Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/323630373a666361383a3130303a3a2f34302d3430203d3e203137313339.roa
File:                     323630373a666361383a3130303a3a2f34302d3430203d3e203137313339.roa (raw, json)
Hash identifier:          QISO14T+iGTZITueZmXGtGMkQw9DtivSc9eCXE7JcJc=
Subject key identifier:   86:64:54:21:C0:BC:8F:B4:20:A1:8F:94:F5:7B:BD:1C:74:E6:20:01
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       578F7F30748CB0EE330F3472F8D40553F1360E44
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/323630373a666361383a3130303a3a2f34302d3430203d3e203137313339.roa
Signing time:             Thu 13 Jun 2024 20:41:39 +0000
ROA not before:           Thu 13 Jun 2024 20:36:39 +0000
ROA not after:            Thu 12 Jun 2025 20:41:39 +0000
asID:                     17139
IP address blocks:        2607:fca8:100::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:8f:7f:30:74:8c:b0:ee:33:0f:34:72:f8:d4:05:53:f1:36:0e:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Jun 13 20:36:39 2024 GMT
            Not After : Jun 12 20:41:39 2025 GMT
        Subject: CN=86645421C0BC8FB420A18F94F57BBD1C74E62001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:05:f6:26:13:a3:bd:84:25:97:79:5c:1e:91:
                    d5:dd:04:bd:42:dc:27:5e:11:d4:21:c8:e5:f1:ff:
                    b8:a4:d4:6b:fd:a2:ce:89:be:d5:fb:80:bc:7e:38:
                    f8:02:58:a2:26:d1:01:d1:36:16:9c:fd:fc:b3:51:
                    b1:b7:a7:8e:54:d9:6b:9d:10:ef:15:b5:6a:0d:55:
                    bc:0f:57:76:e7:30:0d:10:7a:9b:ce:07:4e:23:e5:
                    ee:76:1b:30:d5:4f:69:cb:c4:be:bd:f6:54:8d:7f:
                    9b:77:3f:41:14:5e:2d:36:f3:d8:ba:1e:63:e5:49:
                    38:c7:18:bd:a8:8a:41:10:af:3a:3c:97:7d:54:fa:
                    67:2b:28:4e:0e:ab:99:67:6f:5c:88:c2:63:8a:26:
                    41:17:14:5d:f7:8f:2e:3c:7d:98:f5:e2:f5:66:a1:
                    1e:43:d0:3c:cb:f0:96:a6:43:21:5b:d1:7f:ae:88:
                    67:ae:d9:67:1f:ba:76:88:81:01:cc:5b:a2:5d:34:
                    f4:08:27:12:32:0e:96:75:d3:0d:f7:85:83:65:4e:
                    bc:d3:cf:82:4d:04:1f:96:a2:91:97:43:41:ab:b5:
                    27:2b:e9:16:64:8b:18:13:65:9a:9e:65:2a:90:9f:
                    4b:09:7c:68:c4:00:f6:62:e9:ba:d3:85:1e:10:51:
                    63:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:64:54:21:C0:BC:8F:B4:20:A1:8F:94:F5:7B:BD:1C:74:E6:20:01
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/323630373a666361383a3130303a3a2f34302d3430203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fca8:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         16:a9:fc:94:48:1d:f3:74:76:88:38:fa:67:8b:8e:95:f8:75:
         fc:ed:47:1d:dd:da:65:cb:af:82:50:8e:d6:85:fc:3e:60:de:
         10:ba:6c:45:c2:45:86:15:b7:42:d7:b9:41:d0:7c:ef:31:b5:
         e7:72:d7:82:47:cf:c4:96:f0:e0:62:f4:4d:9f:38:c0:60:91:
         68:da:e3:31:4b:28:fc:ec:cf:d6:63:54:4f:a0:e0:c3:f6:7c:
         7b:81:90:eb:14:6c:2b:b6:28:2e:86:70:0c:6d:51:93:1c:92:
         df:a7:39:d0:2c:9a:41:02:27:65:25:e3:fa:6c:50:28:5f:6b:
         62:81:4d:a6:28:39:fb:55:18:c7:ba:7f:dd:64:c7:d2:25:7c:
         28:7f:27:c1:03:aa:04:bd:f9:80:9e:7c:2f:ac:2c:d1:51:58:
         aa:5f:5a:5e:67:58:35:1f:86:03:36:b8:ad:91:d4:1f:c8:62:
         00:dc:ec:8d:a2:fb:45:e5:08:60:e6:0a:20:98:0c:b2:68:a1:
         22:de:f9:00:24:d9:a7:8d:ec:7c:d8:15:e3:b1:d2:63:15:5e:
         02:3f:fc:a6:04:d3:53:c2:13:de:a6:c8:ba:f2:4b:56:bf:58:
         1c:3f:17:da:cd:c3:fe:68:05:91:5a:cd:60:86:92:77:6b:ca:
         a3:c0:b7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----