Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3232342e302f32312d3231203d3e203137313339.roa
File:                     3230352e3133342e3232342e302f32312d3231203d3e203137313339.roa (raw, json)
Hash identifier:          xjwZD02v6kHSH9nMBgLNdGZCu4R3Qomdbsl7RIksnf0=
Subject key identifier:   00:B7:68:DE:9E:2D:01:FA:DC:BC:BB:82:82:4C:51:5E:79:C1:31:13
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       7521F1DA4F8033EA5335ED42E71BA6BD105C17E7
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3232342e302f32312d3231203d3e203137313339.roa
Signing time:             Thu 13 Jun 2024 11:05:21 +0000
ROA not before:           Thu 13 Jun 2024 11:00:21 +0000
ROA not after:            Thu 12 Jun 2025 11:05:21 +0000
asID:                     17139
IP address blocks:        205.134.224.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:21:f1:da:4f:80:33:ea:53:35:ed:42:e7:1b:a6:bd:10:5c:17:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Jun 13 11:00:21 2024 GMT
            Not After : Jun 12 11:05:21 2025 GMT
        Subject: CN=00B768DE9E2D01FADCBCBB82824C515E79C13113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:14:b8:17:d7:e7:83:1b:80:06:17:fd:7e:64:
                    f6:60:26:37:dc:7c:d3:18:38:51:0b:eb:11:47:d3:
                    64:09:ea:66:bd:b3:94:ff:b9:0e:8e:b1:5e:04:d5:
                    10:f6:99:1c:6e:3e:fc:0f:08:ed:39:92:9a:34:36:
                    da:a1:3d:d5:f6:e7:6e:00:17:e0:94:63:7a:d4:96:
                    23:16:e0:d6:9f:6b:8a:8b:12:56:c7:35:c7:f1:cf:
                    6d:83:e0:59:20:4a:f3:80:19:a1:b0:96:2c:e6:4e:
                    ed:a5:a9:f7:4c:a5:56:b8:e4:c2:09:a5:12:1e:71:
                    59:f0:07:01:45:7a:76:21:ff:ce:c8:fb:04:8c:d7:
                    17:82:11:f4:7b:46:fe:c4:3a:4a:86:ec:6d:f2:36:
                    51:86:35:aa:d8:e0:b1:a8:72:c4:39:63:69:e9:75:
                    5a:c1:91:ea:db:52:55:9f:a0:60:37:42:a9:d5:5b:
                    29:a3:98:94:94:19:c5:94:df:aa:02:f7:7b:22:3b:
                    e7:9c:60:5b:9c:6d:3e:ac:e9:73:58:ff:96:ef:e8:
                    a2:73:0d:d9:a8:65:a2:bd:e1:65:09:ca:b5:dd:84:
                    5c:a2:42:61:1d:89:40:24:b7:b9:71:4d:30:8a:71:
                    c0:1e:27:74:04:0d:3f:bb:c2:5e:46:c6:15:e4:5f:
                    bf:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B7:68:DE:9E:2D:01:FA:DC:BC:BB:82:82:4C:51:5E:79:C1:31:13
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3232342e302f32312d3231203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.134.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         52:9a:dc:54:fd:bc:a9:89:33:6d:e6:2d:e8:45:78:27:b7:01:
         62:63:11:d2:6e:3f:b0:bc:e2:20:82:66:58:29:c1:ac:1e:37:
         28:69:38:f5:17:b4:a4:b9:58:84:4f:03:35:97:5d:56:4d:92:
         6a:cf:43:3c:1a:cc:ca:a2:86:d5:9c:36:d6:2f:ae:3d:09:80:
         f2:e3:2f:2c:ce:02:67:e0:68:fc:a3:fa:1d:ee:e3:36:c3:ee:
         fd:7c:1d:0a:93:d0:e1:d9:be:73:0d:9b:4d:21:25:c0:e5:bf:
         9f:38:4b:32:02:70:b8:68:e1:e2:e1:46:8f:60:b9:67:f4:56:
         3a:3b:02:f2:1d:39:7b:30:9d:de:bf:b7:bf:4b:af:9c:f8:ed:
         bc:95:19:cb:5f:78:8b:16:fe:c3:7d:72:aa:76:ef:07:53:e9:
         f9:12:aa:19:78:ba:1c:16:bb:01:50:a4:04:57:8e:90:2d:ec:
         fc:56:c4:f6:67:bc:5f:11:47:b8:91:b8:70:d6:cf:16:3e:f8:
         82:49:ac:72:5d:36:07:5f:d0:08:83:d5:04:c5:63:a1:d4:b9:
         f3:49:b1:98:52:65:c1:55:2b:92:eb:0e:be:8f:97:2d:bf:28:
         9e:d8:21:bd:6f:1b:55:02:da:52:b2:96:48:a6:05:9a:88:45:
         15:f0:85:d8
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUdSHx2k+AM+pTNe1C5xumvRBcF+cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI1YWIxY2IzMGZmNDMwZTIzYWM2ZTE0YTA5MTczZDli
OWI0YjNlMzI4YTc2YjM4OGUwHhcNMjQwNjEzMTEwMDIxWhcNMjUwNjEyMTEwNTIx
WjAzMTEwLwYDVQQDEygwMEI3NjhERTlFMkQwMUZBRENCQ0JCODI4MjRDNTE1RTc5
QzEzMTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBS4F9fngxuA
Bhf9fmT2YCY33HzTGDhRC+sRR9NkCepmvbOU/7kOjrFeBNUQ9pkcbj78DwjtOZKa
NDbaoT3V9uduABfglGN61JYjFuDWn2uKixJWxzXH8c9tg+BZIErzgBmhsJYs5k7t
pan3TKVWuOTCCaUSHnFZ8AcBRXp2If/OyPsEjNcXghH0e0b+xDpKhuxt8jZRhjWq
2OCxqHLEOWNp6XVawZHq21JVn6BgN0Kp1Vspo5iUlBnFlN+qAvd7IjvnnGBbnG0+
rOlzWP+W7+iicw3ZqGWiveFlCcq13YRcokJhHYlAJLe5cU0winHAHid0BA0/u8Je
RsYV5F+/rwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFAC3aN6eLQH63Ly7goJMUV55
wTETMB8GA1UdIwQYMBaAFAoXtAp53/9E+vo9QPbk0A2DUUuzMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGYwYjgwNmMwMThmYTUxMzZlMjkxODRhLzAv
MEExN0I0MEE3OURGRkY0NEZBRkEzRDQwRjZFNEQwMEQ4MzUxNEJCMy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzI5M2ZiMTViLTVhODUtNGFiZS1iZDI0LTIzMmExMTRhZTQ5MC9mYjVh
YjFjYjMwZmY0MzBlMjNhYzZlMTRhMDkxNzNkOWI5YjRiM2UzMjhhNzZiMzg4ZS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmMGI4MDZjMDE4ZmE1
MTM2ZTI5MTg0YS8wLzMyMzAzNTJlMzEzMzM0MmUzMjMyMzQyZTMwMmYzMjMxMmQz
MjMxMjAzZDNlMjAzMTM3MzEzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzYbgMA0GCSqGSIb3DQEB
CwUAA4IBAQBSmtxU/bypiTNt5i3oRXgntwFiYxHSbj+wvOIggmZYKcGsHjcoaTj1
F7SkuViETwM1l11WTZJqz0M8GszKoobVnDbWL649CYDy4y8szgJn4Gj8o/od7uM2
w+79fB0Kk9Dh2b5zDZtNISXA5b+fOEsyAnC4aOHi4UaPYLln9FY6OwLyHTl7MJ3e
v7e/S6+c+O28lRnLX3iLFv7DfXKqdu8HU+n5EqoZeLocFrsBUKQEV46QLez8VsT2
Z7xfEUe4kbhw1s8WPviCSaxyXTYHX9AIg9UExWOh1LnzSbGYUmXBVSuS6w6+j5ct
vyie2CG9bxtVAtpSspZIpgWaiEUV8IXY
-----END CERTIFICATE-----