Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130613a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3130613a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          5dgjONuNAFA1BtxPeRDaBGM7j1ABqeHRFjf1tVl0IO0=
Subject key identifier:   6F:6A:CE:2F:25:B6:0F:9F:78:12:DC:D8:15:DF:F2:40:F0:74:29:BF
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       3444A18876671ACA191E077EAED20E059C787150
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130613a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 17 Jun 2024 19:48:58 +0000
ROA not before:           Mon 17 Jun 2024 19:43:58 +0000
ROA not after:            Mon 16 Jun 2025 19:48:58 +0000
asID:                     29802
IP address blocks:        2602:ff62:10a::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:44:a1:88:76:67:1a:ca:19:1e:07:7e:ae:d2:0e:05:9c:78:71:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jun 17 19:43:58 2024 GMT
            Not After : Jun 16 19:48:58 2025 GMT
        Subject: CN=6F6ACE2F25B60F9F7812DCD815DFF240F07429BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:02:66:7f:50:7f:5b:75:e9:bf:7b:41:ab:c2:
                    b1:42:b8:4a:b4:27:52:83:eb:9f:67:ab:2b:60:32:
                    33:51:05:19:13:4e:30:20:bc:af:3b:91:75:05:fc:
                    f8:ab:d8:0e:3c:b3:99:27:94:ef:7d:c3:22:eb:14:
                    f5:c0:b6:7b:e8:3c:4b:6b:88:d7:66:69:f5:f3:77:
                    a2:4e:3e:ee:26:46:5e:ea:ad:ff:89:b5:5e:33:dd:
                    6c:a2:70:a1:55:62:d6:e6:ce:fd:e1:f3:39:6d:1f:
                    b2:cb:57:24:91:ea:79:a7:ce:e9:f1:e8:83:f5:1b:
                    c9:5d:a5:61:35:5f:37:90:4a:a4:a3:80:8a:eb:3a:
                    d8:36:ba:04:d2:5b:78:56:9f:8e:55:2a:3d:e7:fa:
                    13:f7:8b:82:0a:8f:55:c1:25:74:36:1f:08:bd:18:
                    e3:34:d8:c7:ad:22:42:ca:2d:b8:bc:03:c4:4d:ba:
                    06:44:64:70:dd:e5:60:57:ff:ec:9e:55:2b:59:52:
                    99:0f:30:e7:0f:f8:72:fb:b6:92:5c:c2:59:17:de:
                    6a:21:d5:5b:b5:22:16:49:cc:93:1a:3c:37:d8:12:
                    e2:d3:3b:eb:31:60:5f:10:42:94:f4:3e:89:bf:7c:
                    4a:c7:95:2f:d4:ea:13:de:4f:1e:c6:62:4e:1f:df:
                    52:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6A:CE:2F:25:B6:0F:9F:78:12:DC:D8:15:DF:F2:40:F0:74:29:BF
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130613a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:10a::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:3a:0f:ec:ee:f1:5c:47:b8:da:cd:6d:19:db:0c:73:b7:e1:
         32:35:a2:99:02:8e:ad:b4:d0:8c:68:21:84:c8:52:b4:26:5c:
         e9:0b:09:44:58:77:57:ac:d0:9c:91:fa:1b:5c:95:c1:b2:b7:
         2f:c0:bd:7c:8b:cf:e1:0d:e3:12:f9:8e:66:cd:09:b0:80:71:
         8f:aa:00:ec:a4:81:d3:fc:0b:82:b5:8b:0b:b9:9e:51:fd:b2:
         57:c7:59:f1:f0:bc:e4:9c:93:e6:47:e7:0e:83:98:f7:bb:93:
         4a:43:86:78:18:81:b2:c3:32:a1:a6:6c:6b:ac:eb:61:1e:41:
         87:0a:3d:47:0e:5d:42:e8:58:92:87:0c:55:b3:91:7c:54:7a:
         57:03:b4:56:25:23:45:12:48:1b:e7:77:8f:7e:f4:c0:5a:ba:
         98:f4:11:81:3c:f1:c4:e5:e6:0b:b9:30:57:44:8d:82:d1:65:
         7e:ff:66:9a:e3:d6:de:cf:cb:95:ae:78:de:30:3d:5e:3a:51:
         af:72:f6:34:ff:11:a9:19:6e:30:fb:48:5a:e2:ea:12:f1:f0:
         42:f2:5f:28:db:b2:b3:fe:c2:7c:e8:5b:3c:49:b3:f3:38:17:
         35:36:39:b8:fb:e3:66:8f:fc:cb:2b:9b:4b:5f:0e:8d:fb:59:
         ff:ee:47:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----