Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a6530303a3a2f34302d3430203d3e20313339333131.roa
File:                     323630323a666131633a6530303a3a2f34302d3430203d3e20313339333131.roa (raw, json)
Hash identifier:          In/8C9HsysUKj1WnX71YeNLaquHCOp3r9ufs2rzxkPk=
Subject key identifier:   8C:04:42:B7:84:B1:2F:12:31:DF:C0:BF:9A:F4:22:18:95:5A:74:00
Certificate issuer:       /CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
Certificate serial:       118D49CD05BE7E7DCF7621A85CE1263EFE81F1E1
Authority key identifier: EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a6530303a3a2f34302d3430203d3e20313339333131.roa
Signing time:             Mon 25 Mar 2024 14:02:51 +0000
ROA not before:           Mon 25 Mar 2024 13:57:51 +0000
ROA not after:            Mon 24 Mar 2025 14:02:51 +0000
asID:                     139311
IP address blocks:        2602:fa1c:e00::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:8d:49:cd:05:be:7e:7d:cf:76:21:a8:5c:e1:26:3e:fe:81:f1:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
        Validity
            Not Before: Mar 25 13:57:51 2024 GMT
            Not After : Mar 24 14:02:51 2025 GMT
        Subject: CN=8C0442B784B12F1231DFC0BF9AF42218955A7400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6d:20:cd:f4:f5:3a:ec:e1:90:6c:37:23:fb:
                    4f:c5:01:68:32:2a:96:88:ad:15:2c:93:15:34:09:
                    d0:a6:f5:a7:7d:c6:76:bf:d8:9b:c1:cc:b8:90:1a:
                    ab:54:e8:e8:eb:ff:9b:f4:28:b6:3c:4a:48:e5:69:
                    a1:74:58:9c:11:37:5e:c7:01:70:5c:ed:9d:f7:30:
                    ae:89:a6:75:c0:82:0d:7f:4c:c6:2f:e6:f1:e1:26:
                    2c:f5:85:d5:2e:83:b1:25:a9:c6:e4:be:3c:2b:a5:
                    4e:a7:9b:b9:b5:73:83:40:ca:4c:11:75:c2:ff:53:
                    24:79:b3:07:e1:9d:e7:e0:dd:a0:5e:d9:74:49:6b:
                    52:4c:76:35:8f:21:6d:8a:97:84:93:4f:13:c1:9b:
                    87:6f:1b:5b:17:f0:46:ba:37:40:04:68:eb:e0:e1:
                    45:63:3c:8b:ce:30:eb:f3:6b:c0:15:7c:30:3e:27:
                    a3:b8:0d:c9:b8:a2:7c:a5:ac:a7:5d:a0:65:7c:b4:
                    2c:ea:2a:d9:62:89:9a:0b:1b:d4:63:7d:17:f1:e0:
                    96:69:4a:3d:92:ef:3d:70:21:94:91:81:80:35:62:
                    b4:b3:7c:6a:ac:f0:a2:05:7c:0b:40:cc:d5:9f:89:
                    9d:dc:92:66:6b:07:02:a4:c6:40:d1:82:fc:d2:4a:
                    af:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:04:42:B7:84:B1:2F:12:31:DF:C0:BF:9A:F4:22:18:95:5A:74:00
            X509v3 Authority Key Identifier:
                keyid:EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/EC95745C2559943ACE439574C9868665E1688B08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a6530303a3a2f34302d3430203d3e20313339333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa1c:e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0c:8b:34:81:ed:0a:69:31:d1:ac:67:88:c3:6f:27:3c:f1:b8:
         e2:04:3c:33:2a:d7:0d:1b:d9:1b:38:b7:d1:be:be:3e:a9:bd:
         67:17:b5:c3:f0:9b:ba:78:af:a6:5c:10:d0:5c:69:75:57:a9:
         6d:41:dd:ee:56:e1:02:82:78:d0:72:cc:1c:e2:c3:fd:a3:59:
         9d:8f:98:3b:1a:a4:10:d7:1a:11:1f:c4:c7:3c:91:bc:6f:be:
         80:7a:c6:b5:fa:0d:cd:70:c1:a0:13:fa:1f:df:6e:34:ad:73:
         f2:aa:c1:f9:92:d4:9e:80:50:79:37:5f:b6:04:4b:38:36:ba:
         b2:a9:88:b2:af:9c:27:9e:be:e6:c6:2a:75:88:08:d8:64:90:
         f3:61:0f:e4:6a:e5:51:5e:0e:65:bb:1d:05:0b:0d:f2:52:6f:
         51:c4:ca:4a:98:bf:8e:8b:f0:e7:9c:00:65:7f:c5:98:02:8f:
         db:d7:b1:8a:c7:29:fe:08:cd:e1:c3:77:f4:31:5a:47:0c:5b:
         3d:82:3c:4f:3e:77:c0:1d:b1:18:01:f2:48:c1:e4:4f:e2:16:
         6a:e8:e7:a4:10:6a:65:50:32:e9:2f:e7:32:71:74:3c:c6:db:
         b6:d9:65:68:80:70:2c:1a:dd:47:77:c7:d2:99:b7:70:60:d9:
         26:02:5e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----