Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3230392e302f32342d3234203d3e203236383139.roa
File:                     37342e3132342e3230392e302f32342d3234203d3e203236383139.roa (raw, json)
Hash identifier:          gBnVXcQds7FsqOHQXtQiIrNAWuJvxMWQ4TbYWODbpoM=
Subject key identifier:   79:7E:1A:EB:F7:B8:72:A4:31:29:23:FA:78:E3:BA:B4:8A:E1:F3:97
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       1DF44BDBEA2924DF28758CCA445E3633E8E53DC0
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3230392e302f32342d3234203d3e203236383139.roa
Signing time:             Thu 23 May 2024 10:59:12 +0000
ROA not before:           Thu 23 May 2024 10:54:12 +0000
ROA not after:            Thu 22 May 2025 10:59:12 +0000
asID:                     26819
IP address blocks:        74.124.209.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:f4:4b:db:ea:29:24:df:28:75:8c:ca:44:5e:36:33:e8:e5:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: May 23 10:54:12 2024 GMT
            Not After : May 22 10:59:12 2025 GMT
        Subject: CN=797E1AEBF7B872A4312923FA78E3BAB48AE1F397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d5:6b:59:32:8a:7f:7f:bf:fe:4e:67:38:36:
                    28:95:7c:e5:4c:fe:ab:fc:86:db:b0:83:85:ff:d4:
                    89:5a:6f:d8:9e:6c:c2:40:b3:99:63:70:b7:f3:14:
                    74:66:f0:63:0a:1c:dd:89:ee:b7:3f:44:8f:ea:5e:
                    24:7d:6f:ba:80:46:16:fc:f8:6d:fa:dd:de:6a:dd:
                    82:63:44:e4:81:7b:d4:59:85:39:b7:5b:bf:67:da:
                    45:39:1a:b7:dd:1c:d9:54:3f:10:af:4e:40:b1:f3:
                    d0:7e:df:1b:35:ec:69:5c:ac:84:92:0a:a7:56:4d:
                    ed:ea:76:2c:6f:2c:8e:36:4b:a4:29:dd:76:d0:69:
                    32:78:94:85:38:82:42:ac:f6:33:74:a3:b1:9f:aa:
                    f5:00:c8:6d:c9:b8:ab:ff:c5:74:76:01:fa:89:81:
                    3e:8f:1c:84:a6:2f:c7:a9:b0:4a:eb:40:ae:52:d5:
                    ce:d3:4d:fb:6d:0e:16:6f:1f:25:6f:a6:e9:c6:46:
                    49:ca:7e:a0:4a:e2:3c:10:42:55:c7:63:a2:5d:93:
                    ae:76:d9:c7:80:44:92:18:5e:cb:ac:67:73:73:2d:
                    7a:21:02:53:ed:44:44:b1:f6:1d:e0:9b:74:eb:6f:
                    fc:08:b4:41:74:1b:24:78:37:11:77:53:46:8e:95:
                    c9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:7E:1A:EB:F7:B8:72:A4:31:29:23:FA:78:E3:BA:B4:8A:E1:F3:97
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3230392e302f32342d3234203d3e203236383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.124.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:a9:ec:32:a3:68:10:34:7e:51:3c:d5:94:13:6c:d3:dd:ba:
         6f:74:91:fa:61:a9:8d:ad:bb:16:cf:a1:a0:00:2a:1e:10:77:
         ee:a9:57:bf:cc:68:b2:6b:ff:80:7d:3a:9c:0f:ee:79:fc:9a:
         f0:ee:13:83:b0:68:4c:68:85:ea:36:98:54:0a:74:d6:0e:41:
         79:80:91:0a:7c:86:33:f4:fc:ea:fe:a0:1c:3e:9d:f0:68:9f:
         f3:3c:8e:90:c6:71:18:d7:e5:d2:8c:86:f1:c1:96:d6:03:ce:
         bb:29:91:13:f6:98:4f:88:ac:3e:37:af:ed:41:16:ef:b2:c2:
         22:44:bd:54:92:68:60:c5:18:18:16:07:c5:8f:ab:df:e7:36:
         ef:60:7e:09:7d:8f:a7:3b:25:9f:ba:03:e2:77:0b:09:c3:c4:
         57:9d:54:c2:50:ab:af:8b:c7:04:18:f9:79:9a:c4:78:8b:ce:
         9e:41:9d:a6:3a:e3:d6:86:9f:a9:47:b7:69:6c:e1:dd:28:95:
         e2:67:d4:2b:00:a7:52:af:38:0d:cb:9d:e7:d6:31:6b:37:97:
         31:56:8d:01:29:bc:b8:59:9b:61:b2:6f:b7:4b:0d:b3:87:48:
         2b:43:35:82:fe:4c:b5:7d:99:02:c7:da:69:1d:f0:ca:4b:4f:
         bb:4a:96:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----