Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca5540181016060d60425/0/323630323a666236373a313a3a2f34382d3438203d3e20333937323434.roa
File:                     323630323a666236373a313a3a2f34382d3438203d3e20333937323434.roa (raw, json)
Hash identifier:          Y2Abv20vR70jDsuWrSbsEmbWOzP9S0/eFWNoq9qgwzI=
Subject key identifier:   4B:1A:0B:A7:B0:5A:F9:2F:51:A3:E6:EF:14:D6:AD:CB:7F:9F:1A:37
Certificate issuer:       /CN=79d88309d02a4bef55764ac7c52b7eef5f1bb0ded1929fac33
Certificate serial:       5574EEE228D6BA502B94BE4EC8F91E4D0D11D605
Authority key identifier: 3B:F7:67:28:9F:7D:AC:0C:15:00:93:8E:8E:C9:34:EB:E7:DD:7A:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0010301c-aa2d-4d35-97d4-8d947672bad4/79d88309d02a4bef55764ac7c52b7eef5f1bb0ded1929fac33.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca5540181016060d60425/0/323630323a666236373a313a3a2f34382d3438203d3e20333937323434.roa
Signing time:             Thu 18 Apr 2024 22:39:46 +0000
ROA not before:           Thu 18 Apr 2024 22:34:46 +0000
ROA not after:            Thu 17 Apr 2025 22:39:46 +0000
asID:                     397244
IP address blocks:        2602:fb67:1::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:74:ee:e2:28:d6:ba:50:2b:94:be:4e:c8:f9:1e:4d:0d:11:d6:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d88309d02a4bef55764ac7c52b7eef5f1bb0ded1929fac33
        Validity
            Not Before: Apr 18 22:34:46 2024 GMT
            Not After : Apr 17 22:39:46 2025 GMT
        Subject: CN=4B1A0BA7B05AF92F51A3E6EF14D6ADCB7F9F1A37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:82:ba:07:c5:23:68:3a:1e:61:e7:78:63:4c:
                    42:be:b6:f3:98:a6:03:c1:0f:69:05:e8:e1:5d:a7:
                    b3:8c:ba:e6:0d:5f:b8:42:d4:b4:7d:72:8d:06:a0:
                    b2:39:6b:fb:48:b6:57:82:c9:a9:78:d9:d7:c6:ca:
                    e9:99:d1:55:60:77:57:8d:14:d4:91:7f:e7:c4:dc:
                    6f:93:dc:f2:83:12:82:d5:c3:86:a9:5a:71:7f:96:
                    0c:f3:43:6a:5e:32:f1:76:1a:8f:30:24:13:86:32:
                    2f:4e:14:07:ba:96:b3:e2:fb:63:dd:bc:2a:d0:a9:
                    65:2f:bd:d0:ae:6e:13:7a:e9:85:1b:8c:2b:61:ec:
                    18:27:a2:72:89:32:7f:83:ed:8b:4d:21:ac:b8:c1:
                    1a:92:1e:de:9c:cc:89:91:72:b5:bf:81:89:33:70:
                    de:22:ed:4f:d6:19:fd:c1:bd:81:33:b1:56:7b:80:
                    01:a1:68:e4:0d:c5:c5:2e:eb:bf:ba:f0:70:ec:02:
                    50:34:4d:4e:75:9e:c1:de:98:8e:fa:75:05:fb:3c:
                    2c:53:c4:1e:02:ee:37:01:dd:89:5e:d1:7b:b0:eb:
                    4d:d2:43:c4:0d:cd:8b:33:31:17:c0:90:30:a9:1e:
                    77:d2:4c:7e:5f:e6:9b:d1:69:a2:03:85:9f:2d:1f:
                    8c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1A:0B:A7:B0:5A:F9:2F:51:A3:E6:EF:14:D6:AD:CB:7F:9F:1A:37
            X509v3 Authority Key Identifier:
                keyid:3B:F7:67:28:9F:7D:AC:0C:15:00:93:8E:8E:C9:34:EB:E7:DD:7A:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca5540181016060d60425/0/3BF767289F7DAC0C1500938E8EC934EBE7DD7A80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0010301c-aa2d-4d35-97d4-8d947672bad4/79d88309d02a4bef55764ac7c52b7eef5f1bb0ded1929fac33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca5540181016060d60425/0/323630323a666236373a313a3a2f34382d3438203d3e20333937323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb67:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:e2:7b:f1:46:d8:c9:80:d2:23:7c:5e:34:30:49:84:a9:a5:
         ba:d7:3e:55:dd:ae:68:f0:a1:c5:a5:6c:31:8a:eb:69:36:aa:
         ff:d4:e6:46:84:15:5a:8c:83:57:65:25:ca:63:41:62:40:c8:
         da:1d:26:66:50:d9:b5:cc:38:ce:0a:78:01:49:d3:55:85:81:
         5c:d5:14:ff:3b:9a:4d:82:96:0b:da:1d:0f:bf:ab:9a:96:2a:
         6b:8c:a3:80:6b:7d:31:cf:e7:ce:b6:6c:05:45:d3:ce:1f:44:
         ef:a4:53:7f:a0:55:b5:55:b6:5c:77:77:a1:48:a3:dd:29:ef:
         77:52:2e:93:a5:53:e4:d3:29:62:bd:31:aa:a1:74:4d:6f:9e:
         6e:11:8f:8f:bf:cb:2a:cc:4c:51:7f:9e:0a:07:9d:56:ef:c9:
         25:5c:42:f8:9f:ff:03:34:9d:97:90:f4:3f:10:c9:59:6c:36:
         b6:e2:5f:79:52:90:e3:1c:11:da:0e:84:70:b9:4b:05:05:ee:
         ad:ef:88:a5:9a:bc:f3:2f:51:81:64:cf:79:5b:f2:64:51:50:
         31:a8:74:ac:f0:ad:07:83:d7:de:36:ea:2c:5a:42:f5:cc:c8:
         3c:ef:bb:11:4a:73:bb:f0:87:86:09:2b:93:df:c6:bb:ef:07:
         18:38:4b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 3 13:29:00 2024 by rpki-client on console-fra.rpki-client.org