Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/323630373a666361383a623030303a3a2f34302d3430203d3e203137313339.roa
File:                     323630373a666361383a623030303a3a2f34302d3430203d3e203137313339.roa (raw, json)
Hash identifier:          59TwgK8zpkZ0wAkYzpnl/uFjxNPAiK4AO/1iDm2M+Oo=
Subject key identifier:   F5:DD:A8:06:8B:E4:D5:62:3C:75:EF:24:E3:F2:AB:0B:7A:99:B8:30
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       2C84234F9FEA3F735C9FEE8494E6B9818B6BA3AB
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/323630373a666361383a623030303a3a2f34302d3430203d3e203137313339.roa
Signing time:             Thu 23 May 2024 11:07:45 +0000
ROA not before:           Thu 23 May 2024 11:02:45 +0000
ROA not after:            Thu 22 May 2025 11:07:45 +0000
asID:                     17139
IP address blocks:        2607:fca8:b000::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:84:23:4f:9f:ea:3f:73:5c:9f:ee:84:94:e6:b9:81:8b:6b:a3:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: May 23 11:02:45 2024 GMT
            Not After : May 22 11:07:45 2025 GMT
        Subject: CN=F5DDA8068BE4D5623C75EF24E3F2AB0B7A99B830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:12:51:7b:0c:9c:e4:f5:23:75:77:0a:3e:97:
                    f3:b2:09:b6:ec:17:6f:ce:c9:c2:55:cb:66:51:ef:
                    8e:19:6e:4d:41:c6:c8:f3:68:3f:b6:7c:dc:9b:9d:
                    d0:a1:5f:6e:0d:e9:e3:3d:03:c5:2a:dc:59:2a:73:
                    b8:79:9f:94:e6:6c:fd:a2:d9:28:14:d6:d7:53:eb:
                    85:da:38:96:19:33:1c:59:d3:05:b0:ab:e7:b1:64:
                    84:5d:a8:e4:32:87:04:51:91:69:ff:2f:7b:0f:0b:
                    a6:1b:9f:0b:fc:09:18:94:6d:74:85:3b:f0:33:45:
                    0c:66:3b:49:af:98:69:b1:b1:2b:22:d9:c4:1b:8f:
                    c8:7f:6a:07:1d:13:b6:24:86:53:af:a8:37:2d:ab:
                    fa:a4:1d:70:18:54:92:25:94:9a:d1:56:94:a5:4a:
                    9e:6a:9f:5b:f6:9e:79:97:ca:2e:ef:ba:c4:23:28:
                    bd:2e:2e:31:23:7d:79:dd:83:de:ac:c2:78:f5:70:
                    8a:97:9b:f4:1e:ce:5c:68:f8:6a:5b:20:4c:f5:13:
                    1e:7d:aa:23:47:2b:f6:af:f4:b4:3b:d5:dd:2e:bc:
                    28:2a:95:24:7e:dc:76:6c:10:72:ae:b7:30:16:9d:
                    02:d3:07:00:b7:1a:5f:80:c4:1e:17:15:2e:41:57:
                    6b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:DD:A8:06:8B:E4:D5:62:3C:75:EF:24:E3:F2:AB:0B:7A:99:B8:30
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/323630373a666361383a623030303a3a2f34302d3430203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fca8:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1c:d2:f7:5d:5f:1e:c7:fc:0d:6c:5a:46:38:c7:86:1f:fd:3c:
         6a:48:42:0e:17:8e:3d:23:0d:de:44:00:1f:d9:56:47:ec:50:
         b1:11:97:9b:39:f1:57:8b:1e:29:ca:93:25:0c:c1:1c:87:10:
         ee:c8:74:fe:a2:9c:bc:52:3e:19:bf:ba:89:0a:7b:41:e5:ce:
         1c:3d:6e:2b:1c:bf:6c:e6:32:1e:c0:29:11:cc:e2:9d:15:43:
         57:33:98:10:20:7e:c1:fd:4f:7e:63:87:10:01:4c:d9:01:11:
         0f:b5:bd:08:ba:f0:de:0b:19:e8:c1:30:e5:25:42:3d:4b:04:
         e0:ca:fd:76:86:d2:3e:6e:3b:e4:0a:74:a9:a1:c0:a2:59:d8:
         08:f3:63:9c:f8:f7:1e:42:a4:c6:80:86:d1:0a:10:a9:ed:21:
         87:3f:b7:29:d9:28:be:71:49:d5:d8:fd:dc:e8:82:92:dd:0c:
         a0:1a:e4:d2:56:0c:af:8d:b1:ee:df:4b:84:fe:25:28:cd:28:
         7a:83:14:68:d2:6f:b9:c8:1e:94:9b:3a:a9:d7:72:73:b7:9a:
         8e:59:69:04:01:5c:30:08:41:c5:c1:61:d9:52:66:10:64:dc:
         10:4b:90:ec:4d:78:ee:91:28:2b:96:76:fc:2c:26:6b:61:3e:
         3e:f0:8d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----