3:d7:19:6c:ae:bb:cf:
         a2:c3:72:3f:ff:cb:fd:26:ae:a3:83:d7:e7:43:92:bd:b9:65:
         9d:d8:bd:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivbFpNalBGZQIXSQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWEzZjkwNDQtYzE4NS00MDYyLThkYWQtMjQwYjMyYjEx
MzQ4MB4XDTI1MDEyNzE2MTE0MFoXDTI1MDQyNzE1MTE0MFowLzEtMCsGA1UEAxMk
ODEzNDkzZTQtYjAxOC00ODJiLTgzYTEtNmFjYjE2MWQyY2YwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PgkVAsRK33ef96x9YIeagpzDVBqgQo5mFSF
3M+GUAz/08h92195UejE6vtxFzU61eOvaBonqCCC+8iGxDwkPl4Yw/FjFCvpo/AT
RK1kdgEWStw/NSq1kZtHNyI05VWKvLzRXbGISqyl4lE3In/EgsXq6H6lTEm+5EOc
9j/G/FksXiNOvA8Lo3T5abfeGeALd/hwXa0KZENpA6kSzcLUmX8Nj+kBa9OdUE5N
tMO8arb6uZopYjFyUXHu/NsnlH6TP9hEhTGjm+j+rs23Vg9zVQ5opZfywE7W8JuV
HJjzEVjNuGPNaATjbPPmqcmPLyvRLE+74QXdtiT9lUo/vEBvIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHJlzIR7OHCfnxlMuC+nfJCTpi1KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lYTNm
OTA0NC1jMTg1LTQwNjItOGRhZC0yNDBiMzJiMTEzNDgvMGNmZjI0NjItNWU4ZS0z
M2VmLWEwNjMtNmM4ODI3MjNlZGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZWEzZjkwNDQtYzE4NS00MDYyLThk
YWQtMjQwYjMyYjExMzQ4L2VhM2Y5MDQ0LWMxODUtNDA2Mi04ZGFkLTI0MGIzMmIx
MTM0OC5jcmwwHwYDVR0jBBgwFoAU/qCdkBIn9seDsTYB8Pa28gt/KOYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9lYTNmOTA0NC1jMTg1LTQwNjItOGRhZC0yNDBi
MzJiMTEzNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPqS2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHk6TrxJDiqlqhnVMxFFS67lI1cImZb2ALAY2pZ/k4H5lRc6dqhbOJEz
bHUpBgmAg+9gMxA1hSoWx+/OIS6598RftYsmmlQlJRWnlrt6O0cxOpV3csOpQqhJ
n5SeP1K9tESEk37sxxn8+1V3WJ9TLkdTridEjzp34+B8578nHDRJNb696krJIA1e
RUPhB5TKViQxpR8yO2dnyXN0ZnJp2XsaLEDszcVNRIfhxnLYLzklXOjufLaC2ob7
5ktpceTBAdzQQUw2LZi3vLksv+lNNbjOemNG0sGvsJbHbHVr/srDvtE6o9cZbK67
z6LDcj//y/0mrqOD1+dDkr25ZZ3YvWI=
-----END CERTIFICATE-----