Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3138353a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3138353a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          e9U6adcBwLZggZdelcMy1j2zzz0n4HYkZW5D3a07HZE=
Subject key identifier:   58:EF:5B:39:8F:3A:86:A8:E6:81:88:28:7C:3D:E4:47:78:66:8A:FD
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       5B01153697972439485ABAF62E988FE6AC3441F5
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3138353a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 03 Jun 2024 15:01:15 +0000
ROA not before:           Mon 03 Jun 2024 14:56:15 +0000
ROA not after:            Mon 02 Jun 2025 15:01:15 +0000
asID:                     29802
IP address blocks:        2602:ff62:185::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:01:15:36:97:97:24:39:48:5a:ba:f6:2e:98:8f:e6:ac:34:41:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jun  3 14:56:15 2024 GMT
            Not After : Jun  2 15:01:15 2025 GMT
        Subject: CN=58EF5B398F3A86A8E68188287C3DE44778668AFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:04:33:53:13:1e:6d:37:2f:65:ae:b6:33:b2:
                    92:98:02:b9:c7:f9:88:db:37:ee:d8:75:65:fa:60:
                    b4:d5:01:ca:89:a4:40:d3:75:7b:c6:44:22:b3:12:
                    09:b7:4c:d6:28:21:d5:8e:34:e3:9b:e7:fa:01:3d:
                    4f:4a:a6:06:f8:28:f1:ca:00:94:40:5d:bc:e0:65:
                    af:dc:7d:a3:98:bb:6c:8d:f2:39:33:0b:63:c2:cb:
                    06:c1:1d:9d:11:26:57:ac:34:d5:24:9f:61:5e:31:
                    c7:a6:b5:2b:bb:a3:7f:ae:34:a4:22:e1:44:16:aa:
                    ae:a0:2d:7e:52:41:7b:20:17:7d:ce:39:7b:5f:df:
                    28:4e:ff:37:72:af:c4:2d:23:5d:dc:6a:c6:51:a6:
                    09:5b:1c:94:70:27:ad:4b:47:92:93:41:30:93:c0:
                    88:fe:34:5d:e4:0c:91:75:2f:a0:f6:44:38:77:df:
                    29:72:e3:61:0e:af:b0:ed:74:be:f2:40:ae:6a:0c:
                    69:10:d9:53:f8:3a:51:6d:1e:25:d9:69:77:5f:55:
                    42:52:0a:ef:61:b7:b5:23:d2:24:aa:da:15:0f:4e:
                    da:0a:21:de:a7:44:15:eb:e9:bf:ab:9f:d7:4f:d5:
                    bf:91:3d:65:95:75:00:e9:87:15:0a:9f:56:e3:82:
                    cd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EF:5B:39:8F:3A:86:A8:E6:81:88:28:7C:3D:E4:47:78:66:8A:FD
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3138353a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:185::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:4c:e3:c2:13:10:3d:67:c5:fd:7b:dc:61:07:f4:a2:17:7a:
         04:db:08:34:f4:25:a3:e0:62:ad:6c:0a:28:a5:8f:f8:2a:2c:
         c1:63:58:ec:40:b2:55:1a:07:47:db:0f:d9:4c:56:c3:8f:d8:
         74:35:9c:13:5d:bc:95:5a:07:82:0d:8b:88:9f:7f:91:76:c4:
         ab:27:f0:8c:86:ae:bc:c5:d2:a4:b5:eb:79:12:a5:84:71:ec:
         21:6a:10:58:fb:98:c7:07:09:a1:3b:2b:d8:8a:42:cf:17:eb:
         c9:77:3f:37:fd:4e:f0:8e:58:04:08:e3:f1:71:d4:01:4a:a4:
         72:29:1e:26:8b:f2:27:59:05:61:81:9c:3b:8b:8f:9a:4f:c1:
         35:ef:ad:00:c4:5d:74:49:8b:d5:a7:5f:01:86:30:10:c1:d3:
         ba:70:87:1c:fb:69:6d:3b:cc:dc:50:ea:f0:04:61:20:7a:e5:
         86:16:36:27:c8:10:31:e6:9b:03:0d:20:14:3b:fc:4f:cd:5e:
         00:a3:af:f0:15:1f:87:42:96:a8:a0:e4:f7:40:b8:76:9f:b7:
         f3:00:21:ab:ff:7a:90:c0:74:b7:da:39:72:d4:23:cb:f7:38:
         94:f4:4d:40:9f:72:6e:35:ff:5a:86:22:42:e5:dc:c2:b0:08:
         8e:7b:18:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----