Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca5540181016060d60425/0/323630323a666236373a31613a3a2f34382d3438203d3e20333936393038.roa
File:                     323630323a666236373a31613a3a2f34382d3438203d3e20333936393038.roa (raw, json)
Hash identifier:          5JTGerLiTLRq/TrZoPWJtfJyeK3nnJIQkXCz0SMexdU=
Subject key identifier:   D3:CA:87:0C:1D:41:E2:9F:B1:3A:13:25:87:9E:B5:9F:8F:3A:C4:C0
Certificate issuer:       /CN=79d88309d02a4bef55764ac7c52b7eef5f1bb0ded1929fac33
Certificate serial:       7E7AC2B55DB68DCF9179C5DAA1E456A0834828FC
Authority key identifier: 3B:F7:67:28:9F:7D:AC:0C:15:00:93:8E:8E:C9:34:EB:E7:DD:7A:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0010301c-aa2d-4d35-97d4-8d947672bad4/79d88309d02a4bef55764ac7c52b7eef5f1bb0ded1929fac33.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca5540181016060d60425/0/323630323a666236373a31613a3a2f34382d3438203d3e20333936393038.roa
Signing time:             Sun 05 Nov 2023 18:16:32 +0000
ROA not before:           Sun 05 Nov 2023 18:11:32 +0000
ROA not after:            Sun 03 Nov 2024 18:16:32 +0000
asID:                     396908
IP address blocks:        2602:fb67:1a::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:7a:c2:b5:5d:b6:8d:cf:91:79:c5:da:a1:e4:56:a0:83:48:28:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d88309d02a4bef55764ac7c52b7eef5f1bb0ded1929fac33
        Validity
            Not Before: Nov  5 18:11:32 2023 GMT
            Not After : Nov  3 18:16:32 2024 GMT
        Subject: CN=D3CA870C1D41E29FB13A1325879EB59F8F3AC4C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f0:e4:0a:55:e1:b2:44:69:99:57:fb:a1:b1:
                    c8:b1:c4:3d:84:7b:ab:64:41:7f:f2:8c:92:fe:02:
                    98:76:f0:53:e1:83:bb:10:4b:a8:bf:ca:5c:c0:33:
                    ff:18:c1:fc:7d:ab:58:78:ee:33:6a:00:c2:d4:00:
                    42:6b:bf:75:d6:15:ed:6a:9c:dc:22:8b:77:98:08:
                    09:6e:2f:f1:62:9b:c4:0d:52:cd:8d:7e:5b:5f:45:
                    2a:af:6e:ea:43:84:7d:ba:6b:95:b3:de:ca:09:12:
                    d1:32:86:04:6e:4b:b5:f5:3e:a7:41:bf:1b:6d:6d:
                    14:ff:f9:58:21:63:c4:cb:eb:99:dd:ba:fb:53:5f:
                    24:62:97:e4:2d:2c:e6:75:b2:3e:b3:d8:27:44:24:
                    3b:65:48:c0:41:b6:db:e7:2d:26:98:40:aa:b8:95:
                    6c:6b:1d:fe:a0:7a:2c:a9:3c:bd:92:ea:47:37:91:
                    24:f6:08:49:45:4a:c7:39:a8:23:22:0a:06:a5:64:
                    10:5e:48:fe:01:d5:d4:9e:76:c8:ac:6c:e4:82:c4:
                    e1:79:ae:86:d2:f5:be:c9:47:52:53:04:ac:03:cc:
                    87:c7:7d:b2:2f:0a:f4:9a:10:65:24:e9:55:cc:1f:
                    1a:e6:cc:87:05:59:81:55:94:ac:f5:76:ce:25:8f:
                    da:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:CA:87:0C:1D:41:E2:9F:B1:3A:13:25:87:9E:B5:9F:8F:3A:C4:C0
            X509v3 Authority Key Identifier:
                keyid:3B:F7:67:28:9F:7D:AC:0C:15:00:93:8E:8E:C9:34:EB:E7:DD:7A:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca5540181016060d60425/0/3BF767289F7DAC0C1500938E8EC934EBE7DD7A80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0010301c-aa2d-4d35-97d4-8d947672bad4/79d88309d02a4bef55764ac7c52b7eef5f1bb0ded1929fac33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca5540181016060d60425/0/323630323a666236373a31613a3a2f34382d3438203d3e20333936393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb67:1a::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:61:57:83:da:32:4a:af:8e:e1:a4:77:cf:5f:26:5f:52:b2:
         d5:b5:ed:a2:6e:45:bd:26:2c:5b:e6:1e:d6:f1:3e:b0:f8:13:
         80:85:92:40:43:f5:df:4c:d7:10:5c:c6:2f:b1:a4:81:d6:b6:
         4f:06:5d:ad:6f:dc:c0:2c:f3:f8:a2:d8:02:33:9b:1a:8b:00:
         1c:3e:95:32:94:9a:92:55:33:50:b2:9d:e7:6c:5f:1b:16:fc:
         3c:0f:b6:1d:da:03:96:a4:b7:17:51:69:e4:2e:5b:5a:18:3d:
         aa:79:3d:26:29:89:55:63:60:2c:a5:19:dc:ee:09:0f:5f:52:
         13:35:82:93:55:11:f1:73:31:e6:0c:b3:b5:57:45:21:3b:2b:
         de:9d:27:e3:d5:e6:26:57:ee:98:3d:19:7b:f9:58:c2:9a:48:
         78:39:ce:7f:26:c2:7f:6f:ff:bc:f4:07:a1:05:06:38:49:04:
         85:87:d6:6e:25:bb:a1:77:2e:d2:68:b0:65:41:be:cd:f2:57:
         d3:ed:9b:3e:1f:3f:1c:8a:14:c6:c4:2e:37:e0:11:47:26:16:
         b1:33:b4:cc:72:3c:43:3a:8b:8d:da:bf:23:ec:ed:38:ad:b2:
         ff:44:67:98:06:24:0c:5b:ee:a6:d2:54:20:c4:3c:45:6e:09:
         bd:d2:1b:76
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUfnrCtV22jc+RecXaoeRWoINIKPwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzlkODgzMDlkMDJhNGJlZjU1NzY0YWM3YzUyYjdlZWY1
ZjFiYjBkZWQxOTI5ZmFjMzMwHhcNMjMxMTA1MTgxMTMyWhcNMjQxMTAzMTgxNjMy
WjAzMTEwLwYDVQQDEyhEM0NBODcwQzFENDFFMjlGQjEzQTEzMjU4NzlFQjU5RjhG
M0FDNEMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfDkClXhskRp
mVf7obHIscQ9hHurZEF/8oyS/gKYdvBT4YO7EEuov8pcwDP/GMH8fatYeO4zagDC
1ABCa7911hXtapzcIot3mAgJbi/xYpvEDVLNjX5bX0Uqr27qQ4R9umuVs97KCRLR
MoYEbku19T6nQb8bbW0U//lYIWPEy+uZ3br7U18kYpfkLSzmdbI+s9gnRCQ7ZUjA
Qbbb5y0mmECquJVsax3+oHosqTy9kupHN5Ek9ghJRUrHOagjIgoGpWQQXkj+AdXU
nnbIrGzkgsThea6G0vW+yUdSUwSsA8yHx32yLwr0mhBlJOlVzB8a5syHBVmBVZSs
9XbOJY/agQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFNPKhwwdQeKfsToTJYeetZ+P
OsTAMB8GA1UdIwQYMBaAFDv3ZyiffawMFQCTjo7JNOvn3XqAMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODBmY2E1NTQwMTgxMDE2MDYwZDYwNDI1LzAv
M0JGNzY3Mjg5RjdEQUMwQzE1MDA5MzhFOEVDOTM0RUJFN0REN0E4MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzAwMTAzMDFjLWFhMmQtNGQzNS05N2Q0LThkOTQ3NjcyYmFkNC83OWQ4
ODMwOWQwMmE0YmVmNTU3NjRhYzdjNTJiN2VlZjVmMWJiMGRlZDE5MjlmYWMzMy5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgwZmNhNTU0MDE4MTAx
NjA2MGQ2MDQyNS8wLzMyMzYzMDMyM2E2NjYyMzYzNzNhMzE2MTNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDMzMzkzNjM5MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC+2cAGjANBgkq
hkiG9w0BAQsFAAOCAQEAh2FXg9oySq+O4aR3z18mX1Ky1bXtom5FvSYsW+Ye1vE+
sPgTgIWSQEP130zXEFzGL7Gkgda2TwZdrW/cwCzz+KLYAjObGosAHD6VMpSaklUz
ULKd52xfGxb8PA+2HdoDlqS3F1Fp5C5bWhg9qnk9JimJVWNgLKUZ3O4JD19SEzWC
k1UR8XMx5gyztVdFITsr3p0n49XmJlfumD0Ze/lYwppIeDnOfybCf2//vPQHoQUG
OEkEhYfWbiW7oXcu0miwZUG+zfJX0+2bPh8/HIoUxsQuN+ARRyYWsTO0zHI8QzqL
jdq/I+ztOK2y/0RnmAYkDFvuptJUIMQ8RW4JvdIbdg==
-----END CERTIFICATE-----
Generated at Sat Aug 3 13:29:00 2024 by rpki-client on console-fra.rpki-client.org