Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132383a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3132383a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          u97ziGccoMY4p5eR36tATD6XGOi32V7P5IB4K/RtQwk=
Subject key identifier:   0C:A9:00:EB:36:0D:14:7B:28:D9:47:79:70:88:A7:BA:01:98:EA:19
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       39029814F45FDAA3A8D7C6CFD9EE6C52498C785E
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132383a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 03 Jun 2024 14:01:15 +0000
ROA not before:           Mon 03 Jun 2024 13:56:15 +0000
ROA not after:            Mon 02 Jun 2025 14:01:15 +0000
asID:                     29802
IP address blocks:        2602:ff62:128::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:02:98:14:f4:5f:da:a3:a8:d7:c6:cf:d9:ee:6c:52:49:8c:78:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jun  3 13:56:15 2024 GMT
            Not After : Jun  2 14:01:15 2025 GMT
        Subject: CN=0CA900EB360D147B28D947797088A7BA0198EA19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f0:9e:5c:36:db:f8:7d:86:14:10:f4:53:c9:
                    b9:e4:b6:bd:d6:5c:f9:a6:1f:36:b9:7d:8f:d4:c5:
                    49:bb:e5:18:2b:02:af:14:6f:78:50:af:7f:5e:c8:
                    fc:93:2c:19:f9:d3:c4:98:d8:27:ea:9e:50:c5:46:
                    f1:81:3f:02:b0:4c:d7:a3:05:8c:08:ab:cc:a2:00:
                    32:fd:7f:3f:4b:52:c8:12:47:cd:83:e7:39:06:61:
                    79:f3:e4:3e:e1:d1:34:69:ed:74:5a:35:6e:4f:ff:
                    39:93:a1:eb:50:ba:18:a3:ff:ac:27:bb:6f:6d:e8:
                    0e:a6:4b:cf:76:68:14:fa:17:83:74:e0:31:4b:8f:
                    5c:95:e3:3f:fd:6f:d3:05:9c:62:fb:a5:89:ff:37:
                    44:10:ca:29:95:58:b3:39:e1:1d:46:d1:4d:e1:0b:
                    81:33:55:ad:65:0b:40:c3:6d:9f:14:45:1a:b5:84:
                    32:2f:0e:c8:f3:a1:09:0a:ae:28:b1:ca:e2:d1:fe:
                    67:2d:35:bd:a6:db:f7:f5:36:bc:e4:b7:22:45:01:
                    bf:64:99:b7:a5:37:a1:2d:3e:ab:74:f5:4d:22:d1:
                    84:a2:96:ea:e0:76:8e:52:07:df:a9:6d:8c:8f:df:
                    60:f8:d0:cc:c7:90:f4:ab:7b:5b:15:b0:4e:f2:bc:
                    bb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A9:00:EB:36:0D:14:7B:28:D9:47:79:70:88:A7:BA:01:98:EA:19
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132383a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:128::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:fd:d1:ca:eb:81:91:fe:19:44:4c:c8:34:e2:86:be:a6:70:
         d6:21:d1:17:1e:4d:0c:2a:f8:89:69:ca:f4:27:73:25:56:6a:
         eb:f5:aa:e0:16:f3:3e:79:e3:23:4c:42:d3:11:ef:0a:4a:c9:
         a7:cd:37:87:8c:2a:6e:51:97:b1:e5:55:eb:03:d2:47:e6:86:
         0a:d5:76:ea:02:62:f0:80:e6:e8:5e:1d:25:88:f9:a6:c0:15:
         5f:fc:98:1a:f1:b3:86:b5:f7:9c:6e:7f:43:82:43:75:4f:8b:
         d1:0e:c8:b1:36:b0:90:19:f5:63:c5:e7:7c:89:6c:3d:e0:47:
         76:98:43:af:8e:32:a7:16:c1:05:55:4c:49:20:8a:f4:d2:80:
         b2:5a:93:bf:c4:7a:19:43:83:46:2a:9a:b5:13:af:05:54:f4:
         d6:2a:bd:ab:bc:fd:d6:47:04:c9:63:3c:cf:56:0a:eb:eb:7f:
         b8:d0:32:23:3c:c8:e9:d2:cd:c6:02:c8:d0:1b:9d:e0:d1:c5:
         cf:71:1e:2e:07:f1:0d:c7:1e:ff:42:29:e0:bc:5b:9f:43:a6:
         9b:56:51:96:a5:0e:18:fb:f1:cd:18:bf:7e:1a:3f:4f:68:0e:
         77:7e:2e:eb:79:12:bb:e6:83:a2:66:90:71:f3:ca:a3:b7:5e:
         1b:5a:9b:14
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUOQKYFPRf2qOo18bP2e5sUkmMeF4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0NmM4NTcyMDhjNTVmYmYxNzBiMzY4YTM0
MGVlZDFiMDY5YjFlM2MxY2MwHhcNMjQwNjAzMTM1NjE1WhcNMjUwNjAyMTQwMTE1
WjAzMTEwLwYDVQQDEygwQ0E5MDBFQjM2MEQxNDdCMjhEOTQ3Nzk3MDg4QTdCQTAx
OThFQTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPCeXDbb+H2G
FBD0U8m55La91lz5ph82uX2P1MVJu+UYKwKvFG94UK9/Xsj8kywZ+dPEmNgn6p5Q
xUbxgT8CsEzXowWMCKvMogAy/X8/S1LIEkfNg+c5BmF58+Q+4dE0ae10WjVuT/85
k6HrULoYo/+sJ7tvbegOpkvPdmgU+heDdOAxS49cleM//W/TBZxi+6WJ/zdEEMop
lVizOeEdRtFN4QuBM1WtZQtAw22fFEUatYQyLw7I86EJCq4oscri0f5nLTW9ptv3
9Ta85LciRQG/ZJm3pTehLT6rdPVNItGEopbq4HaOUgffqW2Mj99g+NDMx5D0q3tb
FbBO8ry7hwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFAypAOs2DRR7KNlHeXCIp7oB
mOoZMB8GA1UdIwQYMBaAFKWWf7TBcIcaPKREnrmfLuPrevqXMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzMv
QTU5NjdGQjRDMTcwODcxQTNDQTQ0NDlFQjk5RjJFRTNFQjdBRkE5Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2Yzg1NzIwOGM1NWZiZjE3MGIzNjhhMzQwZWVkMWIwNjliMWUzYzFjYy5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGRi
ZDQzMGM4MjJmYS8zLzMyMzYzMDMyM2E2NjY2MzYzMjNhMzEzMjM4M2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzIzOTM4MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/2IBKDANBgkq
hkiG9w0BAQsFAAOCAQEAQf3RyuuBkf4ZREzINOKGvqZw1iHRFx5NDCr4iWnK9Cdz
JVZq6/Wq4BbzPnnjI0xC0xHvCkrJp803h4wqblGXseVV6wPSR+aGCtV26gJi8IDm
6F4dJYj5psAVX/yYGvGzhrX3nG5/Q4JDdU+L0Q7IsTawkBn1Y8XnfIlsPeBHdphD
r44ypxbBBVVMSSCK9NKAslqTv8R6GUODRiqatROvBVT01iq9q7z91kcEyWM8z1YK
6+t/uNAyIzzI6dLNxgLI0Bud4NHFz3EeLgfxDcce/0Ip4Lxbn0Omm1ZRlqUOGPvx
zRi/fho/T2gOd34u63kSu+aDomaQcfPKo7deG1qbFA==
-----END CERTIFICATE-----