Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade7fb71aa901800003287f4402/0/3133352e38342e39362e302f32332d3233203d3e20333935313633.roa
File:                     3133352e38342e39362e302f32332d3233203d3e20333935313633.roa (raw, json)
Hash identifier:          YBFyoOPZITKV37YiZLH1+qn/piVxcmgXctfZh8N5GFg=
Subject key identifier:   2C:88:D4:B5:D0:82:F4:48:7C:FB:54:95:84:83:0E:F9:53:D8:BC:CF
Certificate issuer:       /CN=02a2e07dacecbc50080906cd388e197dc6f70826e59177f230
Certificate serial:       2E920615EFC4C52FBC568E56278707B9A30080CA
Authority key identifier: 2B:F7:60:5B:89:27:C8:74:48:B3:B2:94:A8:B6:1D:8E:98:32:48:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/94008e39-99d4-45b9-99c6-73bae3250c42/02a2e07dacecbc50080906cd388e197dc6f70826e59177f230.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade7fb71aa901800003287f4402/0/3133352e38342e39362e302f32332d3233203d3e20333935313633.roa
Signing time:             Sat 17 Feb 2024 18:00:01 +0000
ROA not before:           Sat 17 Feb 2024 17:55:01 +0000
ROA not after:            Sat 15 Feb 2025 18:00:01 +0000
asID:                     395163
IP address blocks:        135.84.96.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:92:06:15:ef:c4:c5:2f:bc:56:8e:56:27:87:07:b9:a3:00:80:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02a2e07dacecbc50080906cd388e197dc6f70826e59177f230
        Validity
            Not Before: Feb 17 17:55:01 2024 GMT
            Not After : Feb 15 18:00:01 2025 GMT
        Subject: CN=2C88D4B5D082F4487CFB549584830EF953D8BCCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ef:b7:dd:89:9f:3b:c0:0b:2f:41:01:d7:78:
                    bd:84:52:e7:ea:1f:35:6d:9c:33:81:2a:7b:12:49:
                    47:9d:23:04:15:d9:a1:26:e4:c6:62:c9:4d:20:74:
                    ca:ed:70:88:ee:79:d7:3c:0b:df:74:44:1c:a8:c8:
                    02:c8:1b:6d:e0:ff:3f:f7:90:0b:12:84:e3:6b:25:
                    b0:6c:86:4b:99:8a:44:cb:16:42:5d:b3:7e:39:e6:
                    1f:ad:09:ee:ae:c8:0f:f0:0e:c6:ec:03:29:ee:3b:
                    48:00:a2:74:ca:3d:8c:71:ff:2a:ec:98:14:4b:ee:
                    ed:21:6c:a4:82:8e:df:b0:a0:dd:78:76:c4:83:ac:
                    58:14:fc:8c:a5:d4:8e:8c:fb:62:2f:ce:4f:c7:32:
                    b8:1c:90:c2:88:ec:29:ee:e4:72:f1:f3:8a:c8:f0:
                    f1:59:db:db:c6:6c:e5:95:83:b5:9b:aa:32:08:f0:
                    91:59:23:5e:9d:f7:16:71:69:93:5b:4f:88:6b:df:
                    bd:15:31:de:28:25:58:64:47:d4:ad:5c:c9:b5:b8:
                    45:7a:2d:b9:bb:d3:df:dd:39:fe:8c:57:97:ea:3e:
                    ae:76:d4:c9:77:27:42:07:de:b3:94:7f:ab:4c:57:
                    12:eb:10:ce:04:f0:7d:93:54:e7:05:c0:34:7a:b2:
                    66:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:88:D4:B5:D0:82:F4:48:7C:FB:54:95:84:83:0E:F9:53:D8:BC:CF
            X509v3 Authority Key Identifier:
                keyid:2B:F7:60:5B:89:27:C8:74:48:B3:B2:94:A8:B6:1D:8E:98:32:48:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade7fb71aa901800003287f4402/0/2BF7605B8927C87448B3B294A8B61D8E983248E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/94008e39-99d4-45b9-99c6-73bae3250c42/02a2e07dacecbc50080906cd388e197dc6f70826e59177f230.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade7fb71aa901800003287f4402/0/3133352e38342e39362e302f32332d3233203d3e20333935313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:58:06:ad:73:56:f0:d9:d0:50:7d:77:8e:fb:38:4f:e4:54:
         5a:65:ee:1e:b0:c4:88:cd:1f:6d:32:37:27:90:19:06:fa:17:
         d3:b3:2a:9a:98:66:de:91:60:bb:4f:f7:82:8c:10:4d:48:1d:
         74:30:c4:ce:2e:f5:59:45:a2:0f:af:9b:82:5d:7b:92:6c:a5:
         83:96:00:0e:de:49:a9:a2:03:8f:10:b6:fb:c1:a4:1c:1b:59:
         a9:57:34:31:3c:4a:0c:a7:ea:c0:99:73:b4:8f:4d:52:d6:de:
         5f:f9:eb:85:78:0c:fd:77:a9:a2:6e:26:07:b0:59:f2:57:93:
         1c:c7:3e:d5:ad:7a:9d:54:8d:59:3a:51:43:05:8a:23:5e:1f:
         da:1f:d5:72:91:f9:64:6f:31:c9:e1:ac:0e:b0:0c:c8:c0:47:
         63:83:9d:f2:17:a1:8f:22:a6:34:6d:f3:39:85:cf:ab:44:d4:
         86:6c:d9:81:6a:bb:71:c3:b2:21:62:96:e5:8a:cd:3a:45:30:
         29:4c:47:64:76:a6:9d:47:ec:6e:ed:47:cd:18:7b:2e:79:e6:
         1a:4d:f0:36:9b:07:a1:e9:5f:fd:72:c2:48:88:03:b0:23:51:
         bc:7e:11:c9:51:63:eb:e7:5c:44:b3:31:30:71:a6:8e:1f:f9:
         bb:56:3e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----