Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/323630323a666136653a3130303a3a2f34302d3430203d3e203630393030.roa
File:                     323630323a666136653a3130303a3a2f34302d3430203d3e203630393030.roa (raw, json)
Hash identifier:          GXZoz8oTpggRprXpMsdti8ukaLzHnormKI/5gpLTe0w=
Subject key identifier:   D2:9C:E0:54:A0:E3:88:DB:75:EA:0B:3B:19:71:D8:34:D0:C8:95:35
Certificate issuer:       /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
Certificate serial:       01B61DA156212F25DF0DB38FE78BCECFF3841429
Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/323630323a666136653a3130303a3a2f34302d3430203d3e203630393030.roa
Signing time:             Sun 12 Nov 2023 15:26:49 +0000
ROA not before:           Sun 12 Nov 2023 15:21:49 +0000
ROA not after:            Sun 10 Nov 2024 15:26:49 +0000
asID:                     60900
IP address blocks:        2602:fa6e:100::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:b6:1d:a1:56:21:2f:25:df:0d:b3:8f:e7:8b:ce:cf:f3:84:14:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
        Validity
            Not Before: Nov 12 15:21:49 2023 GMT
            Not After : Nov 10 15:26:49 2024 GMT
        Subject: CN=D29CE054A0E388DB75EA0B3B1971D834D0C89535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:96:05:04:a1:c9:49:24:1d:84:f8:c2:9e:f4:
                    d7:6c:1f:86:09:98:92:9c:e6:85:a3:b9:bf:8e:c4:
                    94:6b:cd:8e:30:e6:15:58:4e:5d:f4:4a:c4:c8:5f:
                    69:8e:46:a9:99:5c:e3:88:0e:32:6c:a3:dc:f3:ba:
                    68:28:85:22:6e:de:9d:60:58:cd:f6:89:d2:5b:2d:
                    bc:1a:46:2f:3c:93:d9:49:00:2d:9e:a3:52:9a:39:
                    7f:ff:8e:a5:3e:72:02:0f:08:97:d1:9d:65:ee:14:
                    59:47:c6:68:ea:24:04:36:3f:d8:a5:95:84:c1:45:
                    a2:d9:38:a5:0e:e5:c1:15:38:7d:d1:18:16:84:0e:
                    f4:92:b7:d2:e3:23:5d:4b:18:4f:18:f3:09:0d:fa:
                    d3:94:26:f6:4a:ee:f2:83:23:5a:98:82:c5:9d:e8:
                    0c:8c:fd:f1:9b:20:73:f6:b3:5e:bf:a6:ed:70:22:
                    8a:39:a2:10:9e:8a:a5:09:7b:df:cb:7b:6d:7a:3e:
                    4b:2e:dc:c6:d0:f6:32:bc:cb:88:e5:07:ee:67:12:
                    70:68:af:26:88:76:3c:84:5c:19:a6:f1:4c:05:5a:
                    38:86:1a:6a:c4:db:fc:f7:a8:1c:b4:72:8a:87:8b:
                    94:77:a1:cc:b2:03:23:cd:bf:ba:fe:0f:39:85:01:
                    51:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9C:E0:54:A0:E3:88:DB:75:EA:0B:3B:19:71:D8:34:D0:C8:95:35
            X509v3 Authority Key Identifier:
                keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/323630323a666136653a3130303a3a2f34302d3430203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6e:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         49:9b:95:09:67:cd:4e:9d:33:26:a7:fc:a0:98:cf:4c:c6:7c:
         ab:27:eb:18:c2:b4:49:36:64:e8:e5:3f:04:fc:94:11:93:af:
         f4:88:cd:c8:56:d8:c8:cc:1a:07:2e:9f:29:15:21:97:48:48:
         f8:30:c6:ce:7d:69:00:7e:10:04:f9:cb:51:91:3f:b6:f5:47:
         e3:10:1c:aa:5f:bd:ff:0f:f7:60:3e:b1:47:92:f8:7c:8e:c3:
         84:04:9d:13:90:22:da:2b:2b:c9:97:2b:41:ba:16:ed:6c:4d:
         e6:e7:1b:1a:f3:71:7b:a1:b7:0a:76:17:12:44:72:3a:45:f1:
         26:f3:bd:b6:5f:f1:94:fe:2d:0b:e0:c3:cb:1c:e2:71:02:6a:
         51:2d:a2:b3:ef:38:2b:d3:a6:22:eb:d1:9c:99:9d:ff:cc:ef:
         40:d3:c0:43:be:4a:60:da:ca:78:22:fd:9a:dd:b1:de:c4:71:
         57:70:03:90:b4:22:d8:b1:2e:08:a9:e6:2a:df:b2:84:43:e4:
         67:e2:bc:4e:c3:c5:58:ce:0d:3b:a6:86:5c:dc:dd:19:cd:81:
         41:b6:6f:47:22:16:59:39:71:86:56:09:76:b0:c4:7e:3d:8c:
         ea:f2:14:8e:88:c4:8b:5c:f1:55:a7:6a:2f:72:68:6f:8a:dd:
         b9:93:45:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:12:32 2024 by rpki-client on console-ams.rpki-client.org