Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf909475a601909d1f7ab0086d/0/32332e3138302e3230302e302f32342d3234203d3e203534323831.roa
File:                     32332e3138302e3230302e302f32342d3234203d3e203534323831.roa (raw, json)
Hash identifier:          /dghH5zpTMYvRLNISpEKUEIlfmLXUw05UhavEpuekxU=
Subject key identifier:   E6:E7:1A:D8:2C:A4:74:F1:FE:A1:F1:37:B0:90:EF:E0:56:F7:AE:4A
Certificate issuer:       /CN=cfc9610f63945ca5286e680797a623da5f98de48b7d31072da
Certificate serial:       394D54244CD3CCDD5DA3D46F491D8654FA296676
Authority key identifier: F6:22:BF:15:53:F5:E7:14:50:E4:59:B6:2F:E5:25:08:49:8B:29:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/18991ace-3e88-491f-b286-e1996e753c3d/cfc9610f63945ca5286e680797a623da5f98de48b7d31072da.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf909475a601909d1f7ab0086d/0/32332e3138302e3230302e302f32342d3234203d3e203534323831.roa
Signing time:             Sun 21 Jul 2024 16:56:40 +0000
ROA not before:           Sun 21 Jul 2024 16:51:40 +0000
ROA not after:            Sun 20 Jul 2025 16:56:40 +0000
asID:                     54281
IP address blocks:        23.180.200.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:4d:54:24:4c:d3:cc:dd:5d:a3:d4:6f:49:1d:86:54:fa:29:66:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfc9610f63945ca5286e680797a623da5f98de48b7d31072da
        Validity
            Not Before: Jul 21 16:51:40 2024 GMT
            Not After : Jul 20 16:56:40 2025 GMT
        Subject: CN=E6E71AD82CA474F1FEA1F137B090EFE056F7AE4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:01:fb:ee:5a:34:42:22:5d:22:58:f8:82:f7:
                    a7:ff:28:61:b6:4b:9b:02:2f:ca:80:c9:68:74:37:
                    26:90:bd:66:bc:35:92:a6:9a:08:69:25:fe:87:cd:
                    8d:e1:38:25:0e:f4:e7:04:a0:14:1b:7d:30:4a:df:
                    1e:d8:13:1d:45:17:5c:f4:46:49:8d:eb:bb:15:77:
                    10:82:d2:62:04:d3:8e:93:31:3f:80:84:8e:24:b7:
                    15:be:6d:c7:6b:2b:18:c0:7a:c0:fc:83:bc:32:28:
                    ae:88:cf:58:e1:c5:d4:57:d0:a6:18:66:1d:05:75:
                    a4:14:78:6b:a4:f9:93:35:c6:a0:a4:54:ac:4a:ed:
                    26:14:2d:f4:ae:9e:2f:74:39:91:64:16:db:b6:b4:
                    5b:04:a1:42:68:6d:c8:6d:ab:90:fa:09:f9:78:fd:
                    8a:b4:90:53:34:70:f2:45:e2:6f:d1:ad:62:cd:61:
                    3d:3b:b5:5d:06:d8:eb:06:ff:4b:2f:0c:bd:a5:ad:
                    62:db:cc:bc:35:91:83:76:39:61:da:f7:28:fd:89:
                    70:8b:46:2c:0f:31:68:1e:61:ea:85:f9:12:d7:af:
                    66:94:c2:d3:fc:d4:32:a2:70:d9:b7:67:1d:91:32:
                    95:c2:a3:9b:f0:66:36:07:42:ed:5e:17:1c:97:d3:
                    ff:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E7:1A:D8:2C:A4:74:F1:FE:A1:F1:37:B0:90:EF:E0:56:F7:AE:4A
            X509v3 Authority Key Identifier:
                keyid:F6:22:BF:15:53:F5:E7:14:50:E4:59:B6:2F:E5:25:08:49:8B:29:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf909475a601909d1f7ab0086d/0/F622BF1553F5E71450E459B62FE52508498B2925.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/18991ace-3e88-491f-b286-e1996e753c3d/cfc9610f63945ca5286e680797a623da5f98de48b7d31072da.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf909475a601909d1f7ab0086d/0/32332e3138302e3230302e302f32342d3234203d3e203534323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.180.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:e5:6f:c1:38:4b:92:8a:76:c4:96:1d:17:bc:9b:00:af:9a:
         9e:de:2e:08:4d:ec:00:56:08:2a:21:64:7e:c0:d7:92:28:ad:
         e6:94:fd:ce:55:c6:6a:1f:e2:be:ab:0c:a1:5b:70:ed:02:48:
         2b:6a:f3:12:61:80:9e:25:39:f1:54:66:22:de:be:7e:17:42:
         9c:db:c3:74:8e:78:ec:17:0e:3f:10:a4:10:f9:9d:f8:95:90:
         eb:7a:3a:c2:c8:91:63:e4:3d:9a:3d:12:a0:9f:11:a7:74:48:
         13:c2:c9:10:14:fd:bd:0a:8b:79:fc:b0:e1:aa:c0:dd:ba:61:
         55:02:d7:ed:0e:4f:9c:6f:01:50:96:68:35:e1:85:5c:1e:89:
         37:18:67:aa:80:77:59:35:97:63:b6:e2:46:6d:72:44:db:e0:
         1d:1b:73:33:da:14:ce:cc:f7:1a:57:2a:d7:cf:30:a7:f4:eb:
         71:dd:74:91:28:26:38:a8:cc:3d:7b:ac:d9:1f:a2:26:03:8f:
         bc:f0:d1:a8:27:b8:a0:35:5e:aa:b9:e8:81:ca:80:52:93:69:
         3b:24:d6:29:41:4e:33:f0:98:67:78:c7:75:4d:c5:3f:29:1d:
         eb:01:6e:d0:58:23:83:40:0a:77:0c:28:5a:c3:53:8e:55:57:
         56:b7:c4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----