Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030303a3a2f34382d3438203d3e203336373439.roa
File:                     323630323a3831373a313030303a3a2f34382d3438203d3e203336373439.roa (raw, json)
Hash identifier:          4kTt8evT7IHgXMbA7EaogYx6OigEdKmJoVsXIk9ACPQ=
Subject key identifier:   88:19:9C:4A:39:D6:55:29:68:BF:67:A0:25:24:8E:18:14:0D:E5:DA
Certificate issuer:       /CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
Certificate serial:       6BD871789EA331F92A0E8561FF874648D24BC473
Authority key identifier: 46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030303a3a2f34382d3438203d3e203336373439.roa
Signing time:             Sat 06 Jan 2024 04:11:13 +0000
ROA not before:           Sat 06 Jan 2024 04:06:13 +0000
ROA not after:            Sat 04 Jan 2025 04:11:13 +0000
asID:                     36749
IP address blocks:        2602:817:1000::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:d8:71:78:9e:a3:31:f9:2a:0e:85:61:ff:87:46:48:d2:4b:c4:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
        Validity
            Not Before: Jan  6 04:06:13 2024 GMT
            Not After : Jan  4 04:11:13 2025 GMT
        Subject: CN=88199C4A39D6552968BF67A025248E18140DE5DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:68:1f:d9:87:eb:05:96:ad:da:85:1e:c4:f2:
                    e6:e2:7d:93:9e:ab:d1:90:79:37:bd:bc:88:11:7f:
                    c1:77:cb:89:06:3c:7a:ed:3f:03:d3:bb:8f:40:36:
                    b8:8d:0e:2c:a9:4d:67:40:c3:f4:ed:9b:df:45:9b:
                    11:6c:e1:dc:dc:0c:02:62:33:79:33:6a:33:08:2f:
                    08:7b:74:06:c8:63:c2:a8:0d:0a:1c:9a:55:78:e3:
                    99:be:3f:09:9a:98:a5:8c:d5:43:07:91:ae:a3:0a:
                    e4:40:39:5f:13:73:b7:00:84:96:f8:ed:47:a6:cf:
                    59:58:82:b4:3a:b3:12:a3:ff:c9:5d:fe:f8:dc:61:
                    1b:ae:cb:55:6f:59:42:e4:10:4e:00:8d:57:fe:4e:
                    87:16:38:15:05:1d:60:be:a1:3a:6b:41:52:08:37:
                    59:f7:89:a1:15:09:63:6b:d6:f1:51:d6:9d:a7:8a:
                    e2:04:ed:5f:4d:6a:fb:45:c4:7d:47:7a:59:2d:0f:
                    a6:1a:88:e2:23:6f:e4:ec:d9:c5:8e:90:74:62:be:
                    db:e2:29:f6:80:a1:f1:7b:f1:28:09:23:ce:f7:4b:
                    e1:de:4e:46:e0:b3:be:4e:70:19:51:47:94:67:e5:
                    e9:20:f3:fd:af:79:8f:10:2c:7a:78:42:bb:b4:15:
                    80:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:19:9C:4A:39:D6:55:29:68:BF:67:A0:25:24:8E:18:14:0D:E5:DA
            X509v3 Authority Key Identifier:
                keyid:46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030303a3a2f34382d3438203d3e203336373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:a9:90:c2:99:0e:5a:7d:24:18:52:0d:02:cb:01:d8:15:ba:
         13:4d:6f:94:3f:9c:c9:1f:59:fe:84:56:15:1a:45:8c:10:e3:
         3a:22:11:8b:a4:0d:9f:72:63:5d:88:0a:1f:6d:7e:8e:d4:b2:
         3b:82:48:86:a1:9e:77:4a:3a:c1:60:d3:d9:60:0c:21:99:a6:
         02:99:6e:b9:ef:14:7a:3f:48:7c:d9:5b:c7:a5:11:8d:8b:13:
         e5:a0:06:74:03:9b:95:8c:73:32:d6:fb:3e:da:bb:a7:fc:6c:
         d6:33:d8:b8:81:0f:6d:61:84:29:e3:be:84:41:e2:07:70:63:
         42:5c:2a:bd:9d:93:2f:d7:28:98:74:b4:42:9f:6a:ad:c0:df:
         6d:e9:56:12:fc:53:a6:3b:b3:dc:3c:3f:ee:cf:6a:f2:c2:75:
         e1:b2:68:2f:72:6c:6a:74:1a:a9:35:ea:af:ab:b6:e9:6f:32:
         59:e0:a7:40:91:53:a5:03:b6:1c:83:2a:b0:4e:25:57:38:ba:
         48:af:f1:64:ab:20:9e:60:c3:45:b2:39:5d:70:78:56:b3:dc:
         34:f5:7c:66:5a:09:f6:4c:c2:42:cb:aa:39:f1:e8:fd:55:4d:
         27:2a:39:e9:28:cb:82:84:f8:d7:87:12:9c:8e:ad:7e:7e:e6:
         3d:36:be:01
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUa9hxeJ6jMfkqDoVh/4dGSNJLxHMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZTdkZGViZjFhZDM3ZDdjYmNhMzAzM2E2MGU3ZjAzMDJk
NjI2Yjk2YTBmY2Y5N2ZmM2QwHhcNMjQwMTA2MDQwNjEzWhcNMjUwMTA0MDQxMTEz
WjAzMTEwLwYDVQQDEyg4ODE5OUM0QTM5RDY1NTI5NjhCRjY3QTAyNTI0OEUxODE0
MERFNURBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Wgf2YfrBZat
2oUexPLm4n2TnqvRkHk3vbyIEX/Bd8uJBjx67T8D07uPQDa4jQ4sqU1nQMP07Zvf
RZsRbOHc3AwCYjN5M2ozCC8Ie3QGyGPCqA0KHJpVeOOZvj8JmpiljNVDB5Guowrk
QDlfE3O3AISW+O1Hps9ZWIK0OrMSo//JXf743GEbrstVb1lC5BBOAI1X/k6HFjgV
BR1gvqE6a0FSCDdZ94mhFQlja9bxUdadp4riBO1fTWr7RcR9R3pZLQ+mGojiI2/k
7NnFjpB0Yr7b4in2gKHxe/EoCSPO90vh3k5G4LO+TnAZUUeUZ+XpIPP9r3mPECx6
eEK7tBWApwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFIgZnEo51lUpaL9noCUkjhgU
DeXaMB8GA1UdIwQYMBaAFEa5/bwgGWKKgFXQOrgnyefkAHO/MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOGJhYTU3OWMwMThjZGNmMmM4MzU0YjUyLzAv
NDZCOUZEQkMyMDE5NjI4QTgwNTVEMDNBQjgyN0M5RTdFNDAwNzNCRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzhiN2I4ZjIyLTU4N2QtNDFlOS1hNzk4LTkzYzQ3NzVmN2ZhMS9lN2Rk
ZWJmMWFkMzdkN2NiY2EzMDMzYTYwZTdmMDMwMmQ2MjZiOTZhMGZjZjk3ZmYzZC5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThiYWE1NzljMDE4Y2Rj
ZjJjODM1NGI1Mi8wLzMyMzYzMDMyM2EzODMxMzczYTMxMzAzMDMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzNjM3MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYCCBcQADANBgkq
hkiG9w0BAQsFAAOCAQEAK6mQwpkOWn0kGFINAssB2BW6E01vlD+cyR9Z/oRWFRpF
jBDjOiIRi6QNn3JjXYgKH21+jtSyO4JIhqGed0o6wWDT2WAMIZmmApluue8Uej9I
fNlbx6URjYsT5aAGdAOblYxzMtb7Ptq7p/xs1jPYuIEPbWGEKeO+hEHiB3BjQlwq
vZ2TL9comHS0Qp9qrcDfbelWEvxTpjuz3Dw/7s9q8sJ14bJoL3JsanQaqTXqr6u2
6W8yWeCnQJFTpQO2HIMqsE4lVzi6SK/xZKsgnmDDRbI5XXB4VrPcNPV8ZloJ9kzC
QsuqOfHo/VVNJyo56SjLgoT414cSnI6tfn7mPTa+AQ==
-----END CERTIFICATE-----