Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade7fb71aa901800003287f4402/0/3133352e38342e39372e302f32342d3234203d3e20333935313633.roa
File:                     3133352e38342e39372e302f32342d3234203d3e20333935313633.roa (raw, json)
Hash identifier:          QvkgVNjD67HiV8DUVbGeRDLz9rsULQu7h/nV2FG9W8I=
Subject key identifier:   60:B5:A7:91:BA:64:72:38:EB:2D:24:9B:18:8F:7E:5E:E3:69:6D:47
Certificate issuer:       /CN=02a2e07dacecbc50080906cd388e197dc6f70826e59177f230
Certificate serial:       2985427C751CC9E8E85183F7C194225482D648E7
Authority key identifier: 2B:F7:60:5B:89:27:C8:74:48:B3:B2:94:A8:B6:1D:8E:98:32:48:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/94008e39-99d4-45b9-99c6-73bae3250c42/02a2e07dacecbc50080906cd388e197dc6f70826e59177f230.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade7fb71aa901800003287f4402/0/3133352e38342e39372e302f32342d3234203d3e20333935313633.roa
Signing time:             Sat 17 Feb 2024 18:00:01 +0000
ROA not before:           Sat 17 Feb 2024 17:55:01 +0000
ROA not after:            Sat 15 Feb 2025 18:00:01 +0000
asID:                     395163
IP address blocks:        135.84.97.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:85:42:7c:75:1c:c9:e8:e8:51:83:f7:c1:94:22:54:82:d6:48:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02a2e07dacecbc50080906cd388e197dc6f70826e59177f230
        Validity
            Not Before: Feb 17 17:55:01 2024 GMT
            Not After : Feb 15 18:00:01 2025 GMT
        Subject: CN=60B5A791BA647238EB2D249B188F7E5EE3696D47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:78:a3:e7:b0:49:e9:ee:f7:5c:a9:1f:6a:66:
                    b6:2f:b5:37:e8:0f:81:f6:c1:4c:17:7c:9d:a0:dd:
                    1d:ce:bd:f8:9e:35:ad:2c:6d:b0:07:a5:48:d2:d3:
                    b5:48:b9:98:1f:3a:5f:fb:d1:9c:65:38:a9:ce:a5:
                    a6:ee:07:b3:fa:f6:df:94:9d:53:80:fc:11:f4:84:
                    9f:25:87:26:81:23:3d:2c:ad:c9:41:8a:6a:84:e3:
                    14:b2:94:4a:1a:97:66:fd:50:20:f2:e7:12:87:a9:
                    e1:8e:82:98:98:15:d5:ce:ff:30:6c:76:6b:22:22:
                    87:d1:57:79:f7:f5:6b:e1:c8:13:5a:3b:90:45:93:
                    6f:74:30:5f:43:4b:96:8b:3e:06:cc:e5:0e:7a:f4:
                    5e:96:50:96:28:b7:02:45:00:1b:27:c3:11:69:d3:
                    eb:00:8c:4e:f5:0d:45:98:fa:c2:fb:73:ec:21:14:
                    43:1b:cb:7a:a1:5c:98:88:4e:76:43:a9:da:8f:23:
                    2e:9a:ed:63:97:21:e9:03:d4:c2:98:8b:fc:19:77:
                    fa:06:dd:00:91:d3:b9:09:31:eb:a1:94:de:26:67:
                    15:2a:8e:5c:f8:f6:2d:b3:e8:5a:a1:7d:43:00:66:
                    b5:50:2b:17:cf:53:5b:3e:5f:c6:96:8b:c7:29:43:
                    fe:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B5:A7:91:BA:64:72:38:EB:2D:24:9B:18:8F:7E:5E:E3:69:6D:47
            X509v3 Authority Key Identifier:
                keyid:2B:F7:60:5B:89:27:C8:74:48:B3:B2:94:A8:B6:1D:8E:98:32:48:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade7fb71aa901800003287f4402/0/2BF7605B8927C87448B3B294A8B61D8E983248E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/94008e39-99d4-45b9-99c6-73bae3250c42/02a2e07dacecbc50080906cd388e197dc6f70826e59177f230.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade7fb71aa901800003287f4402/0/3133352e38342e39372e302f32342d3234203d3e20333935313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:ef:f2:c7:4c:21:c1:fe:04:92:3c:23:73:74:7b:99:4d:5c:
         ce:02:3c:73:0c:e3:bf:3f:8e:31:d2:d9:67:43:a9:6a:f8:60:
         b0:be:3e:af:84:6b:ae:da:8b:9d:23:19:8c:85:f4:79:1d:f7:
         d4:d1:0f:e8:5b:08:ad:a8:94:13:16:74:e6:ec:1f:4b:6f:e5:
         a3:6d:2c:9b:5a:ec:57:f2:79:7b:fb:81:11:46:18:d9:3a:a2:
         c9:e9:a7:0d:cb:35:f7:23:7d:81:a4:62:7e:7b:26:53:37:ab:
         d2:8c:57:64:6d:7c:87:a8:f3:b6:02:6c:42:1f:09:3f:18:3b:
         c2:c5:ca:3b:7d:bb:04:63:5a:2a:87:c0:10:01:a7:7c:41:9f:
         ec:df:89:5f:ac:74:af:28:e6:76:43:24:c0:a3:67:06:9f:29:
         fb:4e:63:5e:99:a2:8d:83:66:7a:38:02:ba:f3:37:ff:84:bd:
         b5:68:44:c3:25:0d:de:3a:da:64:1d:5c:a6:5c:d5:7f:84:58:
         69:94:8e:52:7a:89:75:e4:98:f2:6d:d3:91:09:dd:ba:5b:f0:
         f8:b7:59:f9:b5:ba:30:0a:9f:77:c1:20:6e:35:09:ec:dd:20:
         d3:13:06:df:10:61:c9:1e:b6:b5:ef:13:23:a2:4d:c2:84:57:
         60:d9:e5:70
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUKYVCfHUcyejoUYP3wZQiVILWSOcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDJhMmUwN2RhY2VjYmM1MDA4MDkwNmNkMzg4ZTE5N2Rj
NmY3MDgyNmU1OTE3N2YyMzAwHhcNMjQwMjE3MTc1NTAxWhcNMjUwMjE1MTgwMDAx
WjAzMTEwLwYDVQQDEyg2MEI1QTc5MUJBNjQ3MjM4RUIyRDI0OUIxODhGN0U1RUUz
Njk2RDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3ij57BJ6e73
XKkfama2L7U36A+B9sFMF3ydoN0dzr34njWtLG2wB6VI0tO1SLmYHzpf+9GcZTip
zqWm7gez+vbflJ1TgPwR9ISfJYcmgSM9LK3JQYpqhOMUspRKGpdm/VAg8ucSh6nh
joKYmBXVzv8wbHZrIiKH0Vd59/Vr4cgTWjuQRZNvdDBfQ0uWiz4GzOUOevRellCW
KLcCRQAbJ8MRadPrAIxO9Q1FmPrC+3PsIRRDG8t6oVyYiE52Q6najyMumu1jlyHp
A9TCmIv8GXf6Bt0AkdO5CTHroZTeJmcVKo5c+PYts+haoX1DAGa1UCsXz1NbPl/G
lovHKUP+kwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFGC1p5G6ZHI46y0kmxiPfl7j
aW1HMB8GA1UdIwQYMBaAFCv3YFuJJ8h0SLOylKi2HY6YMkjgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlN2ZiNzFhYTkwMTgwMDAwMzI4N2Y0NDAyLzAv
MkJGNzYwNUI4OTI3Qzg3NDQ4QjNCMjk0QThCNjFEOEU5ODMyNDhFMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4Lzk0MDA4ZTM5LTk5ZDQtNDViOS05OWM2LTczYmFlMzI1MGM0Mi8wMmEy
ZTA3ZGFjZWNiYzUwMDgwOTA2Y2QzODhlMTk3ZGM2ZjcwODI2ZTU5MTc3ZjIzMC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTdmYjcxYWE5MDE4MDAw
MDMyODdmNDQwMi8wLzMxMzMzNTJlMzgzNDJlMzkzNzJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMzMzkzNTMxMzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIdUYTANBgkqhkiG9w0BAQsF
AAOCAQEAH+/yx0whwf4Ekjwjc3R7mU1czgI8cwzjvz+OMdLZZ0OpavhgsL4+r4Rr
rtqLnSMZjIX0eR331NEP6FsIraiUExZ05uwfS2/lo20sm1rsV/J5e/uBEUYY2Tqi
yemnDcs19yN9gaRifnsmUzer0oxXZG18h6jztgJsQh8JPxg7wsXKO327BGNaKofA
EAGnfEGf7N+JX6x0ryjmdkMkwKNnBp8p+05jXpmijYNmejgCuvM3/4S9tWhEwyUN
3jraZB1cplzVf4RYaZSOUnqJdeSY8m3TkQndulvw+LdZ+bW6MAqfd8EgbjUJ7N0g
0xMG3xBhyR62te8TI6JNwoRXYNnlcA==
-----END CERTIFICATE-----