Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/32332e3134382e3233322e302f32342d3234203d3e203539363738.roa
File:                     32332e3134382e3233322e302f32342d3234203d3e203539363738.roa (raw, json)
Hash identifier:          Hm99plyQoROCnlG61J3svGGbu59W8cyHbz6wmd30iCQ=
Subject key identifier:   03:93:CF:0C:BA:9F:4F:AC:21:87:61:62:E7:F6:4E:12:9C:60:A6:3B
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       1AC64874C496FB98C5334B5C73FF08439C9520E8
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/32332e3134382e3233322e302f32342d3234203d3e203539363738.roa
Signing time:             Mon 26 Feb 2024 12:08:48 +0000
ROA not before:           Mon 26 Feb 2024 12:03:48 +0000
ROA not after:            Mon 24 Feb 2025 12:08:48 +0000
asID:                     59678
IP address blocks:        23.148.232.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c6:48:74:c4:96:fb:98:c5:33:4b:5c:73:ff:08:43:9c:95:20:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Feb 26 12:03:48 2024 GMT
            Not After : Feb 24 12:08:48 2025 GMT
        Subject: CN=0393CF0CBA9F4FAC21876162E7F64E129C60A63B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b7:69:8b:d0:b9:6f:ad:88:98:7a:7c:6a:24:
                    a0:71:f2:bd:60:f9:5e:52:49:ed:13:e7:ce:4f:8b:
                    a7:d9:fc:0d:0d:36:31:67:67:72:80:ee:0c:cc:60:
                    2d:7f:01:30:e3:8e:ce:50:f4:62:cc:f7:35:f7:4a:
                    8d:d3:bf:e0:42:7e:ee:b7:2f:c7:ce:10:be:25:30:
                    17:4f:a3:f7:19:f6:08:b8:e7:7c:de:d6:40:86:d2:
                    2f:c5:2b:df:e5:b6:ed:06:81:fd:68:94:b3:32:0c:
                    1c:19:6a:e1:07:c0:08:56:51:e9:7f:06:7a:75:99:
                    80:7c:4e:27:54:cd:4f:e7:a2:5a:53:6a:6b:d8:93:
                    88:50:29:ee:e4:92:94:ed:2e:33:11:1d:5f:a3:46:
                    e8:71:eb:b3:4c:31:a4:2f:a6:1c:d4:00:d1:5a:a4:
                    0d:3d:78:86:f1:e3:fc:3a:1b:dd:78:54:09:07:c5:
                    31:0c:4c:5b:dc:11:2a:4a:ba:42:53:20:88:14:52:
                    d7:45:b9:e2:08:db:24:b4:c4:44:72:39:37:50:e7:
                    42:32:31:05:9f:63:85:28:7e:6f:91:5a:d4:07:fd:
                    ed:de:80:f8:09:76:8f:78:d1:56:3b:4c:57:3d:9f:
                    e7:64:ea:ef:3f:2c:45:3e:d8:a0:ab:93:11:a5:82:
                    16:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:93:CF:0C:BA:9F:4F:AC:21:87:61:62:E7:F6:4E:12:9C:60:A6:3B
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/32332e3134382e3233322e302f32342d3234203d3e203539363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:8f:6b:12:05:9d:d2:9e:9f:48:25:e0:c1:3c:2c:1b:15:74:
         bb:1f:9a:ec:49:9a:f7:e0:f9:9a:3d:7a:48:c4:a7:5e:54:9b:
         a3:82:03:6c:74:1f:49:e0:41:26:ff:a4:49:76:b1:1c:4e:a6:
         27:5a:67:cc:27:99:c0:2c:d5:b8:1b:08:4f:b2:1c:6d:a8:10:
         c7:d1:a7:d2:63:4a:5b:95:97:84:9a:bc:78:76:9d:e1:45:ea:
         ef:f6:9c:ed:9a:5c:a8:cd:d7:10:2a:12:83:77:0f:ab:60:a9:
         09:b3:8e:b4:9c:81:31:0d:66:a6:a1:3f:01:71:d6:ac:cc:1e:
         1e:47:6e:2f:22:17:c2:95:91:50:21:de:cd:01:8b:01:dd:ee:
         81:b4:f4:fa:55:b3:bd:36:cb:25:09:3d:45:67:60:00:ca:eb:
         c5:a5:f9:0f:b7:96:d5:75:cb:db:48:b4:5a:c0:b4:26:5c:f0:
         23:ca:30:83:03:13:46:93:12:ad:de:17:05:75:54:64:a1:38:
         af:e0:09:92:7c:ed:eb:35:e8:01:78:c0:18:05:27:b1:3e:58:
         d6:80:e3:05:bd:20:9e:5b:48:92:95:b5:81:f4:52:fd:f7:dd:
         20:11:0e:76:f2:6b:e5:55:27:31:fd:f1:1b:69:d0:9d:61:9e:
         b5:ef:9e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----