Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/323630323a666266313a3a2f33322d3438203d3e20393833.roa
File:                     323630323a666266313a3a2f33322d3438203d3e20393833.roa (raw, json)
Hash identifier:          A9YDAJ36MpptHtbvo0SJ8zkIeZvA+JVTMrXLi/S349I=
Subject key identifier:   38:20:8A:A6:F0:80:0A:54:8E:8D:AD:57:C0:89:63:75:A6:3F:61:F0
Certificate issuer:       /CN=99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775
Certificate serial:       24BF17C222ABC8D0620CABB9F489B7D46BBAB290
Authority key identifier: FD:CC:EA:4A:55:0B:41:E8:52:B3:36:E7:17:92:E5:36:57:E4:F2:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/323630323a666266313a3a2f33322d3438203d3e20393833.roa
Signing time:             Fri 16 Aug 2024 07:03:16 +0000
ROA not before:           Fri 16 Aug 2024 06:58:16 +0000
ROA not after:            Fri 15 Aug 2025 07:03:16 +0000
asID:                     983
IP address blocks:        2602:fbf1::/32 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:bf:17:c2:22:ab:c8:d0:62:0c:ab:b9:f4:89:b7:d4:6b:ba:b2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775
        Validity
            Not Before: Aug 16 06:58:16 2024 GMT
            Not After : Aug 15 07:03:16 2025 GMT
        Subject: CN=38208AA6F0800A548E8DAD57C0896375A63F61F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:44:bf:32:f6:03:f3:34:15:8b:d8:25:1d:7c:
                    bc:67:67:75:12:f0:f7:f9:71:ae:0a:96:57:13:10:
                    6c:9c:c8:9a:71:cf:7e:31:6d:7d:29:42:6d:c9:80:
                    35:60:2b:cf:ed:a9:21:ac:08:53:fd:42:0b:ba:2c:
                    e6:5d:98:d8:07:7e:69:72:e8:6f:32:59:cd:81:70:
                    ae:d6:48:50:d3:b2:e1:01:e9:5c:90:ef:a2:85:de:
                    c2:92:63:12:15:4b:04:1c:77:69:12:86:b9:81:27:
                    77:d9:81:5f:6a:61:2e:9f:4c:e5:6d:87:3f:7c:ce:
                    82:eb:01:17:0a:27:fe:03:e2:98:e3:13:e9:cb:ac:
                    16:6c:3b:4e:a9:28:db:3b:d0:a7:a0:ac:05:0a:8e:
                    df:4a:34:35:3f:a5:9f:72:fc:4b:70:3c:f2:1c:1a:
                    16:79:5c:2f:e3:e7:5d:fb:f3:85:f9:ad:75:8e:9f:
                    9e:41:71:bc:4a:93:0d:b6:2a:2e:ef:e8:fc:01:85:
                    f4:4c:0e:5b:07:4b:0e:b8:66:cc:e7:d4:7a:84:be:
                    59:02:db:5c:bb:3b:1b:d8:cb:33:d5:ba:23:06:6c:
                    fb:0e:ab:65:b9:38:89:c3:52:f0:81:cd:25:78:b8:
                    d1:a3:ff:69:2f:5e:c0:30:40:07:6d:2a:75:46:3b:
                    4c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:20:8A:A6:F0:80:0A:54:8E:8D:AD:57:C0:89:63:75:A6:3F:61:F0
            X509v3 Authority Key Identifier:
                keyid:FD:CC:EA:4A:55:0B:41:E8:52:B3:36:E7:17:92:E5:36:57:E4:F2:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/323630323a666266313a3a2f33322d3438203d3e20393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbf1::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:e6:ce:6f:70:07:f4:64:a7:0e:cf:7e:d8:51:c4:4f:d3:1c:
         24:16:47:d3:da:38:20:12:ed:f0:45:59:7d:67:be:5a:91:a6:
         ae:32:4f:d8:76:7e:51:28:ee:c7:2b:7f:ac:8b:9e:3b:34:2a:
         0e:b8:11:f1:43:23:22:2d:84:0d:a3:20:e0:49:ad:0a:a9:3a:
         15:07:08:bc:c9:75:55:d9:28:3f:c2:0b:5b:e8:64:74:7d:e4:
         38:0c:45:79:21:92:63:c9:10:d5:c3:49:37:b1:37:40:23:ac:
         a1:0b:69:78:57:db:af:c4:4a:0f:91:56:0a:17:48:53:5f:5a:
         31:0e:ce:f2:0d:46:cf:bd:0e:d1:b8:35:ec:2b:d6:6e:b3:9c:
         a8:d4:fe:f2:c3:3a:ce:a0:ed:22:19:e2:87:5c:d5:97:dd:32:
         ec:4d:82:c1:87:25:05:99:b2:d8:d8:16:3a:60:df:f3:bb:5c:
         23:85:fe:62:4a:ee:39:5c:1f:4f:45:72:e9:fe:76:ea:f7:b5:
         e6:29:fe:a1:20:2f:df:1c:a1:18:e4:19:1e:8e:2c:ea:fc:11:
         08:1b:3d:58:72:bf:44:0a:2e:20:b0:2b:68:a5:58:f8:97:be:
         e0:22:42:17:aa:34:35:69:a3:d8:9f:f8:f1:ac:b2:fd:23:e4:
         17:18:3e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----