Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A916C75D0000/2/323630323a666266313a3a2f33322d3438203d3e203338313336.roa
File:                     323630323a666266313a3a2f33322d3438203d3e203338313336.roa (raw, json)
Hash identifier:          wvf+GI/7McUYPE9Iy43f0P55BJfS0ho0/paBY6NFM6s=
Subject key identifier:   14:B0:53:29:44:EA:CE:51:9E:2B:7A:8B:C6:03:46:01:E2:2D:19:8B
Certificate issuer:       /CN=99a8a036db180b64125153f106415e2e3ef7311f0a42df79ea
Certificate serial:       46FAB7FE4105ED1AE5DD23C926E00C3BA9FCCEA2
Authority key identifier: C7:84:C6:6C:57:6C:24:CC:FC:12:68:B5:37:3A:FC:A0:DC:4D:0E:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db180b64125153f106415e2e3ef7311f0a42df79ea.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A916C75D0000/2/323630323a666266313a3a2f33322d3438203d3e203338313336.roa
Signing time:             Wed 19 Jun 2024 13:04:25 +0000
ROA not before:           Wed 19 Jun 2024 12:59:25 +0000
ROA not after:            Wed 18 Jun 2025 13:04:25 +0000
asID:                     38136
IP address blocks:        2602:fbf1::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:fa:b7:fe:41:05:ed:1a:e5:dd:23:c9:26:e0:0c:3b:a9:fc:ce:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a8a036db180b64125153f106415e2e3ef7311f0a42df79ea
        Validity
            Not Before: Jun 19 12:59:25 2024 GMT
            Not After : Jun 18 13:04:25 2025 GMT
        Subject: CN=14B0532944EACE519E2B7A8BC6034601E22D198B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:31:13:52:e6:5d:42:15:76:d9:d7:ae:73:6e:
                    69:5c:b1:5a:bc:b7:93:7f:10:eb:1a:e5:82:49:41:
                    cd:ca:94:9d:d1:2f:9c:98:d9:8d:87:a2:32:76:aa:
                    be:1a:b1:5d:a7:a4:b7:16:78:79:cb:92:b9:d9:e1:
                    a4:94:88:1d:fe:44:1c:99:91:22:af:d6:d0:d6:c8:
                    05:85:9a:2b:d0:de:4e:bc:67:ed:66:95:7c:2b:17:
                    01:70:99:ae:2c:e4:53:67:56:27:a9:01:1b:db:b1:
                    a6:28:17:c0:77:71:25:83:6c:08:70:2f:32:7b:e4:
                    f4:99:65:cf:8b:6c:ff:f2:2d:3a:68:1a:b9:be:bd:
                    b7:bb:23:33:a1:fb:5e:16:4c:df:3c:5a:5f:e7:c2:
                    5d:30:eb:b7:35:1b:8b:8a:71:1a:f0:e9:70:69:26:
                    b7:ec:e5:b5:16:06:3b:2c:c4:28:29:e9:b8:23:c1:
                    f4:14:0b:8f:8f:27:40:4f:bc:b5:ce:3a:8b:65:b3:
                    be:82:68:ce:d2:8b:b7:58:8a:0d:6e:33:ac:a5:a1:
                    04:01:f4:49:f8:31:e5:1a:3a:8e:47:08:8e:86:ae:
                    5b:f0:03:83:b3:81:4b:b8:fd:b4:7f:b6:15:87:8f:
                    3b:77:bf:de:61:cf:3e:58:da:1f:85:2c:64:39:eb:
                    34:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B0:53:29:44:EA:CE:51:9E:2B:7A:8B:C6:03:46:01:E2:2D:19:8B
            X509v3 Authority Key Identifier:
                keyid:C7:84:C6:6C:57:6C:24:CC:FC:12:68:B5:37:3A:FC:A0:DC:4D:0E:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A916C75D0000/2/C784C66C576C24CCFC1268B5373AFCA0DC4D0E1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db180b64125153f106415e2e3ef7311f0a42df79ea.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A916C75D0000/2/323630323a666266313a3a2f33322d3438203d3e203338313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbf1::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:f7:1b:53:33:85:9f:ab:d1:6e:50:a5:b3:44:2b:d6:b1:cd:
         e6:1a:78:fd:e1:1f:84:3e:59:e1:a2:14:9f:4c:ef:36:ea:d7:
         f1:dd:1b:b6:9d:d5:28:e3:08:76:5a:2a:01:7d:14:6a:ae:b6:
         58:8a:a0:f8:31:f2:ee:03:cd:9a:20:4f:c4:d7:0b:bd:7b:90:
         11:ac:7f:c9:1b:f9:07:31:0e:78:e5:28:7e:fd:52:46:b6:9e:
         82:f3:9e:31:be:d7:66:63:a0:7b:a5:5a:19:e3:2f:2f:34:fa:
         18:a5:5e:89:a9:d5:29:1c:74:0c:01:25:46:f5:6a:05:eb:b1:
         4b:ab:26:c5:0d:d2:2b:a4:c7:d5:7b:90:66:a2:61:61:3e:ab:
         d9:90:9b:f2:c5:74:58:38:e8:ae:c0:35:f6:26:4f:fe:45:fc:
         5a:9d:26:63:08:27:91:f7:45:73:42:66:78:e9:eb:e8:27:14:
         69:c3:36:3f:68:34:28:1b:fc:0e:76:fa:ac:30:86:cd:b2:02:
         06:47:fc:a9:b1:7f:3e:24:d9:40:3b:79:01:f2:dc:97:3f:f2:
         b4:a4:3d:63:a6:f3:75:a2:1a:d8:eb:e6:de:e4:e8:58:13:b4:
         28:22:1e:6d:a9:c5:b4:3b:bc:ba:3f:70:66:d9:12:8a:9b:5b:
         1f:ff:66:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----