Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/323630323a663966613a3a2f33362d3438203d3e203132383339.roa
File:                     323630323a663966613a3a2f33362d3438203d3e203132383339.roa (raw, json)
Hash identifier:          bJHncf04r57gkEli3OQiXlk06GlA13JmXllNdKXQqkc=
Subject key identifier:   D4:F6:0F:84:1C:5C:1F:CD:92:93:FA:C0:3B:68:CE:75:F2:85:D2:96
Certificate issuer:       /CN=d90d8aba2a75232dac0a4973b29677a14573561ef341199600
Certificate serial:       1A10F13FD8927046EC35CFC8F0C81B961C5E2835
Authority key identifier: 44:17:C6:2B:C8:BB:64:8A:4A:97:DD:F6:50:5C:2E:44:3E:4B:35:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a75232dac0a4973b29677a14573561ef341199600.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/323630323a663966613a3a2f33362d3438203d3e203132383339.roa
Signing time:             Sat 15 Jun 2024 22:38:09 +0000
ROA not before:           Sat 15 Jun 2024 22:33:09 +0000
ROA not after:            Sat 14 Jun 2025 22:38:09 +0000
asID:                     12839
IP address blocks:        2602:f9fa::/36 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:10:f1:3f:d8:92:70:46:ec:35:cf:c8:f0:c8:1b:96:1c:5e:28:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90d8aba2a75232dac0a4973b29677a14573561ef341199600
        Validity
            Not Before: Jun 15 22:33:09 2024 GMT
            Not After : Jun 14 22:38:09 2025 GMT
        Subject: CN=D4F60F841C5C1FCD9293FAC03B68CE75F285D296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ff:29:2f:e9:b3:d7:da:c2:a3:5d:96:5d:de:
                    98:61:e2:82:ef:73:a5:92:3e:3f:72:d4:23:e2:c3:
                    37:e9:c5:77:aa:2a:2f:c5:18:ab:11:f4:b5:82:62:
                    ad:b9:de:c3:14:52:e7:bb:80:fc:51:fd:95:38:62:
                    59:ee:74:d7:e7:b2:57:6f:ad:da:00:67:4d:70:62:
                    8d:d8:e3:ad:bb:e9:e9:67:f9:9d:73:1f:c6:15:4c:
                    69:62:a9:d8:36:76:33:5e:ef:82:ab:22:10:5e:d4:
                    7c:4b:d2:38:54:4e:25:23:33:4b:8f:30:bc:11:11:
                    a5:3b:9e:de:af:19:72:0f:15:17:6e:8f:21:c7:4e:
                    95:3c:20:71:50:02:32:c5:85:14:d8:73:76:8e:e3:
                    c4:7a:e7:4b:6c:23:cf:be:0d:67:e7:1d:bf:6e:55:
                    7c:65:5e:7e:56:9e:7e:49:6e:9b:39:bf:65:f8:b2:
                    46:03:d9:6f:45:0b:84:0a:bd:b9:73:2a:0f:e8:d6:
                    6a:8c:13:b4:59:3e:5c:60:a9:fa:01:e1:dc:b4:cf:
                    a2:db:d0:60:86:e6:b6:76:49:b5:fc:6c:a6:f4:69:
                    cb:d8:b1:a3:35:07:02:3d:b7:a9:4e:c0:db:ba:d6:
                    41:e4:29:cd:70:2e:fc:21:15:0c:8d:e1:a0:fb:82:
                    a5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F6:0F:84:1C:5C:1F:CD:92:93:FA:C0:3B:68:CE:75:F2:85:D2:96
            X509v3 Authority Key Identifier:
                keyid:44:17:C6:2B:C8:BB:64:8A:4A:97:DD:F6:50:5C:2E:44:3E:4B:35:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/4417C62BC8BB648A4A97DDF6505C2E443E4B35FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a75232dac0a4973b29677a14573561ef341199600.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/323630323a663966613a3a2f33362d3438203d3e203132383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9fa::/36

    Signature Algorithm: sha256WithRSAEncryption
         32:da:67:a4:4e:0e:43:17:97:07:e1:3c:3d:b1:54:c1:1f:a8:
         a0:06:91:fb:2e:23:78:4b:7c:40:8e:fb:fa:0e:72:c7:8e:20:
         2e:7c:10:52:36:bd:48:38:17:3e:36:d1:eb:92:69:08:58:d2:
         df:96:c0:af:88:0c:fb:19:83:44:eb:9e:bb:93:82:fd:6b:c3:
         c6:3f:37:eb:50:71:fb:3d:29:4e:15:81:ff:64:de:7f:d2:4f:
         48:df:0a:66:94:16:53:4a:7b:46:65:04:3b:a3:42:71:b7:3b:
         3b:45:b5:cc:5f:99:73:9d:35:32:65:36:e8:7d:fb:3f:2c:e3:
         79:ce:46:92:7e:25:a4:91:5b:00:7c:f7:1d:95:e0:f5:9f:7c:
         45:42:82:3b:64:4c:44:6b:3d:d5:72:75:14:d8:da:3d:e4:32:
         ab:8e:39:9b:03:1b:d4:db:a3:fa:75:5f:91:1f:8e:57:c8:61:
         bb:0b:6f:45:1d:29:09:24:cb:05:27:23:7a:63:1c:e8:b6:40:
         37:1c:2b:f9:13:df:6b:e9:62:7a:17:f1:09:74:41:eb:b7:dd:
         7b:e6:1c:ca:1d:89:a5:78:07:31:04:0b:e7:c4:78:8c:d6:3d:
         af:92:d2:29:31:79:d7:b1:d0:03:cb:45:e1:36:0e:9f:29:4b:
         9e:e0:83:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----