Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e312e302f32342d3234203d3e203137313339.roa
File:                     36362e3131372e312e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          oXrA/77vAqId/F95vl608ZT6uwzINOItAdduBHQpT8o=
Subject key identifier:   25:9B:B3:B1:56:46:17:55:C3:2D:27:6D:DE:E8:9C:C8:6A:71:36:B9
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       A5F467EF4A91F14457300D1A588F752435CA5F
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e312e302f32342d3234203d3e203137313339.roa
Signing time:             Thu 23 May 2024 11:07:57 +0000
ROA not before:           Thu 23 May 2024 11:02:57 +0000
ROA not after:            Thu 22 May 2025 11:07:57 +0000
asID:                     17139
IP address blocks:        66.117.1.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a5:f4:67:ef:4a:91:f1:44:57:30:0d:1a:58:8f:75:24:35:ca:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: May 23 11:02:57 2024 GMT
            Not After : May 22 11:07:57 2025 GMT
        Subject: CN=259BB3B156461755C32D276DDEE89CC86A7136B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:70:18:87:65:e8:90:cd:b5:ef:bd:3f:42:43:
                    b5:e5:0e:f0:5f:fc:b3:fd:85:e8:91:de:b5:0f:35:
                    d4:6b:f8:b2:6e:16:94:22:c6:a3:cc:56:6e:f9:15:
                    13:2b:40:e8:7e:96:84:47:20:ec:11:65:67:f8:68:
                    89:f5:80:5f:6f:9f:59:c9:4d:f4:15:e7:0a:1e:fc:
                    ef:05:60:37:78:bb:b0:32:21:ac:11:be:19:3a:16:
                    5a:8f:0c:86:29:5d:77:26:04:9f:2d:fe:76:42:be:
                    0b:41:1f:49:ea:41:d9:e8:7e:39:a2:86:c6:02:9d:
                    2c:5a:49:2e:c6:71:c4:92:fb:bf:1a:1a:d5:14:51:
                    61:6f:01:a0:ef:34:5b:a9:8f:b3:00:38:bb:20:d7:
                    de:e8:5f:9a:d8:d3:86:14:a2:11:81:97:51:f2:e8:
                    9f:fe:54:18:3b:40:f0:96:19:09:7b:41:95:1d:2a:
                    49:3b:ff:d6:36:23:b5:ea:7b:65:bf:f5:95:fc:53:
                    2b:0f:32:90:48:16:58:1d:78:8c:61:0a:1c:95:83:
                    59:54:cd:c4:c6:95:4c:fe:f0:64:ed:5a:90:8d:58:
                    4f:96:6e:5e:8e:62:f6:f8:2d:9a:cd:a3:ba:96:85:
                    92:8a:90:fc:82:34:9d:2c:a4:3e:1f:02:e3:f1:86:
                    75:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9B:B3:B1:56:46:17:55:C3:2D:27:6D:DE:E8:9C:C8:6A:71:36:B9
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e312e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.117.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:25:ec:83:6f:3f:87:21:3f:76:1c:09:cd:76:47:6e:02:94:
         6b:da:f2:df:a4:36:f4:ef:ee:0e:98:a4:a5:13:42:a7:80:18:
         f9:10:a4:2d:eb:15:93:ed:97:50:28:e8:65:7d:1f:8d:1f:71:
         6c:88:c9:aa:f2:9e:2a:64:ab:2a:6e:2a:c1:4b:62:94:2e:17:
         61:db:85:9f:a9:0a:ae:47:03:3e:0c:43:fa:87:67:58:35:ca:
         2d:90:1b:7d:da:1a:38:56:0f:3d:f7:bd:de:40:a0:0a:60:0a:
         fe:86:28:c6:07:31:81:a3:e2:6d:1a:a6:3c:47:f9:bf:31:3f:
         62:82:f7:9c:f1:c2:eb:c6:2f:b5:29:4b:27:a7:df:10:aa:c5:
         52:16:c2:d6:60:03:86:1c:93:c9:69:70:7f:4a:df:f6:70:c7:
         ae:9b:a3:9e:90:4e:de:87:83:a3:8f:c5:58:9d:35:bf:a6:8e:
         7b:54:21:3a:92:a8:97:58:08:24:01:e7:8b:f2:f5:34:ed:a1:
         b7:5f:b6:9d:19:5f:24:a5:7e:82:59:a3:77:9b:a6:b3:47:fe:
         03:b9:4c:0e:40:c5:5b:8c:d8:78:5e:91:41:45:ef:f5:c4:2d:
         75:e4:ff:cb:56:7c:4d:c4:5a:38:2c:40:2b:80:90:e7:6e:80:
         b9:cb:0b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----