Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233382e302f32332d3234203d3e20383334.roa
File:                     3137332e3234372e3233382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          6OU52/10PEutZVSPigb4NL0ZwdrUlYsOx6Hr2bVMUyA=
Subject key identifier:   07:58:7E:4A:30:3A:A4:61:54:59:71:35:4D:41:89:82:3C:02:51:FB
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       3C943AC70B1913702863E68ABC1371280C7962BE
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233382e302f32332d3234203d3e20383334.roa
Signing time:             Sun 15 Sep 2024 05:51:33 +0000
ROA not before:           Sun 15 Sep 2024 05:46:33 +0000
ROA not after:            Sun 14 Sep 2025 05:51:33 +0000
asID:                     834
IP address blocks:        173.247.238.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:94:3a:c7:0b:19:13:70:28:63:e6:8a:bc:13:71:28:0c:79:62:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Sep 15 05:46:33 2024 GMT
            Not After : Sep 14 05:51:33 2025 GMT
        Subject: CN=07587E4A303AA461545971354D4189823C0251FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6f:f8:bb:5c:52:2c:bd:b1:6f:f1:1c:ae:fb:
                    53:eb:18:a2:57:75:92:be:2a:f8:1c:a6:d3:92:db:
                    d8:f6:76:76:ef:7c:b1:df:03:91:d1:ef:91:45:c0:
                    d1:63:d2:9d:69:50:b1:53:32:6d:86:fd:96:d8:ca:
                    ad:65:83:fb:25:75:d9:d7:ca:59:82:87:14:b2:d3:
                    6a:cd:10:88:07:70:d7:63:97:fe:69:59:9a:59:0d:
                    3d:c9:8a:cb:87:2c:0e:fd:8d:42:78:ab:96:a0:3f:
                    5b:46:68:7c:ae:c2:d0:f3:40:ef:48:ea:52:95:23:
                    01:79:d5:32:af:8a:e5:f8:e9:4e:25:8e:24:15:e9:
                    c5:c6:d8:1a:0b:9b:e1:c6:7f:ec:a2:c3:22:cc:63:
                    06:50:f6:e2:83:f6:24:ee:b0:82:9b:2a:4e:74:6f:
                    53:26:4d:a2:a3:fe:75:69:da:19:c8:58:4d:a3:2f:
                    67:4d:12:ab:7e:eb:3a:29:82:dc:d2:ce:3b:ac:b5:
                    87:f1:c5:e2:e3:c5:60:c2:a1:9a:f7:84:23:5d:92:
                    fd:e1:44:3f:c4:61:b8:cc:ea:18:73:e1:94:eb:8d:
                    c4:77:86:df:10:6e:ad:6a:f0:b5:92:63:62:09:45:
                    cb:b0:a2:a2:01:e4:4a:cf:bc:56:b6:3a:10:5f:08:
                    0c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:58:7E:4A:30:3A:A4:61:54:59:71:35:4D:41:89:82:3C:02:51:FB
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233382e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:2c:f6:83:fc:e7:85:c4:44:71:ee:60:46:a2:e9:1b:0f:84:
         9c:db:6a:34:6d:d1:fc:f9:d7:c2:bd:84:b1:86:6b:cd:bd:14:
         d9:0e:63:cd:40:00:2d:a8:d5:ed:d2:96:07:54:ca:dc:68:e6:
         fd:71:f6:56:c8:7d:0e:26:5a:dd:ee:39:45:ae:96:41:7b:3c:
         18:46:a0:34:43:78:3d:48:19:b9:63:b7:12:d3:5b:56:56:47:
         19:73:a2:10:23:0c:fb:45:c8:55:6c:d5:b6:9e:37:2f:84:9b:
         53:f2:50:68:4e:d2:9e:93:4e:d3:e4:d7:de:ef:04:a9:66:e6:
         ac:ec:e9:d5:d1:9d:46:b1:5d:a3:4e:5e:26:13:c1:64:09:53:
         13:30:16:3a:f3:8f:72:f6:86:62:07:9e:da:9a:f4:40:91:49:
         99:79:bd:9f:53:f7:5b:9b:d7:2e:26:92:42:f5:78:87:be:04:
         58:7a:5f:52:c9:51:0a:65:12:fc:b3:12:d0:ca:f2:cc:74:c1:
         57:22:40:7d:51:f3:7d:3d:f0:a0:0b:82:1b:a3:f2:c6:3b:97:
         29:c3:e1:55:0b:4d:4c:bc:f5:b2:47:a8:92:cf:c7:46:89:ce:
         c6:a1:5a:ba:88:03:30:b3:87:07:23:0a:c1:5d:7f:78:1a:84:
         a9:b3:54:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----