Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3230362e3136382e33362e302f32332d3234203d3e203534313130.roa
File:                     3230362e3136382e33362e302f32332d3234203d3e203534313130.roa (raw, json)
Hash identifier:          AlQgNHfWQRrvgsnUABOyvZnmkadDgk3LsaDD+mZD/mY=
Subject key identifier:   09:15:77:4A:CB:F4:59:58:DA:89:9A:2B:B0:02:AD:2D:19:4D:73:5E
Certificate issuer:       /CN=69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7
Certificate serial:       03D7DBAB77557ACC87C4BBE7FDEB670C5ED53F33
Authority key identifier: FB:25:1C:C7:AA:B2:9D:28:F1:77:56:B8:8E:15:DC:43:DC:5A:CF:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3230362e3136382e33362e302f32332d3234203d3e203534313130.roa
Signing time:             Tue 12 Nov 2024 21:09:13 +0000
ROA not before:           Tue 12 Nov 2024 21:04:13 +0000
ROA not after:            Tue 11 Nov 2025 21:09:13 +0000
asID:                     54110
IP address blocks:        206.168.36.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d7:db:ab:77:55:7a:cc:87:c4:bb:e7:fd:eb:67:0c:5e:d5:3f:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7
        Validity
            Not Before: Nov 12 21:04:13 2024 GMT
            Not After : Nov 11 21:09:13 2025 GMT
        Subject: CN=0915774ACBF45958DA899A2BB002AD2D194D735E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c2:ff:71:e5:f2:a9:73:52:6d:be:e7:5e:b2:
                    c4:2f:4c:1b:26:81:c8:aa:d1:35:18:0f:6e:ba:b4:
                    26:d5:29:2c:ac:84:da:99:8d:10:b3:e5:86:20:fc:
                    c6:e0:60:0b:62:77:59:ca:0a:d1:f8:a7:ce:4f:c9:
                    2f:46:ca:1c:83:f6:52:91:72:8c:ce:03:19:59:19:
                    6d:b1:72:09:d1:a4:1b:1a:ca:d9:93:b6:88:1f:8e:
                    ad:e8:3b:3a:b6:95:17:6e:5c:9f:10:da:24:37:e2:
                    f0:e7:fa:2d:98:36:4e:10:aa:46:84:1f:21:16:93:
                    ae:92:a1:ae:f7:18:51:12:d4:90:57:15:31:fb:5d:
                    33:0a:2a:07:ba:25:4b:9b:95:22:3d:d9:0f:77:a7:
                    41:7f:fe:50:75:22:17:58:19:bb:2e:43:65:a4:3e:
                    92:93:99:89:09:75:39:b4:25:b9:e2:a0:c0:2c:a9:
                    22:d8:e2:49:a3:8a:11:50:0b:d8:df:55:df:3b:b4:
                    a8:07:0d:46:c3:0b:bb:17:f1:4d:44:25:fd:56:e3:
                    ae:8d:a3:62:21:31:d4:3a:98:88:99:23:a1:d8:0c:
                    d2:bd:55:e9:4d:c0:2c:9e:16:6e:a8:be:18:fd:a3:
                    71:ce:12:e0:15:61:53:75:0b:cf:b8:98:89:7e:34:
                    1f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:15:77:4A:CB:F4:59:58:DA:89:9A:2B:B0:02:AD:2D:19:4D:73:5E
            X509v3 Authority Key Identifier:
                keyid:FB:25:1C:C7:AA:B2:9D:28:F1:77:56:B8:8E:15:DC:43:DC:5A:CF:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/FB251CC7AAB29D28F17756B88E15DC43DC5ACF09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3230362e3136382e33362e302f32332d3234203d3e203534313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:50:33:70:c4:ce:ea:27:a9:e6:b4:c4:cb:28:64:62:75:95:
         36:89:f1:cc:86:ce:7a:4c:28:07:81:a0:38:f3:a1:16:d2:c1:
         02:4f:82:d6:51:ae:db:9b:25:0e:81:2e:65:03:fc:47:b3:47:
         a5:a4:0e:fe:48:95:46:6d:14:d9:ab:2e:5c:74:ff:09:16:cf:
         cd:f9:8a:d8:7a:e4:32:79:36:2a:1d:33:dd:06:52:c8:6b:ba:
         99:80:d1:dd:6f:54:20:04:2b:92:27:83:47:6f:f9:23:98:3e:
         e7:1b:bf:92:a4:73:b4:57:de:8b:0d:73:84:44:72:4e:0c:c2:
         54:c5:43:8d:be:e8:0d:08:2b:92:32:e9:ec:08:8f:2f:58:10:
         a3:05:29:fd:39:51:51:55:f6:39:5d:2a:10:f6:99:42:cd:e1:
         11:8f:8f:7d:8f:e1:90:ab:ea:de:38:f7:34:c2:39:a1:ba:a1:
         22:9a:9a:15:0f:db:e5:c9:1b:0c:4a:ea:14:ce:11:ef:19:ec:
         c2:96:51:90:8b:b9:81:6e:13:3e:65:08:16:d2:8a:c9:ab:64:
         fa:7b:25:95:c8:de:b7:9e:f3:b1:e8:53:f3:d1:e0:73:85:bb:
         cb:a1:3a:cf:58:18:fb:42:52:be:ea:6c:4c:46:8a:10:2a:24:
         5c:c1:ac:9e
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUA9fbq3dVesyHxLvn/etnDF7VPzMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjkyNzdkMGE5YjU5YzEyNWU4ZDJlNzIwZmU5ODNkZDBm
OWVjMzRlZjJlYmNhYmE4ZjcwHhcNMjQxMTEyMjEwNDEzWhcNMjUxMTExMjEwOTEz
WjAzMTEwLwYDVQQDEygwOTE1Nzc0QUNCRjQ1OTU4REE4OTlBMkJCMDAyQUQyRDE5
NEQ3MzVFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosL/ceXyqXNS
bb7nXrLEL0wbJoHIqtE1GA9uurQm1SksrITamY0Qs+WGIPzG4GALYndZygrR+KfO
T8kvRsocg/ZSkXKMzgMZWRltsXIJ0aQbGsrZk7aIH46t6Ds6tpUXblyfENokN+Lw
5/otmDZOEKpGhB8hFpOukqGu9xhREtSQVxUx+10zCioHuiVLm5UiPdkPd6dBf/5Q
dSIXWBm7LkNlpD6Sk5mJCXU5tCW54qDALKki2OJJo4oRUAvY31XfO7SoBw1Gwwu7
F/FNRCX9VuOujaNiITHUOpiImSOh2AzSvVXpTcAsnhZuqL4Y/aNxzhLgFWFTdQvP
uJiJfjQfywIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFAkVd0rL9FlY2omaK7ACrS0Z
TXNeMB8GA1UdIwQYMBaAFPslHMeqsp0o8XdWuI4V3EPcWs8JMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NmJhM2JkZDQzZDNjLzAv
RkIyNTFDQzdBQUIyOUQyOEYxNzc1NkI4OEUxNURDNDNEQzVBQ0YwOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2E4MTZlOGFkLTliY2MtNDZkYS1hZmQ4LTcwZGQ5N2JkMDIzMi82OTI3
N2QwYTliNTljMTI1ZThkMmU3MjBmZTk4M2RkMGY5ZWMzNGVmMmViY2FiYThmNy5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTZi
YTNiZGQ0M2QzYy8wLzMyMzAzNjJlMzEzNjM4MmUzMzM2MmUzMDJmMzIzMzJkMzIz
NDIwM2QzZTIwMzUzNDMxMzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAc6oJDANBgkqhkiG9w0BAQsF
AAOCAQEAQVAzcMTO6iep5rTEyyhkYnWVNonxzIbOekwoB4GgOPOhFtLBAk+C1lGu
25slDoEuZQP8R7NHpaQO/kiVRm0U2asuXHT/CRbPzfmK2HrkMnk2Kh0z3QZSyGu6
mYDR3W9UIAQrkieDR2/5I5g+5xu/kqRztFfeiw1zhERyTgzCVMVDjb7oDQgrkjLp
7AiPL1gQowUp/TlRUVX2OV0qEPaZQs3hEY+PfY/hkKvq3jj3NMI5obqhIpqaFQ/b
5ckbDErqFM4R7xnswpZRkIu5gW4TPmUIFtKKyatk+nsllcjet57zsehT89Hgc4W7
y6E6z1gY+0JSvupsTEaKECokXMGsng==
-----END CERTIFICATE-----