Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131353a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3131353a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          SkcleaG/VqqglHQaTBpfzrUQZyQrzYNOVmYDlOt4ThY=
Subject key identifier:   C7:87:41:BE:72:92:36:D9:A6:BE:91:76:86:E2:9C:05:7B:E5:C4:04
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       2F44AE49E6FD151C8B31EE46D76D3D4D40ED554D
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131353a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 30 May 2024 12:29:17 +0000
ROA not before:           Thu 30 May 2024 12:24:17 +0000
ROA not after:            Thu 29 May 2025 12:29:17 +0000
asID:                     9009
IP address blocks:        2602:ff62:115::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:44:ae:49:e6:fd:15:1c:8b:31:ee:46:d7:6d:3d:4d:40:ed:55:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May 30 12:24:17 2024 GMT
            Not After : May 29 12:29:17 2025 GMT
        Subject: CN=C78741BE729236D9A6BE917686E29C057BE5C404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3d:d6:c2:e1:45:72:e2:ce:c0:28:cb:a9:b4:
                    84:1e:e3:82:f5:ef:1b:9e:94:f6:1e:2c:3f:f3:21:
                    80:81:cf:2d:cc:c4:bf:4d:ff:6f:9f:61:a6:23:34:
                    89:7f:93:40:78:a7:a1:47:6f:7c:fa:54:bd:aa:1b:
                    f3:52:79:b8:d6:af:79:c7:37:42:1f:6b:4b:5e:2a:
                    82:01:ef:8d:8c:17:ab:f2:40:b4:fe:01:62:d0:1c:
                    2b:7f:e4:24:ea:1d:7c:cf:25:7b:2d:dc:16:95:e9:
                    f1:10:db:5c:90:4b:52:28:40:7b:93:f4:f4:17:fa:
                    0c:07:51:29:3c:f8:b0:a6:47:3a:89:b6:c1:86:21:
                    70:dc:f5:97:f5:9b:e7:9e:d1:e1:cb:46:0d:50:08:
                    85:e4:51:85:b6:2e:9e:6b:f7:45:d6:45:7f:96:3f:
                    9e:dd:91:72:7d:2c:72:2b:68:b5:ab:5b:4f:47:d7:
                    9e:35:22:9a:b3:35:8f:42:46:0e:53:69:f8:d7:2d:
                    62:65:61:53:32:28:6e:c9:84:3f:f9:c8:d6:81:6f:
                    8f:bb:50:3e:58:08:da:fc:b2:d0:5d:3d:05:a1:85:
                    cd:8d:b2:ce:f3:99:e8:8e:40:ca:7e:1d:60:16:62:
                    c8:ad:6f:dd:37:ba:6c:b5:7f:35:19:7f:34:5a:2e:
                    10:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:87:41:BE:72:92:36:D9:A6:BE:91:76:86:E2:9C:05:7B:E5:C4:04
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131353a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:115::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:aa:ad:a7:2d:52:71:ce:b3:4d:2e:e1:7f:71:ac:96:40:ff:
         fd:6a:f4:45:58:34:27:1b:11:80:16:37:06:39:ec:9d:da:fc:
         87:b8:32:59:1c:13:9e:b5:98:aa:bb:0b:16:a5:74:b9:63:57:
         22:16:84:3a:bb:05:80:b4:92:2e:29:cc:9a:0f:2a:95:63:a1:
         4b:84:5f:0a:80:a0:cb:d7:e3:4c:28:67:4d:af:80:eb:f8:f9:
         4a:7c:ef:3a:1a:0d:cd:9b:49:fb:61:33:bd:58:25:b0:05:7c:
         e1:da:53:e3:0e:c1:bb:46:d8:1b:b0:10:70:11:32:0c:dd:61:
         85:86:d1:30:65:17:f1:3d:5f:7b:bd:43:6e:89:ab:49:20:9f:
         e5:b3:60:61:a8:1a:e0:5f:97:b8:93:c4:a0:2c:4b:11:45:20:
         25:ea:53:d4:fd:a9:9b:d3:62:69:21:57:4d:d7:ca:59:fb:e6:
         2f:58:7c:c4:ce:69:d2:2d:b7:d8:f2:2a:99:6a:1b:2c:16:c9:
         63:43:5d:8d:26:da:e8:07:65:5e:8f:db:26:f2:7e:d9:d1:a5:
         e4:6b:46:0c:14:56:4d:76:71:b5:14:46:71:24:53:d8:a7:e9:
         7b:10:7c:cb:38:44:24:07:bd:1a:1a:4c:e4:83:46:ec:ff:f6:
         45:80:18:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:29:55 2024 by rpki-client on console-fra.rpki-client.org