Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e31332e302f32342d3234203d3e203137313339.roa
File:                     36362e3131372e31332e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          +7R7Qvcldj+eSU3eiTfk9e2yPMrFtMxCvBDdlxBn/Ao=
Subject key identifier:   5D:C3:4F:86:00:2A:39:22:6A:D9:43:2C:2C:7C:83:EC:F6:D7:A6:1A
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       7203A9D59473E9BA7C1ECE1F8AF1ABE68253C80B
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e31332e302f32342d3234203d3e203137313339.roa
Signing time:             Thu 23 May 2024 11:08:12 +0000
ROA not before:           Thu 23 May 2024 11:03:12 +0000
ROA not after:            Thu 22 May 2025 11:08:12 +0000
asID:                     17139
IP address blocks:        66.117.13.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:03:a9:d5:94:73:e9:ba:7c:1e:ce:1f:8a:f1:ab:e6:82:53:c8:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: May 23 11:03:12 2024 GMT
            Not After : May 22 11:08:12 2025 GMT
        Subject: CN=5DC34F86002A39226AD9432C2C7C83ECF6D7A61A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6c:82:ee:6b:22:21:c4:7b:e8:f9:b8:bd:b1:
                    51:a7:ea:57:bb:29:f0:0d:4b:85:7d:6b:43:d6:fb:
                    a4:a8:62:17:d6:0b:a4:d0:1a:5e:89:e1:bd:09:7e:
                    c1:51:1c:0d:14:20:c7:3c:03:8e:cc:ec:c4:38:7a:
                    5e:a4:5f:14:27:65:61:6e:c4:3f:39:91:5b:2f:1c:
                    00:30:2a:20:bd:a6:04:eb:23:40:eb:ef:f4:3f:5e:
                    99:68:1c:c4:e0:a8:a6:89:84:ab:db:94:6c:41:82:
                    9a:7f:e7:85:a6:05:35:4e:35:ee:40:48:6e:19:dc:
                    6e:e2:39:6d:48:a5:59:8d:15:f6:02:82:d4:7a:f7:
                    d3:1b:17:f2:52:d5:db:af:a0:1d:4b:c9:16:65:49:
                    8e:90:ea:69:46:c2:7e:7c:10:5f:99:48:49:a6:1e:
                    37:a9:0e:35:f3:b9:b5:b9:9a:63:d9:89:0f:8a:2b:
                    81:81:31:c6:0b:8b:12:dd:27:9b:2d:cd:07:a9:75:
                    c2:0e:a5:3f:71:de:26:ff:45:ca:7b:c0:41:79:a3:
                    0a:eb:a6:f0:e5:1a:13:b6:02:27:e9:24:41:7d:b3:
                    da:cd:84:ec:e4:1c:84:46:75:17:cb:45:42:80:10:
                    d9:70:3c:b2:74:32:85:51:9a:58:61:e5:2c:2f:87:
                    f5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C3:4F:86:00:2A:39:22:6A:D9:43:2C:2C:7C:83:EC:F6:D7:A6:1A
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e31332e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.117.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:0d:a6:75:c0:54:f7:b4:c2:15:48:72:14:bc:d3:ba:37:ff:
         06:19:c8:c5:5e:55:95:c1:44:74:ae:00:32:95:ec:0a:30:fd:
         1d:dc:a6:9e:f8:54:21:82:ad:6b:bb:23:08:cd:d7:c3:c0:bd:
         cb:b0:32:06:21:4e:83:17:5c:29:70:54:16:31:1f:7d:f8:0e:
         9f:c5:60:6b:dd:bd:1b:0a:25:1c:bf:e1:a5:30:e8:63:7f:1c:
         cc:42:f5:4d:d7:fc:66:17:49:b2:08:00:14:4e:75:5a:f5:29:
         09:7e:80:e9:e4:f0:b8:81:4d:eb:b1:b8:a3:4c:70:36:95:8b:
         75:cd:e8:4e:9a:a1:87:6c:1b:e9:5e:d1:5e:ab:e6:ca:ca:f8:
         a8:67:9a:ea:4d:f3:79:5e:76:44:35:01:f2:53:ac:0d:25:72:
         ce:25:05:82:7c:45:fe:7f:99:f4:14:80:ba:ea:8a:cb:10:e6:
         c5:d8:37:4f:60:02:84:2a:4b:87:46:80:d4:40:d8:0c:a1:6d:
         33:ed:f7:1f:a0:e8:7e:1a:ef:cf:1f:ac:eb:f4:23:17:28:5c:
         5b:00:26:d3:b4:f6:b0:e4:d0:0f:39:00:37:c9:a0:6a:34:da:
         03:68:96:85:79:36:98:3a:c9:83:88:11:fa:81:2f:ab:37:f5:
         60:af:16:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----