Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323033363139.roa
File:                     323630323a666139623a63303a3a2f34382d3438203d3e20323033363139.roa (raw, json)
Hash identifier:          UeQhZZ/vQ7XmcgqDwd1tsrMU3E2CmqS9zyygw8rmqBA=
Subject key identifier:   5E:75:AD:A3:01:87:38:02:E5:FA:F0:13:D6:57:E6:22:C0:F8:5F:1C
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       13E2B9B628F4B9F1EBFA23E079F3A3898CF28FBD
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323033363139.roa
Signing time:             Mon 26 Feb 2024 12:08:49 +0000
ROA not before:           Mon 26 Feb 2024 12:03:49 +0000
ROA not after:            Mon 24 Feb 2025 12:08:49 +0000
asID:                     203619
IP address blocks:        2602:fa9b:c0::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:e2:b9:b6:28:f4:b9:f1:eb:fa:23:e0:79:f3:a3:89:8c:f2:8f:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Feb 26 12:03:49 2024 GMT
            Not After : Feb 24 12:08:49 2025 GMT
        Subject: CN=5E75ADA301873802E5FAF013D657E622C0F85F1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:37:13:4d:8f:8f:1a:4a:22:8b:f5:26:b9:98:
                    aa:0b:1d:b1:b8:e2:5e:a5:e3:56:f0:a4:8b:9a:b9:
                    c8:a7:8f:19:fa:98:4f:b2:4e:9c:ee:49:a1:a7:de:
                    c9:ea:87:36:93:46:a2:50:b4:08:24:45:a5:14:d3:
                    72:0b:3f:37:c3:24:13:29:11:f9:e7:10:70:08:09:
                    54:27:3e:9b:f4:67:50:2e:70:94:4e:41:e2:2f:21:
                    6e:13:67:09:3b:32:99:7f:7b:eb:82:da:67:f0:79:
                    a7:91:7e:ed:cb:52:7c:27:69:56:af:08:d0:e2:3b:
                    26:bd:43:90:c2:ea:07:21:57:c6:ec:d5:5a:b6:00:
                    ed:74:c6:bd:fd:31:ac:24:53:75:11:00:61:25:ad:
                    79:63:0e:de:b1:e9:cc:e3:e8:49:d5:69:f8:38:d7:
                    9f:a1:5f:d0:38:43:c4:4c:93:69:66:43:e4:71:37:
                    46:6d:cd:e9:5c:1a:94:e1:1e:ad:c7:0b:d3:45:0f:
                    ee:a6:39:1c:82:32:37:cd:5e:5e:e8:d9:f6:1a:3a:
                    eb:73:82:28:8e:85:21:ea:55:4f:eb:a5:41:65:c5:
                    ae:97:a3:b6:22:3a:a7:fd:92:36:3b:19:07:d5:66:
                    0e:59:e0:ad:1e:7a:89:51:55:05:99:ea:73:d0:9e:
                    aa:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:75:AD:A3:01:87:38:02:E5:FA:F0:13:D6:57:E6:22:C0:F8:5F:1C
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323033363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:76:90:02:bd:46:0b:f4:fa:17:03:57:8d:99:e9:45:4f:a7:
         60:d9:c8:db:73:3f:6c:c5:5f:f8:92:7c:3e:20:fc:97:55:21:
         d7:4b:61:09:c2:02:57:d1:b0:77:f2:8c:9b:9f:43:6f:3d:5e:
         9c:11:f3:20:5d:b1:0b:15:30:a8:78:e5:b3:12:e9:cc:8e:d3:
         46:7f:2a:d1:6e:5e:e6:44:78:5a:8d:0a:c4:f0:b0:c2:b6:dc:
         9d:17:06:56:7e:9f:4a:52:d5:e9:af:c6:a1:50:a2:ee:35:d3:
         b1:a0:aa:5b:68:61:b9:ee:f6:37:66:f0:18:bc:35:a7:1a:2a:
         52:a5:e2:0e:3b:e2:98:86:06:55:12:d2:e3:b4:bf:ef:bb:bb:
         4d:f1:eb:1d:7c:f6:41:80:5c:db:d9:8c:b4:24:a3:25:93:40:
         19:ca:b7:65:e1:3d:f3:55:bc:9a:ff:58:e1:25:59:c0:4a:6d:
         7f:89:3c:3f:7c:5c:34:34:5c:18:09:06:72:a7:b8:0f:6e:9a:
         97:f7:2a:90:f6:d7:4c:13:77:f4:8b:e5:81:9c:58:ef:f8:5b:
         df:bf:73:dc:33:ef:81:6d:d8:7a:e1:6a:16:37:54:2f:0a:93:
         12:4d:71:86:2c:13:89:4f:29:4a:58:c6:94:b4:20:22:80:18:
         84:fd:a5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----