Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233322e302f32342d3234203d3e203137313339.roa
File:                     3137332e3234372e3233322e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          bW6QY8LEQA82lcnH9t99DpeHFKJm/ZwyXYKdYhJqo1k=
Subject key identifier:   EF:1E:87:A2:B8:7B:57:DA:D2:F3:9F:3E:54:F8:E1:A1:AC:F2:9E:21
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       0524A2873F2546C8531A5960A09AC6A7EDAA0419
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233322e302f32342d3234203d3e203137313339.roa
Signing time:             Thu 23 May 2024 11:08:12 +0000
ROA not before:           Thu 23 May 2024 11:03:12 +0000
ROA not after:            Thu 22 May 2025 11:08:12 +0000
asID:                     17139
IP address blocks:        173.247.232.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:24:a2:87:3f:25:46:c8:53:1a:59:60:a0:9a:c6:a7:ed:aa:04:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: May 23 11:03:12 2024 GMT
            Not After : May 22 11:08:12 2025 GMT
        Subject: CN=EF1E87A2B87B57DAD2F39F3E54F8E1A1ACF29E21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ee:90:78:e8:3a:c6:f4:6f:af:48:a9:5c:61:
                    5c:d6:fe:4c:fe:64:06:80:7b:25:44:19:b9:69:8e:
                    08:0a:64:15:b9:17:1a:75:94:87:26:bd:da:8c:fa:
                    74:54:66:60:5d:87:e8:92:e4:de:f9:91:d7:92:1c:
                    cc:75:4e:8e:92:4c:8e:41:6c:77:32:73:26:d7:d0:
                    7f:11:a8:36:94:c6:3b:5f:b5:ad:dc:cd:21:3f:18:
                    65:45:53:6f:c2:27:b0:4e:a0:b3:d9:8d:cc:75:d6:
                    77:4a:d0:05:e5:38:0b:c2:20:67:92:b4:c5:29:36:
                    26:72:01:b1:02:7f:9b:dc:64:b2:a4:3d:9b:49:a2:
                    ff:95:07:e1:b9:89:2b:c2:be:ce:ba:3e:e7:71:ab:
                    60:65:2f:f1:08:a6:61:3f:1c:3b:e8:fc:85:52:a1:
                    20:f0:e3:dd:67:ac:7f:d2:fa:03:ff:55:46:0a:90:
                    55:ca:ca:58:ff:27:eb:4f:40:a3:01:5b:ab:f2:65:
                    06:98:17:55:19:25:58:a8:a2:b3:bf:d6:87:9b:7b:
                    02:26:77:69:39:a4:7e:10:61:03:c7:1c:d3:8a:cf:
                    31:87:47:cd:44:b8:c8:3f:8c:e2:b3:0c:9b:c7:53:
                    8d:54:b4:41:ca:a5:3c:66:93:74:eb:68:41:5d:d8:
                    e4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1E:87:A2:B8:7B:57:DA:D2:F3:9F:3E:54:F8:E1:A1:AC:F2:9E:21
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233322e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:b5:ce:92:18:bb:22:40:ca:0d:30:b7:ab:b0:e3:e7:70:4b:
         b7:de:56:71:f0:38:44:a1:87:b2:b1:c6:aa:64:54:b6:42:c0:
         c6:ff:54:49:06:30:3e:c3:aa:06:8a:e4:90:9d:47:b8:69:a0:
         33:c1:c5:08:e9:63:94:76:07:49:05:63:c2:41:a2:1e:39:d1:
         2a:1c:66:35:0e:6e:ba:7b:97:8e:35:98:cb:cb:1d:24:ba:8c:
         39:32:fd:38:eb:61:81:7d:28:b0:e5:e6:6a:30:cf:4a:45:31:
         d2:c2:84:49:eb:da:8e:c8:76:22:43:4b:de:ac:ce:77:ea:13:
         d1:85:82:d8:6a:84:d5:67:dd:dc:59:a5:ed:10:f5:18:e5:5c:
         0a:69:82:5b:b0:0a:63:9b:a2:3e:50:f3:ce:6f:be:51:e5:bd:
         48:8e:f5:b3:e1:93:2b:1d:27:e1:5d:07:b7:ec:3c:f2:3a:71:
         d2:bb:5a:96:48:bb:d9:33:4f:af:b5:48:4a:05:cc:f2:33:16:
         1d:a0:b3:78:a1:46:5c:03:59:74:8e:2b:30:fd:0c:32:e8:45:
         7f:14:d7:e1:c6:11:ff:f7:ca:46:9b:38:89:ed:24:00:8c:0e:
         c4:28:e4:16:52:97:42:11:9c:20:1e:ae:f7:75:15:c9:59:b1:
         66:b5:0a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----