Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230382e3130332e3135342e302f32342d3234203d3e203137313339.roa
File:                     3230382e3130332e3135342e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          D9+xkIp3dm/m7j5fQr3BaSokeWcvzslN8yoF0jDMJgU=
Subject key identifier:   1E:78:B7:59:A4:1C:DE:36:71:0C:53:71:89:72:4E:09:40:B3:FE:4F
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       5FEDE2D8F687A2560FD9005FCC1E6A295FF88A45
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230382e3130332e3135342e302f32342d3234203d3e203137313339.roa
Signing time:             Thu 23 May 2024 10:56:10 +0000
ROA not before:           Thu 23 May 2024 10:51:10 +0000
ROA not after:            Thu 22 May 2025 10:56:10 +0000
asID:                     17139
IP address blocks:        208.103.154.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ed:e2:d8:f6:87:a2:56:0f:d9:00:5f:cc:1e:6a:29:5f:f8:8a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: May 23 10:51:10 2024 GMT
            Not After : May 22 10:56:10 2025 GMT
        Subject: CN=1E78B759A41CDE36710C537189724E0940B3FE4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:96:60:76:38:36:a3:22:1a:58:e7:74:a7:8e:
                    d1:56:14:e5:d8:75:f6:b2:be:89:c6:49:40:10:37:
                    2e:f8:22:14:ca:33:5a:80:ca:26:a9:5d:57:e9:a1:
                    6e:1e:57:6d:36:24:9b:02:f1:e9:a7:e7:69:48:f7:
                    be:24:d8:24:6f:b6:d0:a7:5d:7c:a2:c6:01:b5:6f:
                    5a:49:dd:11:48:e9:77:cc:f2:8c:c4:42:f7:8f:5d:
                    94:6a:b9:93:ff:7a:89:fd:d6:de:bf:44:99:70:4f:
                    9e:9d:6e:ab:62:95:15:ff:2d:c1:c5:00:43:7c:9c:
                    b8:2a:96:18:d0:8a:3e:46:b2:1c:e7:cc:ac:44:89:
                    1b:80:ab:81:f6:b5:c4:8d:5e:f9:1b:9b:c5:b3:64:
                    97:31:4f:0c:7e:3f:30:ed:e7:45:72:38:cd:97:63:
                    d2:fb:d2:0f:d6:0c:d9:a2:23:95:1d:8d:bf:85:b5:
                    eb:be:03:4b:03:8b:5c:e8:60:ff:84:c1:7e:48:6d:
                    cf:24:87:e2:16:d3:d8:7e:f5:16:00:cf:ed:f1:bc:
                    33:71:9d:bd:9e:55:53:22:cf:ac:a0:c7:c2:66:52:
                    fb:f0:6f:7a:a5:f4:eb:93:ed:bc:bf:f7:04:13:10:
                    db:80:82:44:0b:ce:9c:de:59:fe:b8:c9:63:8c:8e:
                    46:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:78:B7:59:A4:1C:DE:36:71:0C:53:71:89:72:4E:09:40:B3:FE:4F
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230382e3130332e3135342e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.103.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:51:a3:33:98:31:99:f0:6f:33:bb:4f:25:ec:b1:8c:55:b6:
         0b:f8:fb:64:90:a1:7b:1c:5d:25:1c:22:0a:60:7e:86:dc:7d:
         70:ab:72:85:11:b1:ea:51:a8:5b:4d:e4:3b:29:96:bf:a5:5e:
         9e:92:70:db:b1:04:70:c6:67:ba:9d:87:ba:11:78:6e:8a:81:
         66:17:6c:4e:cd:01:f8:53:81:15:6f:a4:57:b3:34:b9:22:c8:
         75:ef:2a:5e:38:d8:21:d7:d7:ea:3d:4e:7b:2f:1c:29:a6:10:
         81:1b:c1:9c:c0:69:04:a0:f0:cc:ab:c8:db:01:9a:d6:b9:dc:
         1f:c4:7c:f4:bb:4c:03:3e:2f:c2:cb:d2:f9:71:ec:7d:f1:e4:
         8c:1d:37:cf:a8:00:69:3b:bb:f0:08:6a:c3:7d:88:3a:a5:ac:
         6f:ce:45:f3:9a:a5:f2:61:3b:41:87:9b:ec:7a:04:c2:a8:39:
         6c:d8:16:81:d4:5b:b4:53:e3:57:0c:b7:93:e3:97:03:f7:78:
         35:d6:99:f6:be:b1:c2:41:eb:c8:3e:8c:62:83:b6:c9:89:60:
         95:11:9f:f6:cb:2d:26:19:33:e3:7d:79:ff:42:d8:7c:f8:ae:
         0b:a5:d2:e9:b8:e8:0f:ce:27:f8:3b:8a:91:4a:9c:91:5d:51:
         c2:e3:0d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----