Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e203539363738.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e203539363738.roa (raw, json)
Hash identifier:          fxdJc6BW3vYxjzB8vF3bIEgemMcOnWx/+sReW0yBvpo=
Subject key identifier:   83:FB:A9:D6:B1:A9:4C:6A:95:0A:93:19:3A:D4:D5:F7:55:A5:7B:65
Certificate issuer:       /CN=412292C0E24D8885B4760BC708F9E477870D9C70
Certificate serial:       32BEFA2B70B1A5BB22616E8CB9952109A0D353C7
Authority key identifier: 41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e203539363738.roa
Signing time:             Mon 26 Feb 2024 12:08:52 +0000
ROA not before:           Mon 26 Feb 2024 12:03:52 +0000
ROA not after:            Mon 24 Feb 2025 12:08:52 +0000
asID:                     59678
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:be:fa:2b:70:b1:a5:bb:22:61:6e:8c:b9:95:21:09:a0:d3:53:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=412292C0E24D8885B4760BC708F9E477870D9C70
        Validity
            Not Before: Feb 26 12:03:52 2024 GMT
            Not After : Feb 24 12:08:52 2025 GMT
        Subject: CN=83FBA9D6B1A94C6A950A93193AD4D5F755A57B65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:07:5e:ac:17:ed:ad:14:4d:c9:ad:cf:22:
                    19:a3:85:f1:82:04:ab:27:9c:ab:4a:17:7d:c0:b6:
                    cc:7f:97:22:03:d6:eb:e1:55:5f:52:4f:9f:32:34:
                    1b:5a:69:98:5f:c6:15:03:af:7a:4f:38:da:3b:90:
                    da:bd:34:56:f8:9a:8f:ba:02:85:0e:75:9e:b3:a5:
                    67:ca:c5:34:e5:71:cd:c9:f2:07:d9:28:00:d1:15:
                    a5:a8:1e:90:12:a0:86:a9:33:d4:e6:57:82:bf:9d:
                    9a:70:1b:68:48:3c:c3:19:70:d8:4d:9d:c7:3e:be:
                    24:a8:cd:38:d0:3f:cd:81:81:ce:2e:68:9d:4b:3d:
                    f7:88:f9:60:ef:93:e8:3d:ba:16:f1:0e:11:22:6f:
                    61:da:82:c5:67:a6:eb:21:c4:4b:20:7a:43:92:f1:
                    bc:a9:16:13:ca:6e:4e:98:d3:f0:0f:d3:31:14:61:
                    9b:29:02:a4:41:73:a6:8f:a1:36:1c:5c:36:95:69:
                    6e:48:cf:e3:47:de:13:22:8a:11:e0:4c:e1:2b:0c:
                    c1:96:2f:88:99:6b:8a:c4:b7:41:e9:62:2d:bd:a8:
                    bc:6e:a9:87:b0:e6:ae:7d:40:59:ff:88:3a:f6:c9:
                    53:ee:69:a9:6a:97:e8:82:1a:77:95:73:4c:8d:57:
                    73:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FB:A9:D6:B1:A9:4C:6A:95:0A:93:19:3A:D4:D5:F7:55:A5:7B:65
            X509v3 Authority Key Identifier:
                keyid:41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/412292C0E24D8885B4760BC708F9E477870D9C70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e203539363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:ca:88:ea:41:35:50:a1:2b:d9:c9:47:6f:d6:c7:41:03:80:
         5f:b3:4b:fa:59:1b:9a:d4:00:be:8a:3b:b5:2e:1e:13:79:78:
         6d:e5:44:d3:25:8c:dc:7a:19:a9:85:6e:cd:01:2d:52:d7:59:
         32:78:63:34:ef:e2:55:46:6d:15:12:fb:27:2c:f7:98:ba:e0:
         53:b3:3a:bd:1e:c0:0e:24:94:8c:56:85:17:a6:c6:ec:e7:fe:
         80:8d:ce:d4:35:df:f0:ef:f9:26:35:a5:45:e5:f7:ed:46:96:
         12:f5:b3:83:ab:55:cb:8d:52:44:e1:2c:5f:d8:bb:a2:54:77:
         4b:cd:90:fb:8c:a4:f4:b0:95:76:00:cc:2e:86:4d:6f:5b:c2:
         83:9e:75:d2:93:33:ba:fb:f0:fc:88:b2:cd:7e:96:8e:d0:0d:
         89:31:cb:ff:9d:5b:f3:d8:c8:ad:12:3e:dc:d4:a7:a8:74:5b:
         80:c3:38:0d:1b:bb:5a:94:b7:23:b9:24:c1:17:46:23:d0:fa:
         20:dc:c7:9e:7f:54:71:44:a9:74:ce:9d:d0:da:07:67:84:94:
         89:79:8b:5e:f9:9b:28:60:4b:72:58:1b:51:f4:50:6f:29:75:
         ac:22:05:b0:2c:35:c0:60:75:7c:76:1e:82:e1:96:b3:34:0e:
         38:87:c5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----