Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca5540181016060d60425/0/32332e3133392e38382e302f32342d3234203d3e20333937323434.roa
File:                     32332e3133392e38382e302f32342d3234203d3e20333937323434.roa (raw, json)
Hash identifier:          nz3KUT7vpFOiAND7c9aPaDGp3sEB0m/zEOCDbll6Y7c=
Subject key identifier:   39:C2:47:0A:CC:81:49:11:AF:41:50:43:26:65:0D:A8:A2:FD:3D:00
Certificate issuer:       /CN=79d88309d02a4bef55764ac7c52b7eef5f1bb0ded1929fac33
Certificate serial:       7BD8B7E13A4C52913233F6BF52AE44918B4B7583
Authority key identifier: 3B:F7:67:28:9F:7D:AC:0C:15:00:93:8E:8E:C9:34:EB:E7:DD:7A:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0010301c-aa2d-4d35-97d4-8d947672bad4/79d88309d02a4bef55764ac7c52b7eef5f1bb0ded1929fac33.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca5540181016060d60425/0/32332e3133392e38382e302f32342d3234203d3e20333937323434.roa
Signing time:             Thu 30 May 2024 03:56:16 +0000
ROA not before:           Thu 30 May 2024 03:51:16 +0000
ROA not after:            Thu 29 May 2025 03:56:16 +0000
asID:                     397244
IP address blocks:        23.139.88.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d8:b7:e1:3a:4c:52:91:32:33:f6:bf:52:ae:44:91:8b:4b:75:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d88309d02a4bef55764ac7c52b7eef5f1bb0ded1929fac33
        Validity
            Not Before: May 30 03:51:16 2024 GMT
            Not After : May 29 03:56:16 2025 GMT
        Subject: CN=39C2470ACC814911AF41504326650DA8A2FD3D00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:19:52:a8:d9:7b:ba:24:88:b8:c3:08:08:3d:
                    a5:86:2f:e2:cf:54:24:17:63:4a:9a:4f:83:f8:0b:
                    ca:f5:f0:14:c5:19:b0:91:21:b5:87:b8:81:a6:ec:
                    58:15:cc:57:31:60:91:6d:43:dd:5d:69:7a:e9:00:
                    bd:40:dd:3d:06:a9:39:dd:08:07:6f:08:7b:70:4c:
                    00:9c:db:ab:e2:9b:b5:55:11:1e:0f:e8:7d:ca:49:
                    2a:d2:eb:76:c1:4f:5a:72:d1:57:ab:8b:bb:8d:19:
                    0a:52:9c:d0:04:7a:fd:6c:79:a0:f7:a8:5b:c3:f2:
                    ec:e3:42:c6:9c:6d:cb:f1:13:08:02:0c:b0:96:b7:
                    f5:81:49:64:2f:ec:9e:de:3f:bb:a1:75:4d:b3:d7:
                    1c:35:ef:90:74:95:7c:13:20:80:cc:f7:e9:19:7f:
                    78:64:0d:86:11:55:25:88:51:60:31:e6:38:52:c7:
                    48:65:ab:9c:83:8c:c3:d0:33:bf:63:95:11:96:e7:
                    d0:86:84:d2:72:09:3c:0b:34:90:c0:11:75:08:28:
                    ee:1d:28:7c:35:95:9b:9f:0e:61:3b:f7:79:5c:45:
                    03:1b:21:c6:b9:85:70:c2:0c:45:db:c3:29:d1:f4:
                    29:27:f2:d2:c4:e5:57:19:42:72:36:a9:14:22:81:
                    d5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C2:47:0A:CC:81:49:11:AF:41:50:43:26:65:0D:A8:A2:FD:3D:00
            X509v3 Authority Key Identifier:
                keyid:3B:F7:67:28:9F:7D:AC:0C:15:00:93:8E:8E:C9:34:EB:E7:DD:7A:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca5540181016060d60425/0/3BF767289F7DAC0C1500938E8EC934EBE7DD7A80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0010301c-aa2d-4d35-97d4-8d947672bad4/79d88309d02a4bef55764ac7c52b7eef5f1bb0ded1929fac33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca5540181016060d60425/0/32332e3133392e38382e302f32342d3234203d3e20333937323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:1a:4c:b7:5d:ab:aa:a8:e0:ec:23:01:c2:0b:ab:e5:f9:9f:
         f2:a8:64:f6:03:61:0c:e3:8d:e5:c6:3e:d5:83:a4:3c:f3:4e:
         62:7c:1f:31:13:e7:c7:75:94:7f:fe:f3:36:fa:38:17:3b:f8:
         4e:8c:e1:10:54:d1:45:49:30:94:30:4f:79:cf:bc:e5:ca:26:
         15:69:10:53:b3:32:84:87:58:e8:f2:0c:8e:9d:de:1c:6f:32:
         a0:ee:9a:16:c3:78:1b:0c:12:c8:d1:3d:8f:59:47:c3:ce:7a:
         af:a0:f6:b1:0e:85:68:10:b3:b9:04:74:92:6d:3c:1f:04:4c:
         f7:66:b4:66:1c:2f:bc:5b:df:d4:2a:f0:4b:72:c5:08:78:cb:
         58:fd:1e:0f:81:c8:3a:15:ba:f7:00:b4:98:26:5c:7f:b5:96:
         ed:cb:14:8b:d5:d2:6c:9e:d3:68:f2:14:c7:82:e5:c0:e4:3a:
         7f:c7:ac:3a:ea:df:07:ad:9b:19:94:6a:4f:94:1c:df:d9:6e:
         6b:9a:a0:af:41:ef:f4:57:d8:81:90:85:fd:0d:2d:3e:68:43:
         9b:e2:65:19:b2:33:47:82:52:39:e2:ba:2f:55:68:8a:ad:37:
         36:92:12:78:98:e8:f1:f8:e1:d4:7a:97:75:c8:83:08:b3:f7:
         30:7e:8b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----