Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa
File:                     326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa (raw, json)
Hash identifier:          uCQ/gX5NRu/NuIkhTSnrbMad4/mMH2j3YDNXC35QHP0=
Subject key identifier:   23:10:11:3D:02:4F:58:6C:DE:2C:4F:FC:D3:55:4B:CB:EA:92:29:23
Certificate issuer:       /CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3
Certificate serial:       20972FEC42AB3D07500319988DD66897771B0414
Authority key identifier: 53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa
Signing time:             Sun 24 Sep 2023 18:14:16 +0000
ROA not before:           Sun 24 Sep 2023 18:09:16 +0000
ROA not after:            Sun 22 Sep 2024 18:14:16 +0000
asID:                     200179
IP address blocks:        2a0a:6040:5400::/40 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:97:2f:ec:42:ab:3d:07:50:03:19:98:8d:d6:68:97:77:1b:04:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3
        Validity
            Not Before: Sep 24 18:09:16 2023 GMT
            Not After : Sep 22 18:14:16 2024 GMT
        Subject: CN=2310113D024F586CDE2C4FFCD3554BCBEA922923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:78:5b:9e:6c:bd:76:0e:2b:db:59:b0:40:08:
                    5e:90:2e:ad:00:69:8d:ce:d2:41:41:c4:37:42:a5:
                    c8:ee:62:8f:38:b3:6f:a5:5c:d3:a3:ab:b6:63:bc:
                    32:d9:63:9f:8c:6e:46:a4:de:ce:4c:31:fd:60:c9:
                    e9:39:47:0d:83:95:34:ac:26:ea:66:c6:3a:d9:13:
                    3f:d2:4a:e6:7d:e3:1e:1c:e5:47:54:da:9f:b4:47:
                    57:41:b5:94:69:dd:04:ba:03:17:a2:15:25:74:5e:
                    20:cc:79:2f:e2:42:a8:8e:15:a2:ed:36:2f:4a:b0:
                    29:69:7c:42:73:25:05:fa:f4:0a:51:31:d7:4a:21:
                    50:ed:ff:45:05:97:e6:27:91:03:d9:32:e7:e9:86:
                    3c:f0:5c:fd:7f:41:7d:73:3f:3d:7e:4f:7e:0b:a3:
                    e1:f0:9c:06:d4:86:37:fe:95:6e:84:59:6f:d9:6b:
                    1b:54:2d:78:ad:16:00:da:2a:a5:ef:8e:05:88:0a:
                    7c:dd:31:2f:d6:f6:91:7a:15:84:02:ac:47:46:f1:
                    92:a6:31:13:07:09:97:07:76:63:b2:98:f1:e3:49:
                    44:e2:7e:59:32:a3:60:b1:86:90:86:15:60:93:c8:
                    7a:09:52:04:43:79:83:14:2a:a2:be:72:ab:41:b5:
                    6b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:10:11:3D:02:4F:58:6C:DE:2C:4F:FC:D3:55:4B:CB:EA:92:29:23
            X509v3 Authority Key Identifier:
                keyid:53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:5400::/40

    Signature Algorithm: sha256WithRSAEncryption
         87:ab:4e:5c:fa:7e:41:4e:83:6d:b3:07:0f:61:78:4b:4c:a3:
         d9:fe:c2:dd:ed:9e:c6:88:ce:0b:37:89:3c:34:cc:15:81:cc:
         9c:a4:22:3e:07:0a:57:16:ae:f2:00:11:fe:13:25:ea:f3:64:
         8c:9a:36:a0:9c:15:4f:15:79:d8:80:0e:1e:b0:7a:f9:16:10:
         ed:77:51:0f:9f:db:88:23:99:75:d1:10:9a:dc:42:52:26:3e:
         52:5d:05:ae:d3:21:c8:ba:41:17:74:0d:be:5a:81:0f:fa:87:
         31:72:88:14:b7:de:6b:ff:76:b6:70:03:ed:5f:ad:1d:cd:f1:
         5c:0c:84:75:01:45:39:f1:2a:7c:e1:1d:0a:dd:14:94:d7:6f:
         1c:84:da:85:b0:d8:ed:b6:95:b7:df:fe:da:8b:1a:07:56:f8:
         d2:bc:a2:1b:ee:04:6f:e3:9b:75:e6:44:0c:79:47:da:5b:83:
         5e:44:7c:fa:f0:68:d9:4e:07:5c:98:ef:2d:c3:6e:a9:d1:09:
         15:5e:2d:8a:4f:98:f8:cb:28:9f:16:75:73:21:76:85:0b:f7:
         6a:57:3a:b2:e7:f5:97:d2:48:16:5f:86:ed:e5:a9:19:2c:2a:
         08:9b:b3:57:21:80:39:f1:ab:47:ec:bf:6d:db:4f:f1:5d:d3:
         29:0b:23:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 03:53:33 2024 by rpki-client on console-ams.rpki-client.org