Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232382e302f32342d3234203d3e203137313339.roa
File:                     3137332e3234372e3232382e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          9mhBk/iuf+lZ5BchnIIQIz/xPWONsrT7ZRbxRAxZHrg=
Subject key identifier:   08:6C:C4:5A:4C:C0:F8:D0:52:16:E2:53:DE:8E:5A:FD:FA:C7:3F:E8
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       3F88B5B34025C8C151D768927BE848CA0D6A0594
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232382e302f32342d3234203d3e203137313339.roa
Signing time:             Thu 23 May 2024 11:08:12 +0000
ROA not before:           Thu 23 May 2024 11:03:12 +0000
ROA not after:            Thu 22 May 2025 11:08:12 +0000
asID:                     17139
IP address blocks:        173.247.228.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:88:b5:b3:40:25:c8:c1:51:d7:68:92:7b:e8:48:ca:0d:6a:05:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: May 23 11:03:12 2024 GMT
            Not After : May 22 11:08:12 2025 GMT
        Subject: CN=086CC45A4CC0F8D05216E253DE8E5AFDFAC73FE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:47:4a:3c:b2:5a:7e:9d:a0:2b:ce:94:00:1b:
                    a4:08:75:7f:6c:37:27:73:55:40:38:c3:fd:2b:23:
                    1b:80:46:24:47:99:2d:74:91:52:25:0d:03:4d:a0:
                    6c:61:7a:7c:f9:0e:a4:6f:30:4d:b5:84:5d:34:82:
                    04:25:6e:0a:2e:db:fd:41:1b:8d:27:2f:c7:2c:11:
                    4f:4f:90:51:22:7d:10:99:fe:91:21:be:12:60:88:
                    7a:c1:84:6e:22:66:69:27:61:30:53:11:a9:8b:0d:
                    bb:2e:e6:db:9a:97:85:fe:68:0f:3b:03:ef:ee:48:
                    5f:74:55:bb:06:47:36:8b:55:05:cf:47:e1:41:db:
                    01:a7:e2:15:b4:e8:ed:60:af:a6:72:d4:1e:93:76:
                    53:cf:d7:e2:8f:63:a0:6d:31:df:bb:93:cc:9c:27:
                    7f:9f:f2:ca:76:59:f1:d1:ca:b1:b1:f5:20:d1:b8:
                    4f:4c:77:c5:8d:d4:e3:5b:99:67:12:42:0d:88:35:
                    c9:25:73:5c:5c:11:65:87:1f:7e:06:2e:7e:41:08:
                    98:3e:32:cf:2e:d2:e3:af:ec:e0:9b:46:d7:77:96:
                    3d:bf:9b:5c:a7:82:ce:8a:dc:bd:ab:f0:4a:fe:70:
                    f3:71:e6:99:a9:94:c7:74:6a:1f:d9:16:3e:84:a2:
                    c0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6C:C4:5A:4C:C0:F8:D0:52:16:E2:53:DE:8E:5A:FD:FA:C7:3F:E8
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232382e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:7b:32:82:a1:ec:de:9a:6d:1a:a8:63:8f:14:86:2c:1a:52:
         9d:c8:92:c5:21:7b:b8:8c:fb:09:aa:d4:d3:5c:67:ed:a6:e3:
         0a:ea:ce:b4:31:4a:4f:1a:25:13:74:17:cb:d7:1e:1e:5b:5b:
         6e:e1:b7:f7:69:ca:ee:28:85:74:7d:02:43:da:0b:9b:30:52:
         27:1e:d7:d7:a3:5e:8f:c7:42:87:66:86:85:58:94:41:91:bb:
         c6:7d:c5:87:e7:77:26:5c:ff:5d:88:e1:2b:5d:ed:69:f3:71:
         27:5f:ac:cd:f4:19:0a:25:57:d5:b2:35:a9:78:ad:3a:a2:06:
         d4:13:f9:9e:82:f5:9f:5d:3b:62:c7:76:eb:cf:a7:7e:93:e4:
         3f:a2:7d:dd:db:8f:62:28:45:e7:f3:5d:fa:82:c7:6e:b6:4f:
         ba:9d:d7:d4:ae:c2:30:7f:e1:10:6c:68:27:97:79:c9:d7:0f:
         a4:69:26:7b:0e:64:c1:85:70:e7:c3:48:31:61:b7:ff:04:6c:
         8d:a5:57:55:f9:ce:a3:87:e3:94:d8:6c:a3:54:97:aa:bb:a6:
         7b:53:ef:72:eb:d6:94:99:c1:a3:22:d7:14:e9:a4:81:46:85:
         6e:e3:19:02:3c:40:48:3e:19:07:f6:a9:e5:d3:2b:10:80:af:
         d2:18:01:9a
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUP4i1s0AlyMFR12iSe+hIyg1qBZQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI1YWIxY2IzMGZmNDMwZTIzYWM2ZTE0YTA5MTczZDli
OWI0YjNlMzI4YTc2YjM4OGUwHhcNMjQwNTIzMTEwMzEyWhcNMjUwNTIyMTEwODEy
WjAzMTEwLwYDVQQDEygwODZDQzQ1QTRDQzBGOEQwNTIxNkUyNTNERThFNUFGREZB
QzczRkU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9UdKPLJafp2g
K86UABukCHV/bDcnc1VAOMP9KyMbgEYkR5ktdJFSJQ0DTaBsYXp8+Q6kbzBNtYRd
NIIEJW4KLtv9QRuNJy/HLBFPT5BRIn0Qmf6RIb4SYIh6wYRuImZpJ2EwUxGpiw27
LubbmpeF/mgPOwPv7khfdFW7Bkc2i1UFz0fhQdsBp+IVtOjtYK+mctQek3ZTz9fi
j2OgbTHfu5PMnCd/n/LKdlnx0cqxsfUg0bhPTHfFjdTjW5lnEkINiDXJJXNcXBFl
hx9+Bi5+QQiYPjLPLtLjr+zgm0bXd5Y9v5tcp4LOity9q/BK/nDzceaZqZTHdGof
2RY+hKLALQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFAhsxFpMwPjQUhbiU96OWv36
xz/oMB8GA1UdIwQYMBaAFAoXtAp53/9E+vo9QPbk0A2DUUuzMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGYwYjgwNmMwMThmYTUxMzZlMjkxODRhLzAv
MEExN0I0MEE3OURGRkY0NEZBRkEzRDQwRjZFNEQwMEQ4MzUxNEJCMy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzI5M2ZiMTViLTVhODUtNGFiZS1iZDI0LTIzMmExMTRhZTQ5MC9mYjVh
YjFjYjMwZmY0MzBlMjNhYzZlMTRhMDkxNzNkOWI5YjRiM2UzMjhhNzZiMzg4ZS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmMGI4MDZjMDE4ZmE1
MTM2ZTI5MTg0YS8wLzMxMzczMzJlMzIzNDM3MmUzMjMyMzgyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM3MzEzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArffkMA0GCSqGSIb3DQEB
CwUAA4IBAQCsezKCoezemm0aqGOPFIYsGlKdyJLFIXu4jPsJqtTTXGftpuMK6s60
MUpPGiUTdBfL1x4eW1tu4bf3acruKIV0fQJD2gubMFInHtfXo16Px0KHZoaFWJRB
kbvGfcWH53cmXP9diOErXe1p83EnX6zN9BkKJVfVsjWpeK06ogbUE/megvWfXTti
x3brz6d+k+Q/on3d249iKEXn8136gsdutk+6ndfUrsIwf+EQbGgnl3nJ1w+kaSZ7
DmTBhXDnw0gxYbf/BGyNpVdV+c6jh+OU2GyjVJequ6Z7U+9y69aUmcGjItcU6aSB
RoVu4xkCPEBIPhkH9qnl0ysQgK/SGAGa
-----END CERTIFICATE-----