Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130633a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3130633a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          1ak1HpOMwZgyIgcZZQdKPHFw7N1X1KfZonO9Fsr3F6s=
Subject key identifier:   1C:DE:6D:13:5B:87:F8:E4:79:DA:D1:8B:17:F8:00:84:48:19:A2:82
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       6240DCAD059A67DBCCB1253E0F7BC911B717761F
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130633a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 17 Jun 2024 19:48:58 +0000
ROA not before:           Mon 17 Jun 2024 19:43:58 +0000
ROA not after:            Mon 16 Jun 2025 19:48:58 +0000
asID:                     29802
IP address blocks:        2602:ff62:10c::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:40:dc:ad:05:9a:67:db:cc:b1:25:3e:0f:7b:c9:11:b7:17:76:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jun 17 19:43:58 2024 GMT
            Not After : Jun 16 19:48:58 2025 GMT
        Subject: CN=1CDE6D135B87F8E479DAD18B17F800844819A282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:43:cd:99:36:8f:59:8c:6e:2a:c2:26:72:e6:
                    62:47:4d:18:f3:95:9c:65:3a:f2:67:26:5e:71:ac:
                    3f:c0:4c:bf:43:41:af:b2:b6:34:af:83:7b:f0:5a:
                    e8:31:47:5c:14:c1:44:7f:3e:b7:57:f5:5f:47:a6:
                    3a:56:dc:7b:b7:8e:00:6e:b4:8d:e1:1a:27:42:f8:
                    a6:ea:df:65:d7:cb:21:5d:62:93:74:42:44:2d:76:
                    4a:67:65:88:e4:d5:14:c9:3d:4b:38:ca:19:a4:90:
                    fd:5a:20:d5:eb:c8:fa:8d:6b:26:f9:3f:5f:88:55:
                    bc:df:9e:cd:34:b8:40:23:f0:37:23:95:bf:2d:8e:
                    ce:c0:86:d5:b1:3d:36:d9:1b:6a:b3:76:89:45:9a:
                    96:cc:43:54:aa:ce:b4:9f:4a:d8:73:09:b1:c1:a7:
                    32:f5:c8:12:72:4f:2c:1e:ae:9e:46:a7:70:aa:c6:
                    b9:c0:e1:47:b4:cf:6b:df:28:ef:8b:89:5a:4d:82:
                    19:0d:59:5f:a1:28:ab:bc:30:b7:d4:81:85:c9:e6:
                    ef:38:3e:37:c5:a2:2a:4c:88:1b:d6:1c:20:ba:e4:
                    f8:09:8d:45:9e:bf:f2:5c:cc:f7:d2:30:70:2e:bf:
                    ee:c4:93:4e:25:b9:10:b7:10:c0:b2:dc:a9:34:cd:
                    9d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DE:6D:13:5B:87:F8:E4:79:DA:D1:8B:17:F8:00:84:48:19:A2:82
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130633a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:10c::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:f8:9e:03:30:0c:60:07:b4:19:0f:e5:f0:52:21:d1:26:43:
         90:c4:5b:5b:be:70:a1:08:c3:58:33:0d:e9:b4:21:6e:20:1d:
         fb:b7:3f:74:0d:fa:8a:66:47:8d:e5:af:37:20:c7:8b:9d:77:
         17:88:00:01:d7:0f:d9:40:90:68:0c:7a:1b:93:42:2f:27:28:
         82:7a:d8:3f:8b:5f:f9:9e:e1:02:0e:b2:0a:a4:55:10:9b:d9:
         d2:29:a1:9f:b1:38:df:96:e8:e8:8b:68:f4:59:43:1b:67:fa:
         b6:4f:e5:9e:f3:cb:5b:6c:10:92:51:30:56:f8:bc:8c:0a:82:
         c3:e9:bf:73:8a:07:24:34:f6:de:f9:f9:3c:96:56:38:53:5c:
         b2:1b:2a:0a:f4:c4:35:e1:1c:b2:73:06:50:9e:d8:64:df:7d:
         44:64:76:d0:57:1b:49:b2:0f:26:9b:20:f4:04:56:0a:1b:ae:
         20:62:d5:0b:b4:04:0f:cb:f7:b5:6a:e7:46:1e:1c:20:82:cf:
         8a:99:7c:ba:ee:77:0c:39:2a:b8:8a:9d:a2:91:1e:2b:9f:b7:
         b7:8b:04:21:09:ed:d9:45:c6:79:6e:da:09:37:3f:35:be:1f:
         60:a6:5e:86:84:58:83:16:af:ed:d2:97:97:ea:39:f2:d7:ca:
         9b:bb:6e:cc
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUYkDcrQWaZ9vMsSU+D3vJEbcXdh8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0NmM4NTcyMDhjNTVmYmYxNzBiMzY4YTM0
MGVlZDFiMDY5YjFlM2MxY2MwHhcNMjQwNjE3MTk0MzU4WhcNMjUwNjE2MTk0ODU4
WjAzMTEwLwYDVQQDEygxQ0RFNkQxMzVCODdGOEU0NzlEQUQxOEIxN0Y4MDA4NDQ4
MTlBMjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEPNmTaPWYxu
KsImcuZiR00Y85WcZTryZyZecaw/wEy/Q0GvsrY0r4N78FroMUdcFMFEfz63V/Vf
R6Y6Vtx7t44AbrSN4RonQvim6t9l18shXWKTdEJELXZKZ2WI5NUUyT1LOMoZpJD9
WiDV68j6jWsm+T9fiFW8357NNLhAI/A3I5W/LY7OwIbVsT022Rtqs3aJRZqWzENU
qs60n0rYcwmxwacy9cgSck8sHq6eRqdwqsa5wOFHtM9r3yjvi4laTYIZDVlfoSir
vDC31IGFyebvOD43xaIqTIgb1hwguuT4CY1Fnr/yXMz30jBwLr/uxJNOJbkQtxDA
stypNM2dewIDAQABo4ICuzCCArcwHQYDVR0OBBYEFBzebRNbh/jkedrRixf4AIRI
GaKCMB8GA1UdIwQYMBaAFKWWf7TBcIcaPKREnrmfLuPrevqXMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzMv
QTU5NjdGQjRDMTcwODcxQTNDQTQ0NDlFQjk5RjJFRTNFQjdBRkE5Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2Yzg1NzIwOGM1NWZiZjE3MGIzNjhhMzQwZWVkMWIwNjliMWUzYzFjYy5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGRi
ZDQzMGM4MjJmYS8zLzMyMzYzMDMyM2E2NjY2MzYzMjNhMzEzMDYzM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzIzOTM4MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/2IBDDANBgkq
hkiG9w0BAQsFAAOCAQEAt/ieAzAMYAe0GQ/l8FIh0SZDkMRbW75woQjDWDMN6bQh
biAd+7c/dA36imZHjeWvNyDHi513F4gAAdcP2UCQaAx6G5NCLycognrYP4tf+Z7h
Ag6yCqRVEJvZ0imhn7E435bo6Ito9FlDG2f6tk/lnvPLW2wQklEwVvi8jAqCw+m/
c4oHJDT23vn5PJZWOFNcshsqCvTENeEcsnMGUJ7YZN99RGR20FcbSbIPJpsg9ARW
ChuuIGLVC7QED8v3tWrnRh4cIILPipl8uu53DDkquIqdopEeK5+3t4sEIQnt2UXG
eW7aCTc/Nb4fYKZehoRYgxav7dKXl+o58tfKm7tuzA==
-----END CERTIFICATE-----