Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233312e302f32342d3234203d3e203137313339.roa
File:                     3137332e3234372e3233312e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          jc+OIiNiApxO71yK7IMQ14cEr87PeWQwa9QIgWyRvqA=
Subject key identifier:   53:B8:08:A7:79:94:C7:55:51:FC:EE:AD:FB:71:1C:62:2A:70:50:EB
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       1BBD0BC58F15CC6033C789619163823C6C0B29A0
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233312e302f32342d3234203d3e203137313339.roa
Signing time:             Thu 23 May 2024 11:08:12 +0000
ROA not before:           Thu 23 May 2024 11:03:12 +0000
ROA not after:            Thu 22 May 2025 11:08:12 +0000
asID:                     17139
IP address blocks:        173.247.231.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:bd:0b:c5:8f:15:cc:60:33:c7:89:61:91:63:82:3c:6c:0b:29:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: May 23 11:03:12 2024 GMT
            Not After : May 22 11:08:12 2025 GMT
        Subject: CN=53B808A77994C75551FCEEADFB711C622A7050EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e1:bc:c1:78:6c:2d:cb:3b:98:91:2b:1f:e1:
                    fe:d9:2d:bd:3a:d1:c0:ab:9a:2d:ed:c1:70:f6:f2:
                    10:3d:64:c7:ee:52:1b:ef:e4:31:ed:77:79:70:5d:
                    ef:7f:b2:0a:c6:0c:9f:7b:5b:13:8c:d0:fb:8c:6c:
                    7b:21:db:43:14:ea:f6:77:68:51:fd:6e:ae:81:93:
                    d5:97:3e:d9:0b:0e:cf:97:99:d1:30:57:e5:e9:bf:
                    83:cd:f6:fe:58:82:42:8a:93:51:db:f5:43:9e:48:
                    6f:08:16:c4:39:c1:95:68:a9:90:67:e1:47:f0:74:
                    ca:91:31:18:6e:67:e5:9b:12:96:ba:42:dd:eb:2c:
                    92:70:0c:96:5b:cd:f3:b7:0b:ed:85:2d:19:c2:be:
                    6e:27:d8:fa:7d:bf:37:a3:69:24:a6:f2:6d:5a:1e:
                    c7:86:a5:a2:6f:73:31:e3:0c:5b:3d:1b:d4:02:f7:
                    0d:69:f9:37:a5:0a:8a:91:7a:ec:65:9d:0f:9b:73:
                    e3:f7:88:0a:4f:3c:01:57:4b:56:02:60:55:e6:15:
                    d6:58:04:55:54:c4:60:71:c2:0c:16:ab:30:93:8f:
                    76:f0:4b:04:00:34:c2:c2:ed:ec:f5:04:f6:a9:d0:
                    ba:ab:4f:04:8c:3e:c9:48:42:e3:22:d3:01:ac:82:
                    2b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B8:08:A7:79:94:C7:55:51:FC:EE:AD:FB:71:1C:62:2A:70:50:EB
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233312e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:f6:d7:c8:20:9d:67:b5:01:0c:9f:d5:bb:ac:e2:be:85:23:
         e0:99:1f:12:46:34:76:f4:35:93:42:ce:29:c2:62:64:9e:8a:
         72:92:c8:d9:cf:af:fb:28:c5:06:0e:a4:d9:0c:a6:04:7d:58:
         b6:56:29:35:f3:8e:01:6c:2a:2c:fa:c5:4d:35:f2:2d:28:94:
         9b:ef:e8:a6:5c:c7:da:c7:31:76:a4:95:05:dd:97:aa:b9:69:
         65:0a:68:20:19:78:76:82:eb:d4:6b:1f:bb:e2:4f:23:85:bd:
         85:eb:f9:19:09:f9:fe:33:95:bd:c4:e0:74:eb:17:ef:d3:cc:
         9d:4a:aa:db:0d:2b:7f:db:af:eb:24:e4:b8:05:48:c1:25:99:
         49:d9:d7:bc:c4:69:88:cb:36:45:3b:74:ee:3e:71:51:99:66:
         c7:0b:b8:ee:f2:2e:9d:7e:e4:12:e6:88:d7:be:c1:21:42:9b:
         97:44:ca:3c:13:ce:53:26:eb:df:0c:4b:69:51:d3:d4:c8:18:
         6f:30:99:08:0e:9a:09:22:e0:fa:9b:ef:97:eb:a4:e2:81:7a:
         32:2a:99:b1:b4:4e:68:94:12:eb:a0:0b:76:f5:0f:ba:82:7b:
         9e:85:ac:fd:29:59:fd:26:91:06:18:4e:d4:09:31:de:e2:b0:
         05:84:02:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----