Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132363a3a2f34382d3438203d3e20343031343530.roa
File:                     323630323a666131633a3132363a3a2f34382d3438203d3e20343031343530.roa (raw, json)
Hash identifier:          Ml12HwkNQEcpIj2j+L1o04ac7+ecGusrCY80D/BHje4=
Subject key identifier:   60:85:5B:5D:91:5A:53:B2:1B:8A:1E:7F:32:ED:9B:A6:67:93:4E:03
Certificate issuer:       /CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
Certificate serial:       0C37AE43801336564C44A714625CD245E760F6AB
Authority key identifier: EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132363a3a2f34382d3438203d3e20343031343530.roa
Signing time:             Fri 01 Nov 2024 12:30:50 +0000
ROA not before:           Fri 01 Nov 2024 12:25:50 +0000
ROA not after:            Fri 31 Oct 2025 12:30:50 +0000
asID:                     401450
IP address blocks:        2602:fa1c:126::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:37:ae:43:80:13:36:56:4c:44:a7:14:62:5c:d2:45:e7:60:f6:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
        Validity
            Not Before: Nov  1 12:25:50 2024 GMT
            Not After : Oct 31 12:30:50 2025 GMT
        Subject: CN=60855B5D915A53B21B8A1E7F32ED9BA667934E03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:07:d0:b3:84:7c:7e:94:8e:7d:4c:d6:f8:70:
                    69:6f:36:1f:eb:ea:c7:79:31:7a:eb:dc:0c:2c:a7:
                    af:4c:1a:30:71:bb:ce:8c:8e:c4:9d:9e:21:74:75:
                    35:14:f6:94:1c:67:73:a8:2f:42:80:5e:f4:2e:cd:
                    42:d9:7b:54:92:34:b0:74:df:6f:41:a6:24:16:47:
                    f8:17:df:8a:c7:04:82:6c:cf:42:dd:16:c3:61:ee:
                    64:89:0d:74:ea:e7:5f:ec:19:9b:dd:73:9a:a8:bc:
                    bd:33:94:60:df:cb:c7:42:d6:ea:23:3d:15:a3:b7:
                    2e:3b:7f:40:90:4e:d5:74:46:6a:3f:90:69:c8:26:
                    8f:74:d9:8a:c3:71:39:47:c8:5d:6c:49:1e:47:bd:
                    a0:a2:e8:1a:b1:96:77:15:9e:ee:8b:73:cb:8b:ab:
                    9f:8f:19:7a:05:9a:99:23:4c:28:8a:be:76:77:da:
                    93:90:17:9a:31:ba:89:9c:ef:14:31:99:dc:f1:5f:
                    ee:bf:be:7b:04:23:2e:65:30:0b:a4:73:19:35:85:
                    3e:69:88:f6:91:f2:5c:bf:ee:b6:25:36:34:c2:d9:
                    57:b2:18:ad:e7:9f:c4:76:fa:8b:32:84:41:66:67:
                    88:00:50:c5:a9:5e:61:f0:a0:4a:df:eb:5e:11:99:
                    2d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:85:5B:5D:91:5A:53:B2:1B:8A:1E:7F:32:ED:9B:A6:67:93:4E:03
            X509v3 Authority Key Identifier:
                keyid:EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/EC95745C2559943ACE439574C9868665E1688B08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132363a3a2f34382d3438203d3e20343031343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa1c:126::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:56:2b:5d:e5:64:d0:f3:0e:b8:cb:88:d5:17:3b:19:44:11:
         5a:ed:43:5f:7f:82:f5:38:9a:87:a3:35:8a:46:21:ba:c2:18:
         49:7b:42:ed:c2:60:d0:77:34:37:bd:09:b3:2f:5c:6b:d0:60:
         b5:69:03:83:95:78:3d:1f:34:fa:f4:36:e6:16:58:01:26:94:
         10:9f:fb:4f:10:90:3d:5b:79:ea:d3:ff:0d:c9:f5:a6:88:f9:
         ee:9f:a2:af:7a:8d:12:45:94:23:fa:db:ff:f2:89:c6:16:ec:
         9e:0e:30:ec:84:07:8a:76:8d:df:f8:88:3f:80:24:11:6b:3e:
         6f:f9:79:25:ad:e4:9b:b1:7f:fb:51:3b:3c:fa:23:de:ba:71:
         28:32:e4:b4:e0:3f:a6:93:be:f7:06:72:7d:95:94:ea:fe:52:
         76:d9:f0:29:cd:3a:ec:37:27:63:65:c0:dd:35:22:2e:83:8b:
         40:e0:ca:29:f1:bb:86:a9:9a:a6:30:ff:1c:2f:f1:43:59:95:
         79:1d:44:8b:8e:e4:14:17:3e:36:6b:bf:a3:dd:d6:58:21:b5:
         23:32:47:e8:06:b2:ac:c3:1b:8a:ef:27:da:a3:5b:fb:e3:14:
         4e:41:01:2c:b9:8a:f9:91:19:ca:c8:2d:6d:b3:18:d3:92:7d:
         a1:1d:07:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----