Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132303a3a2f34382d3438203d3e20323136333630.roa
File:                     323630323a666131633a3132303a3a2f34382d3438203d3e20323136333630.roa (raw, json)
Hash identifier:          0xyFp6nRL7nfvcynxAzATy3sTauZqfFp0/8R4n/gAvQ=
Subject key identifier:   0D:E6:25:57:CA:DF:33:5D:8A:B2:4E:9C:96:88:63:F1:9E:66:F5:18
Certificate issuer:       /CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
Certificate serial:       31A7F27B9CCF07E98452049D2AA2669B53DECD70
Authority key identifier: EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132303a3a2f34382d3438203d3e20323136333630.roa
Signing time:             Sat 12 Oct 2024 23:14:53 +0000
ROA not before:           Sat 12 Oct 2024 23:09:53 +0000
ROA not after:            Sat 11 Oct 2025 23:14:53 +0000
asID:                     216360
IP address blocks:        2602:fa1c:120::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a7:f2:7b:9c:cf:07:e9:84:52:04:9d:2a:a2:66:9b:53:de:cd:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
        Validity
            Not Before: Oct 12 23:09:53 2024 GMT
            Not After : Oct 11 23:14:53 2025 GMT
        Subject: CN=0DE62557CADF335D8AB24E9C968863F19E66F518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4d:65:7e:14:35:bf:b0:68:10:ab:ac:10:57:
                    9b:ae:ad:0d:e3:8c:09:f5:34:5e:91:41:8a:e4:bd:
                    94:cb:03:d6:91:ec:81:ea:e3:90:0e:a3:cb:f2:c2:
                    66:e9:14:51:0c:51:eb:ff:f9:97:d2:5c:59:0d:d9:
                    76:59:7b:ec:34:54:84:f0:d7:56:4f:01:e7:91:31:
                    27:67:3f:78:ba:52:f1:2d:5e:5a:02:50:0d:48:09:
                    75:4d:1e:08:5e:14:b9:97:0e:b4:1c:c6:ee:a3:4d:
                    a4:18:21:2c:bf:61:9a:8d:6f:e3:bc:44:89:60:66:
                    9a:46:cd:78:24:3f:2e:41:72:3e:74:9e:6a:33:29:
                    e3:8e:47:91:e6:4b:84:56:7d:17:79:c0:bf:2a:b0:
                    73:3c:83:2e:c1:e0:d2:5e:c3:9f:b3:4a:3f:ec:16:
                    55:0f:46:8c:43:9b:18:44:6b:30:92:58:3a:21:4d:
                    93:ac:ba:53:4b:01:7d:50:1b:54:34:db:92:f0:21:
                    f1:25:da:ac:60:bd:0a:bb:4e:2d:0c:84:4b:54:d5:
                    cf:9e:fd:89:a5:9c:07:76:32:94:2d:46:fd:29:53:
                    cd:12:6c:85:e3:58:2a:a8:f9:66:4e:14:03:72:97:
                    d1:8c:48:15:bb:80:30:43:a3:d0:e1:b3:e4:85:4a:
                    c8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E6:25:57:CA:DF:33:5D:8A:B2:4E:9C:96:88:63:F1:9E:66:F5:18
            X509v3 Authority Key Identifier:
                keyid:EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/EC95745C2559943ACE439574C9868665E1688B08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132303a3a2f34382d3438203d3e20323136333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa1c:120::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:2f:69:d4:24:2d:53:eb:cb:e9:bb:96:7a:0c:f8:10:e4:10:
         4e:19:df:ce:e5:0e:21:59:33:4c:15:1e:26:c0:e9:87:aa:57:
         29:43:ff:a0:49:dd:c9:c8:83:39:f9:59:eb:ba:9f:b9:c4:de:
         4b:d1:73:5e:57:37:aa:7b:e1:74:7e:54:7a:f6:20:13:0b:58:
         e7:5a:0e:10:e1:ad:76:85:cc:9a:2b:fb:5b:72:3d:47:3f:02:
         f4:ff:6d:87:68:51:20:bc:aa:07:77:e8:bd:36:85:b8:1d:9c:
         5f:e9:dc:12:8d:6d:f7:6c:c9:17:bc:82:67:16:24:7a:f3:09:
         2a:ec:a9:30:e0:a7:a9:16:b4:57:37:9a:46:37:8d:5d:4b:cf:
         a1:b4:c5:21:b0:9e:b6:f5:32:61:84:51:0a:f7:fe:9e:90:a7:
         86:c6:90:38:7a:3d:c0:44:ae:c0:1f:88:9c:f6:ed:b9:e2:ea:
         bb:ea:30:a7:a1:a6:3f:b0:79:52:69:60:b7:8b:2c:13:98:53:
         17:e0:9f:da:0e:31:53:31:2f:11:ce:65:eb:92:4b:c0:97:cc:
         ab:ee:bf:11:09:25:d3:66:de:e9:99:1a:72:0f:35:58:ec:e5:
         97:42:61:13:ac:21:da:9d:b9:a5:26:d9:52:2b:3f:37:85:24:
         c8:21:91:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----