Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132613a3a2f34382d3438203d3e203133323133.roa
File:                     323630323a666636323a3132613a3a2f34382d3438203d3e203133323133.roa (raw, json)
Hash identifier:          4aQBxQWZH9LeDzfGIr0Z4Wh7dvNeMczCV+ybq7f2G7Q=
Subject key identifier:   FA:E3:54:09:71:68:E7:BA:44:30:3F:26:DD:38:02:38:D5:4D:BF:6A
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       17EF2A767601869370D70DF9848BBA9348313899
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132613a3a2f34382d3438203d3e203133323133.roa
Signing time:             Thu 30 May 2024 12:29:09 +0000
ROA not before:           Thu 30 May 2024 12:24:09 +0000
ROA not after:            Thu 29 May 2025 12:29:09 +0000
asID:                     13213
IP address blocks:        2602:ff62:12a::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ef:2a:76:76:01:86:93:70:d7:0d:f9:84:8b:ba:93:48:31:38:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May 30 12:24:09 2024 GMT
            Not After : May 29 12:29:09 2025 GMT
        Subject: CN=FAE354097168E7BA44303F26DD380238D54DBF6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2a:88:be:54:99:fb:cf:3d:84:7c:c4:75:15:
                    cf:72:80:f4:61:c6:db:73:d9:e1:ba:8e:85:69:46:
                    06:2d:11:87:6d:53:b8:79:a4:ef:cd:13:9a:65:ab:
                    19:02:ae:ef:28:cb:d8:4d:98:17:27:c9:a0:fe:28:
                    82:fa:2a:84:e1:ce:4c:07:ef:59:04:c8:98:2e:ee:
                    1e:0b:6a:2c:33:fa:d7:65:e8:2d:e1:e9:a2:9a:9c:
                    6b:2f:41:c7:ad:2d:a7:32:e4:52:9d:9c:81:84:2f:
                    0c:9e:be:5c:c4:b8:e6:5b:0f:ca:d6:84:da:a6:b8:
                    4d:0c:93:ff:65:d5:f6:ac:39:59:c9:f0:79:85:3c:
                    f1:3f:66:db:24:2e:82:51:94:44:3f:1e:e9:1b:f9:
                    7f:54:d1:c0:6a:b6:2c:48:ac:97:dd:ab:c3:11:a2:
                    52:41:ce:92:c9:d1:e9:01:dd:63:df:41:20:ea:08:
                    8a:46:57:76:ff:48:13:bb:5e:c7:af:f0:e8:4f:b9:
                    dd:55:1f:53:af:be:03:3a:27:17:1f:c8:eb:20:29:
                    27:50:20:55:e1:e2:b1:e3:dd:69:a5:fd:1f:19:09:
                    1c:62:72:25:9b:80:21:31:30:37:bb:f4:a1:a1:98:
                    21:7d:b0:78:f7:93:5d:45:32:d0:e2:11:82:32:04:
                    01:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E3:54:09:71:68:E7:BA:44:30:3F:26:DD:38:02:38:D5:4D:BF:6A
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132613a3a2f34382d3438203d3e203133323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:12a::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:9a:ae:c0:fb:b8:5e:c5:78:e8:40:eb:40:35:be:73:2c:4c:
         6b:a6:f6:ee:c9:d9:2c:36:7d:6e:a7:5d:a3:44:34:fa:e0:f3:
         5d:18:a2:d9:72:be:dc:93:ab:5b:68:bd:a9:40:e2:05:f3:06:
         f2:9d:74:55:4f:be:b4:a1:99:35:59:73:a2:1f:d3:f5:10:30:
         cd:3c:2d:75:ba:66:53:e4:db:75:98:d3:3d:8a:f2:68:ef:3e:
         5a:ed:74:ea:67:2b:51:c4:07:b3:94:4e:74:9a:77:31:60:66:
         cb:81:1c:6e:57:64:c1:63:b8:c3:92:69:ac:b3:bc:d8:9e:60:
         7e:d0:72:7d:3b:1f:c2:04:91:e7:e0:1a:55:f0:45:a1:ef:06:
         46:fe:57:be:de:f9:06:d3:25:1a:23:42:32:6e:e9:71:27:06:
         f8:77:95:ac:82:ca:50:7e:88:65:e7:10:24:f7:5b:9e:c3:6a:
         5f:ad:33:88:17:1e:2f:c8:b6:16:20:b5:6a:84:d0:47:81:9b:
         56:be:5c:e9:37:f1:2b:45:8c:87:6d:40:e9:32:a6:bd:18:53:
         7b:9d:92:13:5d:52:b7:10:0a:fa:4a:8a:a7:a5:dd:4f:4f:31:
         84:d4:26:0e:e5:d1:2a:de:80:9a:c6:03:cc:91:e9:06:23:34:
         3e:7c:6c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----