Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130663a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3130663a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          8vRuVM2PtIs9ODXOdzvVV0vjVTCzq+8kCXnu1kJITSQ=
Subject key identifier:   A1:E0:E8:95:00:0D:02:A3:8C:DB:88:80:EE:BD:6B:9E:B3:EF:B2:99
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       375CE737A99611A57CE60912A810337B7E76C658
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130663a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 17 Jun 2024 19:48:58 +0000
ROA not before:           Mon 17 Jun 2024 19:43:58 +0000
ROA not after:            Mon 16 Jun 2025 19:48:58 +0000
asID:                     29802
IP address blocks:        2602:ff62:10f::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:5c:e7:37:a9:96:11:a5:7c:e6:09:12:a8:10:33:7b:7e:76:c6:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jun 17 19:43:58 2024 GMT
            Not After : Jun 16 19:48:58 2025 GMT
        Subject: CN=A1E0E895000D02A38CDB8880EEBD6B9EB3EFB299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b7:3e:da:7d:26:15:4a:71:34:36:a7:f4:c2:
                    24:13:ac:eb:97:26:62:41:63:a6:1e:31:51:c9:f1:
                    b5:36:07:74:b3:89:de:9a:63:24:c2:b3:f9:9d:08:
                    e2:64:6d:cf:df:28:2c:f8:3c:4b:41:df:a9:fc:b3:
                    ed:2e:31:fa:19:5e:54:67:86:9c:78:1a:11:6e:76:
                    17:e2:89:6b:b3:05:1d:77:3c:a7:8b:2d:b2:da:0d:
                    73:a2:b6:1b:46:89:4a:fc:06:c2:52:e6:0b:e8:93:
                    c8:5d:16:f1:01:b8:09:b7:c2:f6:29:0d:55:33:bb:
                    0f:1d:2c:38:b8:a3:51:84:06:36:ba:36:e5:55:bc:
                    6c:e7:bd:3c:8d:09:fc:80:73:b5:3b:9d:d2:08:c1:
                    3e:61:be:50:0f:63:8b:23:fe:d5:e6:11:1b:ac:cc:
                    8d:32:80:89:35:ad:c8:0a:86:5f:af:eb:60:41:ef:
                    44:45:14:c1:23:9c:60:d5:cf:e4:59:6a:31:b8:91:
                    f4:66:88:dd:79:1a:8d:8f:e0:6e:06:c3:71:49:47:
                    04:c5:7d:59:49:a7:82:ac:c1:7f:16:73:cf:ed:c8:
                    13:70:6b:24:9a:c2:6b:d9:54:4e:b6:a5:2d:97:34:
                    86:13:aa:4a:4c:35:ba:56:17:38:c6:97:74:e4:af:
                    8c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E0:E8:95:00:0D:02:A3:8C:DB:88:80:EE:BD:6B:9E:B3:EF:B2:99
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130663a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:10f::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:bd:84:f5:0b:27:75:f6:81:fa:11:7a:9e:1d:6d:fc:e7:8f:
         6c:64:67:00:f8:fe:dc:3c:52:8a:b4:25:93:05:21:2d:2f:45:
         fa:54:0b:f2:7b:7f:4e:05:7b:e2:17:fd:30:53:60:03:16:33:
         2e:05:1b:20:c9:cd:61:03:56:11:de:c1:23:93:26:26:31:4f:
         11:19:db:65:98:5b:7b:1b:70:a0:51:c8:f5:f8:f8:5e:c8:3c:
         9d:00:8c:0e:ac:cc:11:23:f5:ef:96:76:2b:9d:17:58:a3:37:
         f4:97:3a:56:c4:5e:a6:20:14:9e:c5:0c:84:9c:1c:fd:36:bf:
         6a:ca:11:26:d5:7e:ae:19:c1:be:58:ef:d4:09:8f:29:7e:ac:
         8d:f3:2b:b5:86:44:e6:2f:ee:64:fd:14:f8:32:48:77:9d:fc:
         b0:af:03:95:32:fb:bb:30:d5:f7:77:22:d1:86:53:02:a3:10:
         42:49:e4:b3:a9:c5:21:a6:9b:f9:4b:f9:a4:ba:98:53:e0:e8:
         35:df:89:f9:e5:8a:68:79:a3:2c:de:5f:e2:55:da:18:d3:44:
         13:7e:f1:69:3f:4f:1a:e6:36:62:c0:98:81:28:6d:2b:e2:cc:
         f3:ae:ff:6f:72:2f:78:c5:87:92:e8:b0:61:ff:24:e0:b8:1c:
         70:0a:bd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----