Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3232302e302f32322d3234203d3e20323132323338.roa
File:                     37342e3132342e3232302e302f32322d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          T2B25ViWeMLYlf/4N+zC4RhxLYxhR+YJBMBaa11oAoQ=
Subject key identifier:   4B:37:A1:2A:88:F5:42:CC:D7:04:57:A9:82:95:03:AF:60:93:A4:51
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       7213E062FCAEBA087F1AFDE856992EC403A80E80
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3232302e302f32322d3234203d3e20323132323338.roa
Signing time:             Sun 15 Sep 2024 05:52:06 +0000
ROA not before:           Sun 15 Sep 2024 05:47:06 +0000
ROA not after:            Sun 14 Sep 2025 05:52:06 +0000
asID:                     212238
IP address blocks:        74.124.220.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:13:e0:62:fc:ae:ba:08:7f:1a:fd:e8:56:99:2e:c4:03:a8:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Sep 15 05:47:06 2024 GMT
            Not After : Sep 14 05:52:06 2025 GMT
        Subject: CN=4B37A12A88F542CCD70457A9829503AF6093A451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:03:80:f6:c8:0a:54:47:9f:0e:0c:10:f7:e2:
                    cb:63:59:f6:2a:3b:2d:7d:62:5f:36:24:d0:f7:2f:
                    d9:e4:33:41:c6:40:36:b0:77:9e:06:a8:d2:69:05:
                    55:24:f9:87:b5:49:02:2d:2e:89:af:b3:64:b0:82:
                    92:35:a7:c2:22:00:64:ee:85:33:39:6a:3d:97:6b:
                    ec:e4:46:41:4f:f0:2f:12:8d:6d:34:e6:e2:c6:27:
                    b8:26:7a:8c:23:fd:ec:02:ff:f2:ee:79:ff:3b:0a:
                    fc:e6:45:af:ec:85:f4:54:9d:9b:72:03:2c:22:67:
                    47:14:29:64:22:e4:ab:2e:e6:80:41:db:80:6d:3e:
                    09:bc:f3:56:ca:93:6f:eb:4c:ea:fe:88:30:c9:0f:
                    6e:5c:31:0d:2f:c0:02:27:f7:24:c7:ed:ce:9d:03:
                    4e:b4:f8:2c:33:a3:8e:04:ba:fd:d9:72:66:41:ee:
                    f4:bb:07:2c:b4:92:d8:8b:c9:b2:f3:2e:e9:20:e1:
                    c9:d4:e2:64:2c:3f:34:0e:5a:3e:f2:63:bb:2b:7b:
                    ed:92:4e:2c:89:54:26:66:fa:1e:cf:f0:92:85:f5:
                    73:1e:90:75:d0:77:bd:b0:52:66:c1:bc:f6:b0:86:
                    4d:f9:a2:53:4b:a4:83:20:5d:40:8e:72:ef:af:6c:
                    ff:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:37:A1:2A:88:F5:42:CC:D7:04:57:A9:82:95:03:AF:60:93:A4:51
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3232302e302f32322d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.124.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:ae:c1:1f:90:81:41:ae:04:2f:26:0c:53:67:19:36:31:73:
         d5:90:0c:a9:43:7c:a8:5b:f6:78:31:0f:08:47:50:d4:6f:a1:
         f0:0d:65:88:76:94:cd:77:91:b9:4f:7a:77:87:27:5f:92:ae:
         b1:d3:ee:e5:0d:17:d1:fc:83:e7:26:96:67:7c:4b:b6:9a:22:
         c3:54:3d:cc:b8:28:01:db:3a:10:5d:dc:b4:a4:c1:a5:87:60:
         6d:24:c0:b5:7b:e3:c1:3b:e4:3c:f8:4c:23:0b:bb:05:66:70:
         aa:e7:e8:21:4f:2b:b6:be:9b:16:9e:89:b2:b2:4a:44:55:e6:
         a1:89:ec:48:a7:75:a7:ba:30:54:a7:27:09:6f:00:f0:4a:cd:
         a5:98:c7:36:ff:17:d7:30:1b:b1:6f:d2:46:06:b1:0b:7f:c5:
         d7:36:54:fb:64:18:f9:8e:f9:57:54:fc:12:42:d6:42:38:0b:
         e5:e4:d0:19:26:78:1d:47:64:9e:44:56:88:00:db:63:2a:d8:
         7d:12:fb:67:be:b2:bd:cd:7e:f7:6f:59:09:ff:fd:d3:dd:e0:
         21:39:a9:6d:e3:60:df:42:14:1d:5f:1f:bf:de:22:27:47:e8:
         73:ae:e4:5b:a2:f7:21:58:63:61:ee:5f:1e:ad:e6:eb:30:fd:
         07:f7:fa:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----