Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade7fb71aa901800003287f4402/0/3133352e38342e39362e302f32342d3234203d3e20333935313633.roa
File:                     3133352e38342e39362e302f32342d3234203d3e20333935313633.roa (raw, json)
Hash identifier:          d07yPOhs1AfEu+0Pg7PZUfF+c2S3cwQC5AilWdPOKPM=
Subject key identifier:   87:49:AF:10:01:60:B3:38:95:FA:84:0E:A9:C9:AB:9C:81:8E:C2:CC
Certificate issuer:       /CN=02a2e07dacecbc50080906cd388e197dc6f70826e59177f230
Certificate serial:       372752DA43492175B08456DA199D07A519BB78A2
Authority key identifier: 2B:F7:60:5B:89:27:C8:74:48:B3:B2:94:A8:B6:1D:8E:98:32:48:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/94008e39-99d4-45b9-99c6-73bae3250c42/02a2e07dacecbc50080906cd388e197dc6f70826e59177f230.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade7fb71aa901800003287f4402/0/3133352e38342e39362e302f32342d3234203d3e20333935313633.roa
Signing time:             Sat 17 Feb 2024 18:00:00 +0000
ROA not before:           Sat 17 Feb 2024 17:55:00 +0000
ROA not after:            Sat 15 Feb 2025 18:00:00 +0000
asID:                     395163
IP address blocks:        135.84.96.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:27:52:da:43:49:21:75:b0:84:56:da:19:9d:07:a5:19:bb:78:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02a2e07dacecbc50080906cd388e197dc6f70826e59177f230
        Validity
            Not Before: Feb 17 17:55:00 2024 GMT
            Not After : Feb 15 18:00:00 2025 GMT
        Subject: CN=8749AF100160B33895FA840EA9C9AB9C818EC2CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d5:c6:fe:8e:1a:a4:80:96:50:a7:02:28:44:
                    9f:cb:92:82:14:cf:e1:b9:a4:56:1b:e1:f7:25:0e:
                    56:88:b4:d4:61:d5:be:d8:64:16:81:b5:0f:76:1f:
                    ea:ff:f9:f0:83:b0:49:9d:92:a2:94:0e:a1:c2:b9:
                    df:83:2a:09:5c:e6:2e:54:b6:ea:b3:b4:53:58:e3:
                    1e:93:7f:40:c0:e2:fc:9a:18:98:43:00:17:da:32:
                    df:23:a1:5a:25:1c:03:34:bd:b9:25:44:68:d9:a4:
                    41:f9:6c:a6:09:d1:16:de:b3:15:63:e1:b1:b8:b7:
                    da:a4:c7:3f:c2:c9:dc:c6:18:d5:06:7e:8e:b9:f9:
                    f4:29:5a:83:04:9a:f2:09:f6:43:60:1a:e0:3a:3b:
                    9d:2c:45:63:c5:50:20:27:db:a5:e7:31:8c:a6:c7:
                    4d:06:26:06:4e:a7:57:48:cf:e9:24:43:72:21:db:
                    7d:2a:61:be:34:23:3d:a1:28:69:e3:6e:93:27:ae:
                    1a:bd:d5:e6:40:49:db:98:9d:01:0f:ce:b2:65:f4:
                    5d:c8:8c:0c:19:12:45:c4:a2:a4:f1:f2:68:09:4b:
                    f7:ad:a9:99:ea:78:c9:be:0e:7f:de:c7:92:af:e5:
                    8a:54:ce:01:8b:bf:d2:b1:7e:e2:40:b3:98:8b:c4:
                    cc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:49:AF:10:01:60:B3:38:95:FA:84:0E:A9:C9:AB:9C:81:8E:C2:CC
            X509v3 Authority Key Identifier:
                keyid:2B:F7:60:5B:89:27:C8:74:48:B3:B2:94:A8:B6:1D:8E:98:32:48:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade7fb71aa901800003287f4402/0/2BF7605B8927C87448B3B294A8B61D8E983248E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/94008e39-99d4-45b9-99c6-73bae3250c42/02a2e07dacecbc50080906cd388e197dc6f70826e59177f230.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade7fb71aa901800003287f4402/0/3133352e38342e39362e302f32342d3234203d3e20333935313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:e5:73:64:d5:46:66:30:7c:8c:cf:0f:89:5c:9d:66:c8:63:
         70:15:0a:fa:56:d2:d8:91:b0:c7:0b:8e:05:42:95:cf:56:22:
         a4:94:7c:4c:43:59:c4:06:cd:9e:97:8d:fb:f9:0c:9e:ed:8e:
         bd:d5:a5:43:7f:2f:2c:f2:87:0b:c5:cd:d2:92:c7:4e:43:bb:
         81:0b:c2:90:08:a8:55:4c:44:bc:92:a6:0f:d6:0e:ad:8b:6d:
         79:dc:37:d3:cf:28:77:b6:cb:1c:07:35:95:74:7a:62:e1:6e:
         5e:10:9f:25:0f:e9:f8:01:39:c3:13:5e:b5:58:04:e4:73:55:
         78:9d:87:6a:13:79:03:a3:52:e1:b1:09:29:13:94:8e:20:c0:
         0c:68:e9:c0:61:22:dc:d5:d0:22:b2:8b:07:e6:cf:2d:54:4a:
         14:17:ff:e0:22:07:1c:12:e5:64:91:23:08:e7:b2:e0:fe:fe:
         db:98:4a:fe:fc:1e:c4:1a:5b:da:08:df:7f:8b:c0:d5:74:7d:
         68:90:f0:4b:e1:0e:d4:ab:87:18:8e:3d:10:80:b8:1b:2b:7a:
         6c:f7:53:0b:c1:62:1d:4d:08:c0:76:61:14:10:06:1c:a2:93:
         64:ba:67:06:ab:59:58:d6:6a:77:85:ea:46:70:ac:8f:68:80:
         58:50:ad:55
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUNydS2kNJIXWwhFbaGZ0HpRm7eKIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDJhMmUwN2RhY2VjYmM1MDA4MDkwNmNkMzg4ZTE5N2Rj
NmY3MDgyNmU1OTE3N2YyMzAwHhcNMjQwMjE3MTc1NTAwWhcNMjUwMjE1MTgwMDAw
WjAzMTEwLwYDVQQDEyg4NzQ5QUYxMDAxNjBCMzM4OTVGQTg0MEVBOUM5QUI5Qzgx
OEVDMkNDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tXG/o4apICW
UKcCKESfy5KCFM/huaRWG+H3JQ5WiLTUYdW+2GQWgbUPdh/q//nwg7BJnZKilA6h
wrnfgyoJXOYuVLbqs7RTWOMek39AwOL8mhiYQwAX2jLfI6FaJRwDNL25JURo2aRB
+WymCdEW3rMVY+GxuLfapMc/wsncxhjVBn6Oufn0KVqDBJryCfZDYBrgOjudLEVj
xVAgJ9ul5zGMpsdNBiYGTqdXSM/pJENyIdt9KmG+NCM9oShp426TJ64avdXmQEnb
mJ0BD86yZfRdyIwMGRJFxKKk8fJoCUv3ramZ6njJvg5/3seSr+WKVM4Bi7/SsX7i
QLOYi8TMDwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFIdJrxABYLM4lfqEDqnJq5yB
jsLMMB8GA1UdIwQYMBaAFCv3YFuJJ8h0SLOylKi2HY6YMkjgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlN2ZiNzFhYTkwMTgwMDAwMzI4N2Y0NDAyLzAv
MkJGNzYwNUI4OTI3Qzg3NDQ4QjNCMjk0QThCNjFEOEU5ODMyNDhFMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4Lzk0MDA4ZTM5LTk5ZDQtNDViOS05OWM2LTczYmFlMzI1MGM0Mi8wMmEy
ZTA3ZGFjZWNiYzUwMDgwOTA2Y2QzODhlMTk3ZGM2ZjcwODI2ZTU5MTc3ZjIzMC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTdmYjcxYWE5MDE4MDAw
MDMyODdmNDQwMi8wLzMxMzMzNTJlMzgzNDJlMzkzNjJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMzMzkzNTMxMzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIdUYDANBgkqhkiG9w0BAQsF
AAOCAQEAf+VzZNVGZjB8jM8PiVydZshjcBUK+lbS2JGwxwuOBUKVz1YipJR8TENZ
xAbNnpeN+/kMnu2OvdWlQ38vLPKHC8XN0pLHTkO7gQvCkAioVUxEvJKmD9YOrYtt
edw3088od7bLHAc1lXR6YuFuXhCfJQ/p+AE5wxNetVgE5HNVeJ2HahN5A6NS4bEJ
KROUjiDADGjpwGEi3NXQIrKLB+bPLVRKFBf/4CIHHBLlZJEjCOey4P7+25hK/vwe
xBpb2gjff4vA1XR9aJDwS+EO1KuHGI49EIC4Gyt6bPdTC8FiHU0IwHZhFBAGHKKT
ZLpnBqtZWNZqd4XqRnCsj2iAWFCtVQ==
-----END CERTIFICATE-----