Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3236303a3a2f34382d3438203d3e203438353939.roa
File:                     323630323a666131313a3236303a3a2f34382d3438203d3e203438353939.roa (raw, json)
Hash identifier:          fw3JPbTGlRkpG/kTz4fV16ojEqlQXgxVc/FG3whofvw=
Subject key identifier:   B3:AD:F2:1F:3E:DB:4D:9C:BC:8F:E2:84:79:3A:EB:1E:BB:17:B1:46
Certificate issuer:       /CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Certificate serial:       22B1A151486436D62624228437FEE6B46EA4BEBB
Authority key identifier: BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3236303a3a2f34382d3438203d3e203438353939.roa
Signing time:             Sat 22 Jun 2024 19:57:33 +0000
ROA not before:           Sat 22 Jun 2024 19:52:33 +0000
ROA not after:            Sat 21 Jun 2025 19:57:33 +0000
asID:                     48599
IP address blocks:        2602:fa11:260::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b1:a1:51:48:64:36:d6:26:24:22:84:37:fe:e6:b4:6e:a4:be:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
        Validity
            Not Before: Jun 22 19:52:33 2024 GMT
            Not After : Jun 21 19:57:33 2025 GMT
        Subject: CN=B3ADF21F3EDB4D9CBC8FE284793AEB1EBB17B146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2a:98:b6:15:1a:7b:ac:3e:3b:31:25:4b:9c:
                    6f:ef:8c:53:b1:21:6f:26:5b:5a:6b:52:12:f9:43:
                    2f:86:a0:02:41:25:39:4b:13:4d:68:c8:c8:53:73:
                    91:e4:c1:0c:2f:73:1a:61:9b:2a:f3:4a:c7:38:32:
                    b8:e8:1a:c5:98:e9:b8:22:b5:ef:4c:af:04:4f:cb:
                    68:96:f1:06:85:45:48:33:56:67:4d:d9:8b:dc:66:
                    76:c9:e6:63:e5:d8:8b:54:ce:4f:d2:1e:45:b5:66:
                    3e:27:33:5e:95:bd:81:03:0f:ff:cf:8a:c7:57:8b:
                    89:04:ac:0e:4a:a8:c6:4a:9d:f7:0e:a8:37:7c:23:
                    89:3c:e3:a1:f3:51:f0:9e:b8:09:0f:1b:97:39:33:
                    95:a4:0f:33:7c:c9:5b:d3:22:02:47:6c:1c:fc:89:
                    df:a0:d3:9f:ef:7d:cb:8a:f5:54:72:07:f4:29:89:
                    1c:cb:e6:6b:94:ec:87:d1:90:c4:cb:4a:a0:b5:81:
                    e9:b5:7c:7a:b8:88:59:89:d7:cd:71:a5:8f:0d:62:
                    f7:16:32:84:75:3d:52:40:2f:92:e5:e2:6b:0e:d0:
                    db:52:20:90:f5:5d:4f:5c:93:98:73:a4:59:67:9c:
                    7b:95:29:cc:4c:7b:8d:ea:ae:b9:e9:4e:9a:57:ce:
                    b3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AD:F2:1F:3E:DB:4D:9C:BC:8F:E2:84:79:3A:EB:1E:BB:17:B1:46
            X509v3 Authority Key Identifier:
                keyid:BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a3236303a3a2f34382d3438203d3e203438353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa11:260::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:81:7b:4d:43:22:da:23:59:4f:1f:7d:f8:8d:4b:10:8f:2a:
         e4:89:d7:02:de:5a:56:1c:69:fa:a2:da:25:5c:36:cd:69:67:
         12:d1:68:32:89:4f:14:27:aa:20:cc:27:42:1c:f8:97:f6:db:
         bd:1c:0f:7d:71:f9:6c:b1:13:b6:a2:1f:d4:85:29:eb:b7:63:
         eb:88:4e:a3:07:b7:1e:c7:59:ac:0c:11:28:16:b5:94:4b:99:
         c7:bc:ba:e5:78:f6:4f:ec:c8:dc:7e:3b:bf:44:f1:fa:ce:c6:
         f4:52:33:4b:43:5d:11:0a:c6:a1:fc:cc:60:9c:05:30:f2:49:
         2e:e0:63:f6:9c:8f:9b:96:32:76:a6:84:2f:ef:86:35:c0:34:
         1b:cb:ab:05:43:72:8c:2a:cd:03:fc:f8:b6:c9:b9:9d:ac:e1:
         16:49:14:e0:f6:c0:4f:ec:c7:bd:db:ce:c8:ef:e5:9e:bc:84:
         70:7c:8f:06:41:de:5e:16:82:2a:fc:49:c5:0a:f3:0b:48:5b:
         c4:43:d7:ed:d9:d4:5a:8c:7f:a0:80:dc:45:04:6b:11:45:52:
         f4:6f:ce:f0:7d:02:fb:6f:c6:75:a6:4d:64:f9:34:e3:b3:55:
         36:b0:95:71:0a:dd:d5:3a:2a:c7:30:35:95:9b:17:02:14:0b:
         26:b9:bb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----