Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca5540181016060d60425/0/323630323a666236373a643a3a2f34382d3438203d3e20333937323434.roa
File:                     323630323a666236373a643a3a2f34382d3438203d3e20333937323434.roa (raw, json)
Hash identifier:          W4SKE3PgGsqxLjQ/WaaSkXZzDsVKWpFlRyd2azC6uy0=
Subject key identifier:   CC:50:86:70:71:C5:34:A9:0E:1C:0E:44:F5:2B:16:62:E4:0E:18:79
Certificate issuer:       /CN=79d88309d02a4bef55764ac7c52b7eef5f1bb0ded1929fac33
Certificate serial:       648CE026AA8C07E3769A64F7DC17A3F556B2EE1A
Authority key identifier: 3B:F7:67:28:9F:7D:AC:0C:15:00:93:8E:8E:C9:34:EB:E7:DD:7A:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0010301c-aa2d-4d35-97d4-8d947672bad4/79d88309d02a4bef55764ac7c52b7eef5f1bb0ded1929fac33.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca5540181016060d60425/0/323630323a666236373a643a3a2f34382d3438203d3e20333937323434.roa
Signing time:             Sat 13 Apr 2024 05:37:29 +0000
ROA not before:           Sat 13 Apr 2024 05:32:29 +0000
ROA not after:            Sat 12 Apr 2025 05:37:29 +0000
asID:                     397244
IP address blocks:        2602:fb67:d::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:8c:e0:26:aa:8c:07:e3:76:9a:64:f7:dc:17:a3:f5:56:b2:ee:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d88309d02a4bef55764ac7c52b7eef5f1bb0ded1929fac33
        Validity
            Not Before: Apr 13 05:32:29 2024 GMT
            Not After : Apr 12 05:37:29 2025 GMT
        Subject: CN=CC50867071C534A90E1C0E44F52B1662E40E1879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b2:19:68:c2:45:cc:ed:7a:ea:ca:40:12:a8:
                    1e:e0:a5:63:91:7d:de:f3:7f:d3:42:33:90:fc:45:
                    59:d9:20:d9:5c:90:42:78:01:c0:a8:f7:43:fc:8e:
                    98:db:c8:bc:37:00:07:4c:98:40:d4:20:2f:e8:e5:
                    51:d4:1b:98:b9:af:24:4a:35:34:4b:c2:19:c7:cf:
                    a1:4c:07:8b:63:9b:95:6b:1c:79:d1:9b:5e:43:19:
                    1c:7c:81:e6:2c:fb:d7:ec:69:21:2c:64:e0:1d:7c:
                    3c:e0:c7:1a:2f:27:52:e7:e1:21:56:09:8b:2a:9d:
                    e3:85:e0:b7:a1:e6:0e:be:38:f6:da:31:e4:3e:09:
                    e4:e8:94:80:7c:da:83:a6:f7:04:a3:d1:7d:a3:64:
                    77:71:39:04:a7:77:ed:b9:fd:db:bd:b1:60:cf:18:
                    6c:c0:2b:79:59:de:f2:10:43:0e:76:e8:12:81:d1:
                    00:aa:7b:02:82:bb:6f:6c:8b:57:72:0e:f0:a7:2c:
                    24:47:6a:2f:2d:6e:e3:9a:40:12:b9:b5:1f:84:e8:
                    a0:41:41:4b:d9:5f:d9:ab:f5:08:b8:3f:a7:64:35:
                    4a:50:da:c0:38:67:20:51:8f:5d:4b:b6:e9:55:49:
                    66:0c:ec:03:b1:d2:44:cf:6b:cc:19:53:4c:6c:15:
                    aa:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:50:86:70:71:C5:34:A9:0E:1C:0E:44:F5:2B:16:62:E4:0E:18:79
            X509v3 Authority Key Identifier:
                keyid:3B:F7:67:28:9F:7D:AC:0C:15:00:93:8E:8E:C9:34:EB:E7:DD:7A:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca5540181016060d60425/0/3BF767289F7DAC0C1500938E8EC934EBE7DD7A80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0010301c-aa2d-4d35-97d4-8d947672bad4/79d88309d02a4bef55764ac7c52b7eef5f1bb0ded1929fac33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca5540181016060d60425/0/323630323a666236373a643a3a2f34382d3438203d3e20333937323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb67:d::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:21:b0:e0:d2:54:ea:a1:e8:38:72:98:1d:9c:27:37:06:76:
         35:06:0a:2f:65:29:05:87:bb:34:9f:9e:61:60:78:4d:85:c5:
         c6:ed:c1:48:c5:da:fa:2b:31:57:e5:5f:6b:d8:ba:50:34:d9:
         f2:15:07:dc:bd:51:23:ce:72:fd:58:e6:e8:d3:ba:80:b6:08:
         8e:5f:a2:e2:00:63:9c:f7:09:79:85:98:df:0e:c8:ba:63:1f:
         2a:c2:39:2c:ba:b9:83:d6:0c:39:03:9b:a5:7f:32:d1:33:c6:
         4b:f1:0a:6c:58:13:db:e2:11:1f:cc:9d:1c:c8:58:5f:f7:93:
         a2:b6:ab:66:46:2d:f9:8a:37:5d:f1:cb:44:e3:61:e2:91:35:
         d1:9d:ba:b6:77:0a:8a:86:23:1a:a0:0e:39:ad:5f:dc:ca:a5:
         f9:ab:e8:79:0c:9e:03:49:a6:73:c1:f1:96:0a:fe:23:1a:d4:
         ff:21:81:9c:a4:2e:19:d5:dd:79:5a:fc:52:14:e2:7e:b3:48:
         11:90:43:69:07:89:b6:b4:2a:de:7f:0a:46:cd:17:54:32:bf:
         43:15:3f:45:04:b4:0a:28:27:b1:b8:5f:c3:e2:13:8e:92:1c:
         28:6e:73:6b:20:b2:bf:3d:14:87:fa:9a:f3:56:eb:fb:ac:c3:
         af:1a:0d:1c
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUZIzgJqqMB+N2mmT33Bej9Vay7howDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzlkODgzMDlkMDJhNGJlZjU1NzY0YWM3YzUyYjdlZWY1
ZjFiYjBkZWQxOTI5ZmFjMzMwHhcNMjQwNDEzMDUzMjI5WhcNMjUwNDEyMDUzNzI5
WjAzMTEwLwYDVQQDEyhDQzUwODY3MDcxQzUzNEE5MEUxQzBFNDRGNTJCMTY2MkU0
MEUxODc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LIZaMJFzO16
6spAEqge4KVjkX3e83/TQjOQ/EVZ2SDZXJBCeAHAqPdD/I6Y28i8NwAHTJhA1CAv
6OVR1BuYua8kSjU0S8IZx8+hTAeLY5uVaxx50ZteQxkcfIHmLPvX7GkhLGTgHXw8
4McaLydS5+EhVgmLKp3jheC3oeYOvjj22jHkPgnk6JSAfNqDpvcEo9F9o2R3cTkE
p3ftuf3bvbFgzxhswCt5Wd7yEEMOdugSgdEAqnsCgrtvbItXcg7wpywkR2ovLW7j
mkASubUfhOigQUFL2V/Zq/UIuD+nZDVKUNrAOGcgUY9dS7bpVUlmDOwDsdJEz2vM
GVNMbBWqZQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFMxQhnBxxTSpDhwORPUrFmLk
Dhh5MB8GA1UdIwQYMBaAFDv3ZyiffawMFQCTjo7JNOvn3XqAMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODBmY2E1NTQwMTgxMDE2MDYwZDYwNDI1LzAv
M0JGNzY3Mjg5RjdEQUMwQzE1MDA5MzhFOEVDOTM0RUJFN0REN0E4MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzAwMTAzMDFjLWFhMmQtNGQzNS05N2Q0LThkOTQ3NjcyYmFkNC83OWQ4
ODMwOWQwMmE0YmVmNTU3NjRhYzdjNTJiN2VlZjVmMWJiMGRlZDE5MjlmYWMzMy5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgwZmNhNTU0MDE4MTAx
NjA2MGQ2MDQyNS8wLzMyMzYzMDMyM2E2NjYyMzYzNzNhNjQzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzMzM5MzczMjM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvtnAA0wDQYJKoZI
hvcNAQELBQADggEBAIQhsODSVOqh6DhymB2cJzcGdjUGCi9lKQWHuzSfnmFgeE2F
xcbtwUjF2vorMVflX2vYulA02fIVB9y9USPOcv1Y5ujTuoC2CI5fouIAY5z3CXmF
mN8OyLpjHyrCOSy6uYPWDDkDm6V/MtEzxkvxCmxYE9viER/MnRzIWF/3k6K2q2ZG
LfmKN13xy0TjYeKRNdGdurZ3CoqGIxqgDjmtX9zKpfmr6HkMngNJpnPB8ZYK/iMa
1P8hgZykLhnV3Xla/FIU4n6zSBGQQ2kHiba0Kt5/CkbNF1Qyv0MVP0UEtAooJ7G4
X8PiE46SHChuc2sgsr89FIf6mvNW6/usw68aDRw=
-----END CERTIFICATE-----
Generated at Sat Aug 3 13:29:00 2024 by rpki-client on console-fra.rpki-client.org