Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133322e302f32322d3234203d3e20343030383036.roa
File:                     3139392e3138322e3133322e302f32322d3234203d3e20343030383036.roa (raw, json)
Hash identifier:          npwQDjsmZ9uaFubxFHb08gtF3G9yVgemwRvxYUhzqXI=
Subject key identifier:   CD:ED:F4:36:B6:F1:50:0E:08:67:69:4D:5F:36:F3:FE:74:E8:E7:D0
Certificate issuer:       /CN=69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7
Certificate serial:       79CCB69F93154399C172112C947D3ACECD6CDC8F
Authority key identifier: FB:25:1C:C7:AA:B2:9D:28:F1:77:56:B8:8E:15:DC:43:DC:5A:CF:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133322e302f32322d3234203d3e20343030383036.roa
Signing time:             Wed 30 Aug 2023 22:12:34 +0000
ROA not before:           Wed 30 Aug 2023 22:07:34 +0000
ROA not after:            Wed 28 Aug 2024 22:12:34 +0000
asID:                     400806
IP address blocks:        199.182.132.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:cc:b6:9f:93:15:43:99:c1:72:11:2c:94:7d:3a:ce:cd:6c:dc:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7
        Validity
            Not Before: Aug 30 22:07:34 2023 GMT
            Not After : Aug 28 22:12:34 2024 GMT
        Subject: CN=CDEDF436B6F1500E0867694D5F36F3FE74E8E7D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c4:f0:13:39:86:a2:62:ef:64:24:ed:26:7c:
                    bf:ef:67:1b:8f:77:ef:38:0f:c4:b8:e3:a0:75:2d:
                    8c:3f:8a:e3:14:d3:bc:2c:a8:7c:4a:f6:84:a4:89:
                    af:75:27:50:87:73:46:cf:30:6a:f8:a0:54:c4:93:
                    ed:74:c9:0c:0e:2e:dc:a3:3e:71:45:f8:d0:65:a4:
                    7e:42:77:15:08:e9:00:6c:d9:05:b4:69:cf:c9:5a:
                    59:79:11:8f:a9:ff:da:a6:86:63:bb:f4:a5:6a:51:
                    73:81:73:0b:60:c1:d2:ad:f9:f3:7e:a6:ec:13:0c:
                    e7:ed:b0:e3:9b:9e:c1:b8:08:51:d0:0d:01:3d:d1:
                    30:24:4c:2b:b2:70:69:68:ce:af:f5:db:53:d7:8a:
                    c4:58:2b:9b:ff:e0:42:5d:aa:fc:fc:74:0b:11:f4:
                    c5:b5:75:91:27:d5:a6:4a:b5:1e:88:b0:62:74:3c:
                    e4:79:77:c9:cf:a6:d5:2d:11:6c:de:f2:69:25:9e:
                    e9:93:69:8a:3d:86:7e:79:d7:1f:f1:43:b0:53:6f:
                    5d:75:d9:b4:8e:cf:8b:97:78:2a:bb:cc:42:b0:f0:
                    f1:b2:fe:a8:35:2e:d0:dd:b1:41:d3:09:26:af:4c:
                    14:9f:fe:50:66:0b:7b:6f:5c:b6:77:34:1e:63:55:
                    47:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:ED:F4:36:B6:F1:50:0E:08:67:69:4D:5F:36:F3:FE:74:E8:E7:D0
            X509v3 Authority Key Identifier:
                keyid:FB:25:1C:C7:AA:B2:9D:28:F1:77:56:B8:8E:15:DC:43:DC:5A:CF:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/FB251CC7AAB29D28F17756B88E15DC43DC5ACF09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133322e302f32322d3234203d3e20343030383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:1c:cd:73:08:a0:b2:25:47:35:a3:b8:2f:42:a1:5a:6e:39:
         d0:82:43:8c:57:44:95:a4:42:fe:ee:7e:e5:88:28:a2:c0:bd:
         bd:36:35:9c:52:27:b7:37:e0:73:0e:6f:ac:83:2b:b4:95:96:
         d3:de:07:f5:90:e6:11:c5:87:e3:7d:02:47:71:48:08:b2:7d:
         07:b0:29:d8:63:86:c4:40:a0:ac:de:2e:a9:36:04:30:f7:df:
         b8:51:32:5e:9d:b1:9f:19:71:53:d3:6e:3c:8e:c9:6a:ec:96:
         73:05:72:e1:17:6a:2f:24:c5:f9:93:c8:bc:7e:c3:59:91:ad:
         ca:7c:22:6f:11:46:41:9f:fd:de:90:6a:b3:27:e4:d2:d4:1c:
         cc:bc:e4:a7:e2:bb:03:30:e9:1e:c6:62:09:c3:2a:6a:89:1b:
         37:43:42:0c:fd:c8:d5:96:e1:20:7f:0d:87:0a:9a:ae:42:44:
         2b:f4:93:ec:2e:3a:6f:05:ad:2a:20:86:5b:0c:bc:af:5f:6f:
         9e:df:b7:b7:d0:d0:e8:05:8d:c9:46:98:da:60:46:8c:1a:df:
         c9:8c:61:5b:47:40:0c:4f:6c:0e:bb:de:f5:89:d8:ee:87:a1:
         c0:c8:df:08:36:8f:f2:04:e0:b9:2a:5e:3f:2e:b2:c7:64:18:
         5f:38:0f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----