Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3232382e302f32342d3234203d3e203137313339.roa
File:                     3230352e3133342e3232382e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          ym/jcpTEH2AnXPyQN04CEjb0aCpkEQu55kxsgxDyxv4=
Subject key identifier:   B9:C3:6B:7E:66:F6:FC:7E:1A:E8:F4:54:5E:F4:88:DF:90:31:57:F7
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       7357FD6553CE4081DDEBC419E5159F995E5D12B2
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3232382e302f32342d3234203d3e203137313339.roa
Signing time:             Thu 23 May 2024 10:59:12 +0000
ROA not before:           Thu 23 May 2024 10:54:12 +0000
ROA not after:            Thu 22 May 2025 10:59:12 +0000
asID:                     17139
IP address blocks:        205.134.228.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:57:fd:65:53:ce:40:81:dd:eb:c4:19:e5:15:9f:99:5e:5d:12:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: May 23 10:54:12 2024 GMT
            Not After : May 22 10:59:12 2025 GMT
        Subject: CN=B9C36B7E66F6FC7E1AE8F4545EF488DF903157F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:68:cd:48:9e:36:86:5b:94:2b:e9:24:bd:35:
                    20:cf:59:67:05:c7:6e:ae:45:35:1a:aa:74:23:b4:
                    b6:cd:5d:a0:9d:10:19:69:c1:17:fc:3f:ed:fe:c3:
                    4c:1a:af:b1:77:97:4f:7a:4b:5c:63:3c:d1:7d:9c:
                    4d:d3:6c:91:75:89:46:64:94:1e:24:66:29:1b:ac:
                    4f:d3:d6:49:80:a4:c7:fe:e6:55:97:01:cd:0d:7b:
                    6c:83:25:2f:a7:ea:c3:a9:e4:2e:1b:2e:49:73:b3:
                    24:fe:aa:82:fd:23:b0:b8:4f:2d:66:a3:dc:ef:70:
                    bb:e6:f4:e6:0f:54:0d:1f:17:78:6e:c5:10:25:e9:
                    71:b9:e7:57:21:6d:2e:06:b8:3e:b5:36:f3:70:50:
                    a7:75:2b:e7:74:da:d6:a3:b2:c9:8f:66:be:4a:6d:
                    01:a9:c4:3c:cb:7e:d6:95:cb:ad:9f:7e:da:76:fe:
                    f1:55:b1:6c:3d:94:45:73:58:91:a2:a8:b6:bf:1c:
                    97:9c:ec:42:e1:ed:28:67:b1:c0:d4:d7:74:8c:1f:
                    c4:93:e6:40:02:4d:35:5a:f3:ca:97:02:fb:4b:23:
                    c8:c2:b5:b5:81:8d:4a:30:8b:5d:14:01:69:24:74:
                    78:95:43:f5:5d:3d:6a:31:ce:a2:5c:7e:cd:97:7d:
                    2d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C3:6B:7E:66:F6:FC:7E:1A:E8:F4:54:5E:F4:88:DF:90:31:57:F7
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3232382e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.134.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:c5:15:4d:23:b0:4e:ed:34:0e:71:63:29:c4:dc:32:ea:43:
         f2:08:8e:28:dd:29:9f:e8:6c:18:3a:a0:a8:ab:16:3a:aa:9f:
         41:ac:d4:5f:43:06:95:c2:98:e6:ba:26:01:d7:3f:66:29:6f:
         c5:3c:37:59:f2:fe:56:11:2e:bb:02:68:a2:73:37:8c:54:9a:
         76:5a:94:d9:0e:97:d5:61:d7:70:6a:2c:25:79:50:d4:55:02:
         3e:19:7d:ab:d0:08:e8:95:a1:c4:03:e2:71:a9:ab:04:64:b5:
         95:5a:6e:51:8d:63:a5:d5:c9:26:8f:9f:34:50:e3:fa:32:00:
         38:87:6c:c3:b7:f0:c9:7b:91:74:cb:a6:9d:00:50:be:af:ad:
         5b:4a:75:bc:1a:f9:69:83:6e:19:9a:3d:92:8a:a3:86:a5:98:
         bb:e5:12:58:b2:88:67:de:42:a2:dd:f8:44:d5:66:4d:b8:af:
         f6:ca:7e:00:e2:9e:91:9d:bf:1c:2b:f2:fd:59:ca:09:c3:b2:
         28:cc:0a:2f:01:c5:70:95:38:a5:cd:d0:5f:62:c0:2a:38:d5:
         0c:7b:ad:8c:4b:39:5d:93:d5:13:08:6b:1a:f0:f7:f4:2d:e8:
         8a:71:5d:d3:c3:82:98:c7:a3:66:5a:33:2c:9f:87:be:d1:89:
         96:c7:fa:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----