Autonomous System Provider Authorization

$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair/0/AS970.asa
File:                     AS970.asa (raw, json)
Hash identifier:          uUtIUuFVFE42+T1fqnnQdo7h/4VRg1akAdGbbCnAbEY=
Subject key identifier:   90:44:A2:27:F9:0F:C2:D0:C9:53:2A:A8:C6:25:9C:E0:7A:23:20:AF
Certificate issuer:       /CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351
Certificate serial:       3C69EE7FF18BFBFD9FA7993736A68F1D1F9EA388
Authority key identifier: 7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer
Subject info access:      rsync://repo.kagl.me/rpki/KeatonAGLair/0/AS970.asa
Signing time:             Sat 28 Sep 2024 19:50:52 +0000
ASPA not before:          Sat 28 Sep 2024 19:45:52 +0000
ASPA not after:           Sat 27 Sep 2025 19:50:52 +0000
Customer ASID:            970
Providers:                AS: 54874

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:69:ee:7f:f1:8b:fb:fd:9f:a7:99:37:36:a6:8f:1d:1f:9e:a3:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351
        Validity
            Not Before: Sep 28 19:45:52 2024 GMT
            Not After : Sep 27 19:50:52 2025 GMT
        Subject: CN=9044A227F90FC2D0C9532AA8C6259CE07A2320AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0c:90:ca:57:4e:d2:c7:a3:d9:6d:a4:8c:56:
                    5c:aa:0d:51:51:5d:e3:20:b4:63:a7:6d:e3:fd:00:
                    f8:11:61:7e:70:79:3a:db:73:cb:24:26:a0:21:2f:
                    42:98:5c:bc:ef:ff:65:13:87:22:ec:c7:e8:73:ee:
                    e5:c1:54:04:0d:8a:d9:82:33:2e:1e:f2:9b:f5:18:
                    81:c7:8d:c6:69:e7:c4:b6:fe:a0:5c:bf:c8:23:11:
                    95:99:df:bc:a5:62:68:34:d1:b5:0c:b0:3e:de:c7:
                    a5:de:4c:e1:cb:c0:5b:a5:0e:e0:9a:71:bd:df:fb:
                    7e:a8:70:a9:95:e3:ce:34:f0:8e:d0:96:5f:4d:60:
                    52:a4:9c:80:e3:e8:28:19:24:5d:16:d2:9c:c5:6c:
                    81:54:81:fe:5e:a6:b7:05:66:63:79:49:b9:5a:96:
                    28:28:5f:58:36:b3:4b:bb:bf:79:02:bb:f9:07:ce:
                    de:93:e5:fe:bd:78:4a:f8:f5:7a:39:fd:e6:28:6f:
                    c5:74:b6:1f:20:1d:27:d7:09:89:01:ec:7c:3e:81:
                    90:ac:01:57:0b:17:4c:3d:3e:ef:ee:77:e5:4c:36:
                    84:96:6e:d9:0a:8e:1a:1d:98:57:4b:9e:96:c0:a9:
                    34:fb:4b:a7:87:14:d4:38:67:18:a9:7a:cf:62:2e:
                    c6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:44:A2:27:F9:0F:C2:D0:C9:53:2A:A8:C6:25:9C:E0:7A:23:20:AF
            X509v3 Authority Key Identifier:
                keyid:7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/AS970.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  970

    Signature Algorithm: sha256WithRSAEncryption
         1c:b2:e7:b7:eb:13:80:c8:3c:9c:3a:f0:f7:48:ea:14:6c:b3:
         b2:c7:a2:10:67:58:fe:50:45:f6:7a:52:6a:56:97:2c:dd:97:
         60:3d:60:53:ee:8b:d2:3f:f2:64:b0:77:66:97:79:83:e7:51:
         e4:2a:33:42:ca:2e:37:dd:df:16:37:bf:ad:b7:af:f0:5a:10:
         16:67:62:34:21:03:39:65:10:aa:52:0b:63:af:d1:0c:07:32:
         1d:f7:9e:9d:c1:75:51:81:7c:aa:74:d1:4b:3f:1d:93:75:d2:
         1c:d3:73:46:fa:84:85:3b:0f:18:a2:e2:89:a6:dd:f8:8e:1f:
         d1:bd:68:7f:fb:1a:4e:65:b1:9c:e1:85:52:88:36:25:d0:f1:
         af:33:4b:66:e9:c5:cb:2c:8d:fc:cf:fd:14:ba:72:da:66:90:
         37:4a:8f:68:79:62:a9:22:00:c9:b0:7a:7a:7d:64:d0:b2:61:
         9c:fc:82:48:c4:1a:2a:91:9d:1d:10:7e:f7:4d:f9:a8:4e:1d:
         10:41:74:c4:ab:14:e2:f2:a6:a0:7e:9f:75:a1:cd:ad:32:b5:
         b0:74:85:c8:04:e2:02:2d:3e:ae:e6:93:26:08:e9:3c:98:1d:
         c7:c9:a1:6b:87:06:1d:d2:29:a5:30:51:a6:4e:43:36:65:b3:
         d8:ab:7d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----