Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030303a3a2f34342d3434203d3e203336373439.roa
File:                     323630323a3831373a313030303a3a2f34342d3434203d3e203336373439.roa (raw, json)
Hash identifier:          PvPzBUmZu8cze80TdM4YdipHg7NS5Qw736cMl6TcY44=
Subject key identifier:   8E:2B:A5:E6:7C:68:4B:04:F0:50:69:D7:D1:81:B9:BC:69:4F:3D:C7
Certificate issuer:       /CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
Certificate serial:       7503B1783292266DE82C7D571CEF032C0AA5E17E
Authority key identifier: 46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030303a3a2f34342d3434203d3e203336373439.roa
Signing time:             Sun 07 Jan 2024 23:26:43 +0000
ROA not before:           Sun 07 Jan 2024 23:21:43 +0000
ROA not after:            Sun 05 Jan 2025 23:26:43 +0000
asID:                     36749
IP address blocks:        2602:817:1000::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:03:b1:78:32:92:26:6d:e8:2c:7d:57:1c:ef:03:2c:0a:a5:e1:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
        Validity
            Not Before: Jan  7 23:21:43 2024 GMT
            Not After : Jan  5 23:26:43 2025 GMT
        Subject: CN=8E2BA5E67C684B04F05069D7D181B9BC694F3DC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c3:4d:a4:7d:11:2e:65:62:0f:c1:08:24:b4:
                    e1:dd:4f:ca:bf:17:b8:de:11:9b:e7:93:91:1c:c3:
                    f0:e4:f6:b2:e4:48:ad:ed:46:5a:ec:86:ae:0a:47:
                    fe:61:c1:e3:7d:d7:4b:39:f6:74:eb:7f:89:b0:ff:
                    d7:ab:d0:8d:27:fb:74:3d:ce:e0:cc:f3:97:f6:b8:
                    58:df:ca:2d:41:8c:ac:af:1a:ff:19:be:1d:ee:0a:
                    a0:aa:e2:b0:0b:1b:6c:ad:24:d4:d3:a7:0d:03:a9:
                    09:5b:c1:35:e9:5a:f3:f8:3e:6b:d4:21:1b:97:e4:
                    2c:a7:31:b6:55:47:5c:13:38:60:31:18:17:01:8b:
                    bc:34:7f:e0:a9:c0:b8:e3:b5:c2:39:96:29:44:2e:
                    5e:b1:35:ea:25:f5:3b:7c:9d:5b:7f:18:1c:d6:a6:
                    89:95:dc:8f:de:63:07:a7:9a:cc:bd:2a:f0:38:07:
                    de:0d:f2:69:36:8b:2c:88:34:0f:dc:34:12:57:c1:
                    a7:5e:28:07:2e:57:40:f4:e7:36:05:6a:e1:b0:12:
                    c7:84:36:55:93:5e:3e:12:75:26:c4:8b:62:80:11:
                    de:38:cf:8e:fd:0a:12:cb:df:b5:41:b5:0d:18:25:
                    75:4e:92:25:9c:97:9f:d8:78:a4:6f:52:60:1c:d5:
                    ba:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2B:A5:E6:7C:68:4B:04:F0:50:69:D7:D1:81:B9:BC:69:4F:3D:C7
            X509v3 Authority Key Identifier:
                keyid:46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030303a3a2f34342d3434203d3e203336373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817:1000::/44

    Signature Algorithm: sha256WithRSAEncryption
         80:b9:8a:bd:66:1b:da:01:ca:fb:89:3c:bd:c8:79:a7:f8:2c:
         11:59:aa:55:95:0c:ab:9f:ca:3a:b4:86:4c:6a:ca:f3:d6:23:
         8b:e6:22:18:5e:87:7a:0d:85:3e:a9:50:0d:d7:76:63:a2:c1:
         d4:3d:bd:ac:8c:ba:2b:2d:91:be:30:f7:79:02:f9:fa:6e:d2:
         8c:f3:a9:fc:84:65:7a:3f:e0:54:b1:1f:24:f3:ed:55:c5:54:
         80:5c:75:86:ad:ea:a5:34:d3:da:16:47:14:4d:1b:54:be:4a:
         d5:87:7a:cd:40:1b:64:71:f7:10:52:d0:fa:c3:d8:6c:21:50:
         bb:4c:81:14:69:8a:e7:44:b3:1e:f0:ad:8b:9f:91:3d:fe:81:
         23:22:9c:b0:7f:25:0e:3c:c6:5e:5f:2d:64:c9:72:41:7b:94:
         37:f6:2c:36:bc:53:7e:21:f3:ab:fb:cd:e6:1f:68:20:28:4e:
         b9:90:d3:1e:83:71:ad:5a:be:35:a9:79:37:70:2d:60:37:82:
         2e:23:52:03:04:dd:2a:90:39:0c:97:28:f2:0b:24:50:7e:8c:
         76:a9:8f:18:3b:ae:58:31:fc:92:88:c1:c9:db:e1:51:8a:6b:
         80:72:5b:e8:c4:a0:be:e3:3b:9d:b4:42:bd:e8:6d:25:8f:dc:
         d9:0c:61:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----