Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232372e302f32342d3234203d3e203137313339.roa
File:                     3137332e3234372e3232372e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          UCLXLFTTiEcwxCmPCY80SCUHpINS0RlyKppWtFqGxkc=
Subject key identifier:   93:D3:2D:CB:92:70:40:E6:C8:AF:E9:CD:21:B4:72:0B:B3:62:85:F9
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       72F719E04AF23D14FAA9955D285EBD0D72768F75
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232372e302f32342d3234203d3e203137313339.roa
Signing time:             Thu 23 May 2024 11:08:12 +0000
ROA not before:           Thu 23 May 2024 11:03:12 +0000
ROA not after:            Thu 22 May 2025 11:08:12 +0000
asID:                     17139
IP address blocks:        173.247.227.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f7:19:e0:4a:f2:3d:14:fa:a9:95:5d:28:5e:bd:0d:72:76:8f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: May 23 11:03:12 2024 GMT
            Not After : May 22 11:08:12 2025 GMT
        Subject: CN=93D32DCB927040E6C8AFE9CD21B4720BB36285F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:87:eb:12:a4:c8:3a:88:c6:09:48:e3:11:b2:
                    56:fd:da:3f:c9:b4:96:2b:f2:54:aa:21:1b:66:96:
                    7c:82:e1:79:9e:2f:90:b7:9a:27:8d:0b:77:18:38:
                    9a:13:3c:c2:2e:f3:c8:17:e5:60:eb:ca:03:6e:95:
                    83:19:35:f4:18:ba:a8:af:0c:d2:f7:3b:d0:b2:c8:
                    52:37:30:a3:25:90:5a:b7:cd:51:3e:61:be:d2:2e:
                    e9:ee:7d:b1:b6:85:ae:46:88:1d:45:c6:1f:dd:90:
                    1f:9d:5a:75:36:59:3e:6e:7c:e9:38:6e:31:0b:14:
                    52:f2:fb:a1:f1:e2:cd:62:64:82:b8:56:6f:91:3e:
                    7b:e5:80:b5:a0:d0:03:b2:9c:0b:9d:fe:c2:a6:13:
                    f7:cd:4a:2d:a4:0b:2c:45:2b:83:68:89:9c:2d:1f:
                    f1:91:aa:41:61:cf:21:38:7a:0a:f1:a1:dd:87:1d:
                    f5:00:0e:42:64:93:73:3c:39:93:59:a8:be:ea:52:
                    b8:a1:61:4b:49:48:69:bf:77:54:25:b5:ec:a7:4c:
                    cb:60:9d:50:c2:b8:f8:c4:dd:96:c9:22:30:d1:ec:
                    b3:e2:64:6d:a5:6a:e6:d5:a1:53:5f:30:29:5b:3f:
                    35:03:9c:2c:9f:34:5d:15:08:d9:e1:33:34:cf:c8:
                    9b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D3:2D:CB:92:70:40:E6:C8:AF:E9:CD:21:B4:72:0B:B3:62:85:F9
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232372e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:48:86:35:93:ab:a5:83:65:75:12:62:93:83:2e:14:fe:0e:
         56:7c:c0:43:7d:b0:c0:fd:48:22:40:5a:b5:fd:4b:3c:89:e6:
         61:a2:0f:35:bf:ce:a8:5d:9f:68:f9:65:56:0e:2e:2a:4a:53:
         c2:2f:bd:ce:7b:bc:84:90:cd:96:b9:a3:b4:bf:af:3c:e3:8a:
         a0:24:34:cd:9d:e2:9f:67:05:5f:ce:18:41:1f:cf:4f:99:43:
         91:d1:05:3a:bd:94:13:73:8f:a1:19:bb:0c:48:f3:1d:18:9c:
         d5:a9:90:6d:7e:b6:f9:b5:a8:10:64:0f:f9:99:aa:f1:4a:d5:
         20:a8:5e:a0:da:02:b6:49:8d:cf:1c:00:6f:06:a0:13:59:c5:
         d2:7a:34:b8:59:4d:1c:79:b5:df:8d:62:ae:53:a0:30:10:3a:
         73:8a:15:de:7d:17:a6:09:41:2c:82:ab:8e:8c:83:b0:ca:ca:
         34:eb:b6:e8:56:7a:59:52:60:68:27:56:b9:34:4b:41:04:51:
         64:23:e4:cd:af:30:2e:b5:8b:10:3e:0c:b2:bc:4b:24:d3:95:
         e7:69:3d:93:fa:12:af:02:5c:1b:d3:dc:b0:9b:93:b8:79:22:
         3a:3d:0a:33:13:84:20:37:b9:bb:dc:c5:01:67:bb:e1:3c:09:
         d6:e8:91:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 22 08:27:35 2024 by rpki-client on console-fra.rpki-client.org