Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca5540181016060d60425/0/323630323a666236373a3a2f34382d3438203d3e20333937323434.roa
File:                     323630323a666236373a3a2f34382d3438203d3e20333937323434.roa (raw, json)
Hash identifier:          1bGIP1IUlNRg8MJa6yPxGk3iLWuBALPz5GHmGRnvMWI=
Subject key identifier:   BB:75:FD:B0:DD:24:01:12:17:9B:C3:8B:E5:97:01:B5:F2:57:41:60
Certificate issuer:       /CN=79d88309d02a4bef55764ac7c52b7eef5f1bb0ded1929fac33
Certificate serial:       3CCD8813F17320374C0A4944DE5790E4E3C06F0B
Authority key identifier: 3B:F7:67:28:9F:7D:AC:0C:15:00:93:8E:8E:C9:34:EB:E7:DD:7A:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0010301c-aa2d-4d35-97d4-8d947672bad4/79d88309d02a4bef55764ac7c52b7eef5f1bb0ded1929fac33.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca5540181016060d60425/0/323630323a666236373a3a2f34382d3438203d3e20333937323434.roa
Signing time:             Sat 13 Apr 2024 05:37:29 +0000
ROA not before:           Sat 13 Apr 2024 05:32:29 +0000
ROA not after:            Sat 12 Apr 2025 05:37:29 +0000
asID:                     397244
IP address blocks:        2602:fb67::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:cd:88:13:f1:73:20:37:4c:0a:49:44:de:57:90:e4:e3:c0:6f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d88309d02a4bef55764ac7c52b7eef5f1bb0ded1929fac33
        Validity
            Not Before: Apr 13 05:32:29 2024 GMT
            Not After : Apr 12 05:37:29 2025 GMT
        Subject: CN=BB75FDB0DD240112179BC38BE59701B5F2574160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b2:8b:88:15:b7:80:69:19:ad:57:38:15:5d:
                    37:fe:29:3f:ab:f9:c2:33:17:dd:42:a3:a0:6f:2a:
                    fc:be:4b:f4:06:10:1a:a2:8b:b9:5b:ba:38:c0:1a:
                    fb:a5:6d:46:b3:0b:c4:8f:30:be:7c:47:0a:6b:3c:
                    b1:26:61:3a:51:25:0b:26:e7:79:de:35:c4:5c:7f:
                    b4:8d:84:12:64:bb:3d:d8:f7:51:58:88:66:72:cd:
                    0a:9f:62:58:04:2f:7c:b1:f3:42:11:4d:e7:55:13:
                    17:ca:bd:d6:a5:9e:d6:cd:65:c8:c2:86:cc:f4:a3:
                    b8:46:13:4e:cd:57:2a:ff:cf:4a:87:45:c6:92:b7:
                    44:d5:e3:25:8b:f5:8c:a2:03:af:2e:bc:25:03:a0:
                    63:50:a3:ea:55:f2:41:22:94:30:4d:72:06:ac:5e:
                    c5:01:5e:c4:86:46:96:a0:63:cd:c4:fa:36:50:38:
                    1f:d0:b9:91:f5:9f:ee:1b:b1:3e:82:30:6e:15:6d:
                    59:7d:83:7e:8f:a7:d7:ff:46:a7:03:99:a1:ac:81:
                    d4:91:30:06:15:ed:54:f0:f7:77:69:f3:9a:90:73:
                    6c:5e:ac:e9:83:ed:0d:89:81:9a:e7:9f:7d:9f:cd:
                    3d:1b:38:41:ad:18:ce:6b:a7:00:c5:6d:d1:cf:73:
                    cb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:75:FD:B0:DD:24:01:12:17:9B:C3:8B:E5:97:01:B5:F2:57:41:60
            X509v3 Authority Key Identifier:
                keyid:3B:F7:67:28:9F:7D:AC:0C:15:00:93:8E:8E:C9:34:EB:E7:DD:7A:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca5540181016060d60425/0/3BF767289F7DAC0C1500938E8EC934EBE7DD7A80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0010301c-aa2d-4d35-97d4-8d947672bad4/79d88309d02a4bef55764ac7c52b7eef5f1bb0ded1929fac33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca5540181016060d60425/0/323630323a666236373a3a2f34382d3438203d3e20333937323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb67::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:50:b3:a0:63:0f:cd:c9:d9:07:b6:d1:24:f9:18:71:c0:24:
         43:71:a3:d8:38:94:f3:42:61:bc:a3:dd:54:f7:01:0f:ec:b4:
         1c:ca:a9:ab:2c:e2:d0:ba:7b:da:c9:92:ce:b4:7a:8a:ce:21:
         1d:1d:94:2e:a0:49:a0:0d:47:ce:d2:0c:b2:72:42:5f:e3:aa:
         42:a6:6a:27:81:5b:a8:69:f9:47:25:a1:2b:50:63:33:0f:a4:
         51:a0:3c:47:ac:84:f7:cb:19:65:e0:95:94:4e:f7:0a:3f:f3:
         9a:1a:9c:61:52:f9:8b:d9:7a:80:c5:07:0e:2d:74:f6:e2:30:
         8c:ee:01:46:7d:29:78:62:0f:00:08:e5:79:06:dd:a1:f3:0c:
         26:db:17:90:af:ea:21:b5:fe:b8:0f:9b:67:2b:df:47:c8:9c:
         43:e4:ac:0f:3b:d8:1f:af:24:e4:5b:aa:5b:0e:2b:69:3b:ea:
         6e:6f:7d:7b:b7:fc:9a:9e:30:b3:f4:9a:3a:3d:86:1e:69:d2:
         70:0b:45:b8:0d:d2:23:8b:be:fb:e3:91:c1:7b:5b:7e:ed:79:
         0f:37:79:77:25:e7:dd:0c:d2:68:3f:a0:68:9f:49:72:41:10:
         76:c4:cb:f6:13:bc:34:1f:c3:f3:99:e2:dd:bb:6e:e8:ec:26:
         0a:80:14:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----