Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/1af6a800-ff15-3222-9c11-0738c3304be3.roa
File:                     1af6a800-ff15-3222-9c11-0738c3304be3.roa (raw, json)
Hash identifier:          unr1b268jZ3w2P1yg6jQawMwADY3G+re45//YZXL/l0=
Subject key identifier:   B4:00:88:83:D4:CE:4A:75:A8:00:E9:DA:66:CD:E4:EB:20:89:FD:7E
Certificate issuer:       /CN=0432b247-64bf-4a12-bc99-32dbce58a455
Certificate serial:       010D0C9F4328584908816430AFF042E04424D600
Authority key identifier: 00:E5:32:2F:AA:99:B2:2D:4C:7E:7C:D1:08:FB:5A:37:B2:E3:01:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/1af6a800-ff15-3222-9c11-0738c3304be3.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        64.110.138.0/24 maxlen: 24
                          2620:104:2040::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:64:30:af:f0:42:e0:44:24:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0432b247-64bf-4a12-bc99-32dbce58a455
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=14c3f25c-6659-49f8-b43b-bf263fe48359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cd:e9:b0:18:99:af:47:02:8d:4c:bb:d9:39:
                    5f:10:d3:bc:62:f1:3a:eb:a4:65:72:f2:54:df:4d:
                    6c:18:e3:ef:69:35:ee:04:34:ff:a0:bf:40:3a:ac:
                    7f:3f:75:86:33:98:2e:c5:19:b5:a7:67:48:60:66:
                    47:ff:9f:f0:d8:97:0c:a8:09:78:8f:aa:84:24:3d:
                    5e:c7:34:d8:91:66:2a:9f:72:89:2b:20:39:37:f7:
                    a4:cc:4b:7c:cd:73:40:94:b5:25:b9:9d:32:e9:0c:
                    80:9e:70:2a:9f:46:68:e5:36:a2:39:a2:98:a9:ec:
                    76:b9:ec:fb:fa:ca:28:89:84:f3:b8:a9:dc:e6:49:
                    57:9a:3f:29:c9:48:56:a6:3d:03:19:13:8c:dc:0f:
                    63:37:0b:f9:d2:32:49:de:d4:61:95:04:7c:7e:88:
                    d1:8f:ed:2f:cc:bb:f5:fe:50:e1:df:e5:a4:20:84:
                    03:3c:4c:2f:dd:b8:ee:c5:00:82:8c:19:f7:2c:23:
                    c9:81:03:d4:41:93:b5:00:4f:31:93:dd:56:91:ae:
                    60:1e:8a:b1:79:6f:8e:1c:15:2d:f8:e6:12:dd:82:
                    2f:02:90:1e:e1:79:f0:82:ca:d6:89:1b:6e:da:91:
                    11:2f:33:7b:4b:5a:3a:ce:61:a7:0d:3e:e7:92:cf:
                    1b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:00:88:83:D4:CE:4A:75:A8:00:E9:DA:66:CD:E4:EB:20:89:FD:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/1af6a800-ff15-3222-9c11-0738c3304be3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/0432b247-64bf-4a12-bc99-32dbce58a455.crl

            X509v3 Authority Key Identifier:
                keyid:00:E5:32:2F:AA:99:B2:2D:4C:7E:7C:D1:08:FB:5A:37:B2:E3:01:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.110.138.0/24
                IPv6:
                  2620:104:2040::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:34:d5:a2:e7:4a:9a:d2:b4:3a:fd:46:12:1c:69:e1:d2:6a:
         62:57:8f:5e:82:b1:5b:b1:fa:72:39:fb:7e:bb:b4:09:63:21:
         98:82:8f:2f:a6:60:a5:d3:2b:53:7d:96:09:2a:e4:a6:26:f1:
         e8:73:d7:bb:ab:87:48:f8:c9:ca:3e:86:d1:77:6d:b9:07:04:
         30:4a:73:ba:bb:82:e1:dc:3e:58:31:27:db:b9:ce:36:b8:8b:
         ec:35:fa:a3:5e:e1:40:08:be:ac:1b:32:81:88:fb:74:5e:0b:
         d7:72:0e:a5:f1:20:36:0c:f9:29:6e:57:7d:08:df:c2:1a:7b:
         4f:23:ae:e7:c8:94:fb:4b:42:d8:84:7e:ac:44:10:d9:fc:db:
         5e:03:eb:80:ce:05:45:86:6e:ec:7e:f0:6a:c1:0e:b3:50:e5:
         28:aa:20:56:c1:e3:bb:5e:1c:70:d8:43:f0:da:16:7e:3b:72:
         81:8e:a4:81:87:c5:b1:fd:31:8f:7c:81:fa:a4:97:f5:b9:32:
         e6:bc:8b:44:8f:20:ab:0b:45:b7:bb:d0:18:0f:16:19:83:e6:
         72:be:7b:b0:31:57:42:38:33:e5:ac:97:b4:ee:8d:bf:4c:31:
         92:b7:2c:4f:61:6a:39:4f:66:fe:52:93:53:6e:17:30:ff:55:
         32:22:53:09
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEkIgWQwr/BC4EQk1gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDQzMmIyNDctNjRiZi00YTEyLWJjOTktMzJkYmNlNThh
NDU1MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk
MTRjM2YyNWMtNjY1OS00OWY4LWI0M2ItYmYyNjNmZTQ4MzU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls3psBiZr0cCjUy72TlfENO8YvE666RlcvJU
301sGOPvaTXuBDT/oL9AOqx/P3WGM5guxRm1p2dIYGZH/5/w2JcMqAl4j6qEJD1e
xzTYkWYqn3KJKyA5N/ekzEt8zXNAlLUluZ0y6QyAnnAqn0Zo5TaiOaKYqex2uez7
+sooiYTzuKnc5klXmj8pyUhWpj0DGROM3A9jNwv50jJJ3tRhlQR8fojRj+0vzLv1
/lDh3+WkIIQDPEwv3bjuxQCCjBn3LCPJgQPUQZO1AE8xk91Wka5gHoqxeW+OHBUt
+OYS3YIvApAe4XnwgsrWiRtu2pERLzN7S1o6zmGnDT7nks8bVQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFLQAiIPUzkp1qADp2mbN5Osgif1+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wNDMy
YjI0Ny02NGJmLTRhMTItYmM5OS0zMmRiY2U1OGE0NTUvMWFmNmE4MDAtZmYxNS0z
MjIyLTljMTEtMDczOGMzMzA0YmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDQzMmIyNDctNjRiZi00YTEyLWJj
OTktMzJkYmNlNThhNDU1LzA0MzJiMjQ3LTY0YmYtNGExMi1iYzk5LTMyZGJjZTU4
YTQ1NS5jcmwwHwYDVR0jBBgwFoAUAOUyL6qZsi1MfnzRCPtaN7LjAT8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wNDMyYjI0Ny02NGJmLTRhMTItYmM5OS0zMmRi
Y2U1OGE0NTUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQG6KMA8E
AgACMAkDBwAmIAEEIEAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAojTVoudKmtK0Ov1GEhxp4dJqYlePXoKx
W7H6cjn7fru0CWMhmIKPL6ZgpdMrU32WCSrkpibx6HPXu6uHSPjJyj6G0XdtuQcE
MEpzuruC4dw+WDEn27nONriL7DX6o17hQAi+rBsygYj7dF4L13IOpfEgNgz5KW5X
fQjfwhp7TyOu58iU+0tC2IR+rEQQ2fzbXgPrgM4FRYZu7H7wasEOs1DlKKogVsHj
u14ccNhD8NoWfjtygY6kgYfFsf0xj3yB+qSX9bky5ryLRI8gqwtFt7vQGA8WGYPm
cr57sDFXQjgz5ayXtO6Nv0wxkrcsT2FqOU9m/lKTU24XMP9VMiJTCQ==
-----END CERTIFICATE-----