Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade7fb71aa901800003287f4402/0/32332e3135302e3139322e302f32342d3234203d3e20333935313633.roa
File:                     32332e3135302e3139322e302f32342d3234203d3e20333935313633.roa (raw, json)
Hash identifier:          HlLfw8XSFr1WzVGLARxjtoHhtwhe6BNpfmNVFFtjm6Y=
Subject key identifier:   2B:DB:F5:C8:DA:5C:3D:38:2C:8C:85:DD:AD:8D:07:3A:95:83:34:48
Certificate issuer:       /CN=02a2e07dacecbc50080906cd388e197dc6f70826e59177f230
Certificate serial:       1B15D13370BF353F071CDE279E432EBCD76F9FA4
Authority key identifier: 2B:F7:60:5B:89:27:C8:74:48:B3:B2:94:A8:B6:1D:8E:98:32:48:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/94008e39-99d4-45b9-99c6-73bae3250c42/02a2e07dacecbc50080906cd388e197dc6f70826e59177f230.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade7fb71aa901800003287f4402/0/32332e3135302e3139322e302f32342d3234203d3e20333935313633.roa
Signing time:             Sat 17 Feb 2024 18:00:00 +0000
ROA not before:           Sat 17 Feb 2024 17:55:00 +0000
ROA not after:            Sat 15 Feb 2025 18:00:00 +0000
asID:                     395163
IP address blocks:        23.150.192.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:15:d1:33:70:bf:35:3f:07:1c:de:27:9e:43:2e:bc:d7:6f:9f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02a2e07dacecbc50080906cd388e197dc6f70826e59177f230
        Validity
            Not Before: Feb 17 17:55:00 2024 GMT
            Not After : Feb 15 18:00:00 2025 GMT
        Subject: CN=2BDBF5C8DA5C3D382C8C85DDAD8D073A95833448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:83:5f:c4:ba:19:c8:08:56:a5:4d:e8:eb:69:
                    1a:0c:b8:56:02:c2:b3:59:56:09:36:e7:89:58:ff:
                    f1:09:d7:ca:7f:24:fc:a7:25:a0:0f:d2:4b:0d:21:
                    6e:30:74:12:e8:28:78:3d:cc:12:07:69:2e:2d:ce:
                    c4:f4:5f:17:de:00:70:d4:48:57:3d:a0:af:88:e2:
                    ab:1e:9a:e1:3a:62:47:a4:7e:c9:1d:5f:60:4c:4a:
                    f4:80:e4:93:30:d3:10:32:d9:75:3f:f2:a5:57:c7:
                    c1:b4:8f:b6:e3:82:a9:eb:73:78:2c:9d:e4:cf:86:
                    c4:48:f1:9e:9d:49:d9:5e:e5:45:28:7d:61:d7:89:
                    ed:29:e2:b4:b9:a6:21:50:61:3d:28:6b:ce:a9:55:
                    fe:a6:84:ea:e8:7d:d3:53:85:b5:31:e5:c7:2f:8f:
                    3b:5f:0e:fe:f1:3e:bd:48:d2:30:f1:4a:2e:fe:c9:
                    eb:00:3b:09:54:e5:2c:f5:a5:a1:74:b6:45:59:3e:
                    c7:52:ef:bf:96:c1:7f:d0:f2:25:2d:86:1c:9a:88:
                    7e:4e:66:fc:66:e0:e5:a3:6a:38:ef:fa:93:18:bc:
                    d1:84:92:7f:81:6a:11:66:c9:97:92:25:37:44:bd:
                    e2:fa:1d:1b:ca:4c:55:d3:47:fd:8e:26:f1:8d:e0:
                    39:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DB:F5:C8:DA:5C:3D:38:2C:8C:85:DD:AD:8D:07:3A:95:83:34:48
            X509v3 Authority Key Identifier:
                keyid:2B:F7:60:5B:89:27:C8:74:48:B3:B2:94:A8:B6:1D:8E:98:32:48:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade7fb71aa901800003287f4402/0/2BF7605B8927C87448B3B294A8B61D8E983248E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/94008e39-99d4-45b9-99c6-73bae3250c42/02a2e07dacecbc50080906cd388e197dc6f70826e59177f230.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade7fb71aa901800003287f4402/0/32332e3135302e3139322e302f32342d3234203d3e20333935313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:4f:c3:d7:72:ba:60:9d:09:b1:68:f9:f0:60:8b:ec:17:34:
         9a:de:ee:1e:09:73:53:c9:6e:34:4d:d8:f4:d7:9e:3e:2f:41:
         d0:79:2e:53:fe:fc:0f:c7:a6:36:88:91:9e:2c:29:40:5f:9a:
         c6:60:53:af:30:00:ff:8e:e5:fa:8b:c3:67:41:66:7b:57:9f:
         b6:41:b2:f9:96:11:6c:3c:bc:81:96:ba:c7:f4:6e:3a:43:b3:
         57:46:d9:3b:a3:f8:f5:38:d3:bd:2a:81:5c:31:43:26:2e:0c:
         89:88:ad:fd:94:7f:73:ce:24:ba:97:34:4a:d8:1b:5e:c7:b2:
         b7:60:a5:d6:eb:6d:2e:05:b5:ab:54:94:9c:cd:e5:e2:85:a4:
         1d:0d:2b:b2:41:a2:d4:06:07:64:c4:f5:19:1c:d6:aa:c1:34:
         64:8b:e2:b8:a5:8a:99:91:c8:0c:f4:50:5e:cc:9d:e9:11:f9:
         f0:e0:25:2d:a7:ea:af:35:ca:a5:35:2b:44:4d:73:6b:aa:21:
         94:38:36:4f:fb:7b:fa:04:05:03:84:bc:62:9d:43:af:3e:1f:
         4f:fb:2e:25:b9:3a:8e:43:1c:7f:57:bc:2a:40:6c:3f:dd:23:
         d3:62:52:56:76:45:ac:a4:a1:e4:35:85:b0:df:3e:bc:8d:50:
         5c:4c:9b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----