Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132373a3a2f34382d3438203d3e20343031343530.roa
File:                     323630323a666131633a3132373a3a2f34382d3438203d3e20343031343530.roa (raw, json)
Hash identifier:          p44ROVLj/0No7xNp+Ugv/dON2o7oAfs5pbXIuNMwLUY=
Subject key identifier:   CB:F2:12:9A:4D:A0:F6:6E:54:19:69:B7:76:D1:D5:D0:C1:D9:09:FB
Certificate issuer:       /CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
Certificate serial:       48D31EBE223498C159483609E77F981523523511
Authority key identifier: EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132373a3a2f34382d3438203d3e20343031343530.roa
Signing time:             Thu 31 Oct 2024 13:56:12 +0000
ROA not before:           Thu 31 Oct 2024 13:51:12 +0000
ROA not after:            Thu 30 Oct 2025 13:56:12 +0000
asID:                     401450
IP address blocks:        2602:fa1c:127::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d3:1e:be:22:34:98:c1:59:48:36:09:e7:7f:98:15:23:52:35:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
        Validity
            Not Before: Oct 31 13:51:12 2024 GMT
            Not After : Oct 30 13:56:12 2025 GMT
        Subject: CN=CBF2129A4DA0F66E541969B776D1D5D0C1D909FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8a:33:ae:7a:20:f6:8b:e5:fb:a7:8c:8c:d1:
                    f4:08:8a:bd:1e:1a:32:aa:cf:17:1d:e3:61:12:f9:
                    f6:b3:bd:2b:a5:fa:75:f9:cc:7a:bd:96:cf:db:4c:
                    f2:04:16:93:9f:91:c4:20:9f:92:d4:60:08:2b:c8:
                    63:bb:33:49:21:c3:cf:f3:05:f9:f9:66:a0:7f:05:
                    64:21:d3:4d:30:62:88:05:46:35:d5:ee:16:70:bf:
                    7a:d5:ef:1e:9f:a4:9f:bd:84:ed:69:44:8c:af:1f:
                    d1:07:21:f9:d8:4a:84:0b:d8:38:1c:2f:01:09:50:
                    ec:52:74:97:37:9d:50:2d:c1:7c:af:e1:b3:f7:a8:
                    9c:16:05:07:07:e6:45:a0:06:32:c2:f7:47:60:8b:
                    b4:da:d6:39:eb:91:10:15:d2:d8:fe:b6:a5:c0:c4:
                    79:5e:ba:fd:ed:d8:e7:3e:91:15:2c:53:8a:fe:74:
                    b7:e4:b0:8d:7e:d3:4e:84:0c:e0:af:6d:7f:6c:5c:
                    d9:35:5c:eb:f9:97:db:75:b4:40:76:63:6a:2f:f7:
                    d1:29:a7:d1:55:aa:a1:c7:6d:83:7b:bf:c4:8b:38:
                    e9:7a:a8:44:63:b2:f4:71:c4:c9:e7:e6:6b:9b:dd:
                    fc:57:87:53:88:67:30:cf:f0:1f:9c:87:af:31:d9:
                    6a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F2:12:9A:4D:A0:F6:6E:54:19:69:B7:76:D1:D5:D0:C1:D9:09:FB
            X509v3 Authority Key Identifier:
                keyid:EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/EC95745C2559943ACE439574C9868665E1688B08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132373a3a2f34382d3438203d3e20343031343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa1c:127::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:fb:c7:1a:ba:87:bc:59:4f:08:a1:42:0a:c7:47:43:cd:90:
         b9:ef:22:da:d4:84:7f:22:50:ec:28:85:61:d3:20:0f:fc:eb:
         1e:eb:ef:f0:02:da:bb:11:03:90:8d:6d:3f:ba:0b:6a:63:12:
         d3:5f:ff:37:e8:0d:d7:63:03:30:b0:f3:1f:2f:3b:ac:76:40:
         2c:19:3d:ca:1c:e2:ea:48:a7:25:89:07:67:1f:69:4c:d1:8a:
         a4:fa:03:62:5d:dd:93:cc:b3:d7:30:a2:44:3f:28:e3:9f:aa:
         d7:71:68:a1:85:23:fb:1f:f5:7f:94:cd:fe:99:5a:ed:39:65:
         3f:0f:96:bd:b0:da:5c:9c:69:e0:bb:f3:2f:13:4e:6c:1f:32:
         1c:b4:01:7f:9a:32:5c:d6:f3:bb:be:33:16:43:cc:55:85:e1:
         9b:65:74:f7:2f:03:2b:02:3d:e0:54:b4:c6:fa:3e:f7:66:c8:
         5e:00:83:63:05:7b:6a:4b:2e:10:8d:9e:32:d8:8b:07:e2:43:
         df:69:a5:f3:d2:dc:f7:49:07:bb:2a:a2:44:c1:38:6f:b0:9a:
         73:f2:a4:8c:a6:ca:ca:48:1f:30:39:6a:9f:f6:15:45:3d:0c:
         72:82:01:9f:02:f5:ff:89:e8:01:32:59:01:af:d8:dc:47:15:
         c0:f1:05:77
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUSNMeviI0mMFZSDYJ53+YFSNSNREwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMTY5MDRmNzliYTEyYWIxMmI0YWYwOGYyYzViODg3MDdm
ODU2ZDJlZjYzMTNiZTUyYjcwHhcNMjQxMDMxMTM1MTEyWhcNMjUxMDMwMTM1NjEy
WjAzMTEwLwYDVQQDEyhDQkYyMTI5QTREQTBGNjZFNTQxOTY5Qjc3NkQxRDVEMEMx
RDkwOUZCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYozrnog9ovl
+6eMjNH0CIq9Hhoyqs8XHeNhEvn2s70rpfp1+cx6vZbP20zyBBaTn5HEIJ+S1GAI
K8hjuzNJIcPP8wX5+WagfwVkIdNNMGKIBUY11e4WcL961e8en6SfvYTtaUSMrx/R
ByH52EqEC9g4HC8BCVDsUnSXN51QLcF8r+Gz96icFgUHB+ZFoAYywvdHYIu02tY5
65EQFdLY/ralwMR5Xrr97djnPpEVLFOK/nS35LCNftNOhAzgr21/bFzZNVzr+Zfb
dbRAdmNqL/fRKafRVaqhx22De7/EizjpeqhEY7L0ccTJ5+Zrm938V4dTiGcwz/Af
nIevMdlqkQIDAQABo4ICvTCCArkwHQYDVR0OBBYEFMvyEppNoPZuVBlpt3bR1dDB
2Qn7MB8GA1UdIwQYMBaAFOyVdFwlWZQ6zkOVdMmGhmXhaIsIMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODllMDI1YTcwMThhYjNjY2NkMGMxMDAwLzAv
RUM5NTc0NUMyNTU5OTQzQUNFNDM5NTc0Qzk4Njg2NjVFMTY4OEIwOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzhhYzE3NTJlLTMwMjAtNDk5ZC1hOTUyLWQ1NGJkZmFkZjc2NS8xNjkw
NGY3OWJhMTJhYjEyYjRhZjA4ZjJjNWI4ODcwN2Y4NTZkMmVmNjMxM2JlNTJiNy5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg5ZTAyNWE3MDE4YWIz
Y2NjZDBjMTAwMC8wLzMyMzYzMDMyM2E2NjYxMzE2MzNhMzEzMjM3M2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzQzMDMxMzQzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6HAEnMA0G
CSqGSIb3DQEBCwUAA4IBAQCX+8cauoe8WU8IoUIKx0dDzZC57yLa1IR/IlDsKIVh
0yAP/Ose6+/wAtq7EQOQjW0/ugtqYxLTX/836A3XYwMwsPMfLzusdkAsGT3KHOLq
SKcliQdnH2lM0Yqk+gNiXd2TzLPXMKJEPyjjn6rXcWihhSP7H/V/lM3+mVrtOWU/
D5a9sNpcnGngu/MvE05sHzIctAF/mjJc1vO7vjMWQ8xVheGbZXT3LwMrAj3gVLTG
+j73ZsheAINjBXtqSy4QjZ4y2IsH4kPfaaXz0tz3SQe7KqJEwThvsJpz8qSMpsrK
SB8wOWqf9hVFPQxyggGfAvX/iegBMlkBr9jcRxXA8QV3
-----END CERTIFICATE-----