Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/323630323a663836353a66313a3a2f34382d3438203d3e203531363932.roa
File:                     323630323a663836353a66313a3a2f34382d3438203d3e203531363932.roa (raw, json)
Hash identifier:          Djqzy9KDpOV61BhJZVr0rox2Y7zOmc3M7y1LsTO5j0I=
Subject key identifier:   9E:06:C8:A2:EB:1E:9D:A1:62:C1:E7:5C:88:B8:70:D2:AD:2B:B3:8E
Certificate issuer:       /CN=e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672
Certificate serial:       56897BDB1F170FBE2544986F2BAD03B5AAC221F1
Authority key identifier: 59:64:34:7C:AF:C9:84:C6:21:12:3C:2F:5E:4F:42:37:3C:60:80:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/323630323a663836353a66313a3a2f34382d3438203d3e203531363932.roa
Signing time:             Thu 12 Dec 2024 04:44:13 +0000
ROA not before:           Thu 12 Dec 2024 04:39:13 +0000
ROA not after:            Thu 11 Dec 2025 04:44:13 +0000
asID:                     51692
IP address blocks:        2602:f865:f1::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:89:7b:db:1f:17:0f:be:25:44:98:6f:2b:ad:03:b5:aa:c2:21:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672
        Validity
            Not Before: Dec 12 04:39:13 2024 GMT
            Not After : Dec 11 04:44:13 2025 GMT
        Subject: CN=9E06C8A2EB1E9DA162C1E75C88B870D2AD2BB38E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bf:17:ca:59:1a:7e:fc:cf:a8:c0:3d:2d:8f:
                    71:49:06:75:5d:88:e1:3f:7e:e4:54:25:43:23:06:
                    43:b0:84:f3:12:8c:07:19:8e:d5:f7:dd:fc:01:59:
                    11:c0:fb:c7:7b:62:cf:ca:f0:07:55:98:27:3f:99:
                    bd:c6:59:66:69:1e:a9:b3:80:54:46:e8:fc:94:45:
                    a5:3d:a1:9a:a1:7a:95:64:08:e8:32:1c:16:19:f5:
                    e7:de:b8:46:6d:ed:b2:5d:2c:30:ea:02:00:25:ae:
                    be:f2:b6:bb:c2:61:05:22:0a:05:a0:61:e0:d1:c6:
                    97:ec:83:cb:f7:4d:40:4c:f9:dc:99:9a:be:90:e8:
                    1e:ba:b2:56:d0:c0:4e:77:3c:1a:ab:c6:4a:ea:6d:
                    9c:10:7d:6a:0a:d9:06:3e:17:42:a3:49:49:fd:fe:
                    a3:a6:93:92:d7:de:38:9e:c2:b7:5a:a5:bf:91:db:
                    bf:a0:d7:b4:71:f3:96:4d:33:9b:e6:df:3b:53:21:
                    3d:79:8d:00:dc:49:a4:01:29:c2:e2:e9:ef:a0:42:
                    06:8b:41:f5:2c:d1:1b:23:79:f8:28:dc:5f:98:7f:
                    6a:03:74:b7:0d:5c:c1:c0:23:48:9e:9b:6e:2d:9f:
                    d3:9f:ec:fa:09:28:74:43:fe:4e:0f:e7:9a:66:c1:
                    c3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:06:C8:A2:EB:1E:9D:A1:62:C1:E7:5C:88:B8:70:D2:AD:2B:B3:8E
            X509v3 Authority Key Identifier:
                keyid:59:64:34:7C:AF:C9:84:C6:21:12:3C:2F:5E:4F:42:37:3C:60:80:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/5964347CAFC984C621123C2F5E4F42373C6080FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/323630323a663836353a66313a3a2f34382d3438203d3e203531363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f865:f1::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:44:e6:39:d5:8e:ca:19:bc:70:6d:b4:a9:c5:55:39:84:bd:
         61:5f:2b:93:17:22:9f:60:4e:d7:48:b8:31:ab:5d:91:0a:91:
         c3:d2:3d:b9:67:d1:a5:c0:fa:48:a4:33:0d:88:73:39:83:00:
         ac:9a:1f:70:e7:5d:f4:d3:59:d8:dc:98:ef:6c:16:c8:24:77:
         65:89:1f:06:91:9d:8a:9e:81:22:e6:c6:61:24:e0:b2:00:e8:
         fa:b6:cb:f3:91:ef:ae:ae:18:77:d3:49:aa:94:cc:eb:ef:6e:
         af:46:06:4f:1d:c0:d2:6d:2c:54:09:22:2f:0a:54:e8:01:11:
         47:6a:f9:3b:5f:f6:4a:fa:84:7f:ed:1f:77:0e:81:25:a8:6e:
         4d:71:08:6d:14:31:3d:e9:3c:5a:c2:a4:0b:04:55:91:a9:97:
         df:11:35:cc:b1:90:d8:01:88:d2:a4:58:1c:fe:40:a6:19:6e:
         6c:8a:e8:3b:a7:c9:e0:fe:15:e2:23:04:5c:2c:4d:2d:fa:87:
         fa:51:47:53:a1:d2:56:84:98:42:02:6c:f5:e7:9f:a7:28:d7:
         d5:0d:72:c2:df:0b:d2:d7:6b:35:35:ba:a1:3b:72:75:81:b7:
         a4:b4:91:b9:1b:e3:d2:c1:38:57:a6:0e:28:db:b8:3b:3a:97:
         55:3e:3b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----