Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313239303a3a2f34342d3438203d3e20323136323930.roa
File:                     326131333a646638303a313239303a3a2f34342d3438203d3e20323136323930.roa (raw, json)
Hash identifier:          6eYmf6fKdcGKYDamZjHrkqBkAlbO+iI2XgKfZXiMjDk=
Subject key identifier:   F3:EC:68:15:FA:E3:2F:48:71:ED:5A:CA:E3:D0:67:B6:D8:33:44:E6
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       49587D8E6A0347E65D723A0DDBA310F18DE48620
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313239303a3a2f34342d3438203d3e20323136323930.roa
Signing time:             Tue 19 Sep 2023 11:32:26 +0000
ROA not before:           Tue 19 Sep 2023 11:27:26 +0000
ROA not after:            Tue 17 Sep 2024 11:32:26 +0000
asID:                     216290
IP address blocks:        2a13:df80:1290::/44 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:58:7d:8e:6a:03:47:e6:5d:72:3a:0d:db:a3:10:f1:8d:e4:86:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Sep 19 11:27:26 2023 GMT
            Not After : Sep 17 11:32:26 2024 GMT
        Subject: CN=F3EC6815FAE32F4871ED5ACAE3D067B6D83344E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1f:28:44:1e:2f:57:b3:d3:3b:a5:c1:a0:3f:
                    40:82:89:7e:81:f2:9e:c5:de:5e:5a:6f:9f:2d:94:
                    2a:1b:de:55:e8:26:ae:f2:5b:15:02:b5:dc:99:29:
                    80:65:bf:d5:3a:27:d7:87:97:e4:be:73:fd:f0:bb:
                    03:1c:7c:54:12:e6:92:dc:69:4f:85:da:b4:e9:6e:
                    d1:55:b9:84:0f:aa:27:f3:34:04:56:5a:35:bd:2d:
                    be:14:31:8b:6d:17:47:ea:c3:90:e2:50:bd:9d:5f:
                    19:76:46:13:57:2f:53:b1:af:ad:fa:eb:0a:ee:b3:
                    93:28:31:ab:a3:ac:81:4a:1b:fd:fa:7d:8c:ba:18:
                    22:98:be:54:55:97:ad:8d:4d:62:f7:59:a2:30:c7:
                    d5:a1:29:bf:8b:fd:29:ff:70:6c:be:9a:b6:36:b4:
                    1e:92:2d:26:5a:ad:81:f1:d1:5a:99:a6:b6:68:9a:
                    da:3e:ee:54:a6:75:7c:a4:9b:87:fb:96:80:a1:80:
                    42:3c:16:48:25:ec:a8:d6:1c:ab:9e:af:78:a8:3b:
                    b5:85:26:59:0a:21:3f:8c:b7:0a:02:79:da:f5:f6:
                    46:7a:1f:b7:6f:dd:cf:64:05:e0:d6:7d:3b:36:ca:
                    5a:1c:86:78:ac:a7:0f:83:53:20:60:77:2f:75:b0:
                    0f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:EC:68:15:FA:E3:2F:48:71:ED:5A:CA:E3:D0:67:B6:D8:33:44:E6
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313239303a3a2f34342d3438203d3e20323136323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:1290::/44

    Signature Algorithm: sha256WithRSAEncryption
         6f:9e:df:ca:58:bd:33:2c:de:9b:f2:6c:3f:15:b3:ef:18:92:
         d6:14:7d:24:c9:6f:7f:dc:6b:be:bd:a8:a8:04:80:cc:c6:f3:
         2e:0d:b0:bd:0a:26:89:02:ea:29:aa:5d:e4:40:75:f2:ef:6e:
         ce:20:13:7b:cd:83:f8:dc:92:8d:b8:97:db:91:ed:5f:f5:c3:
         98:2e:81:47:25:60:25:06:c4:f6:a4:62:ef:5b:f7:ee:49:5e:
         11:a2:26:71:ff:42:a1:38:63:cc:36:7a:a1:ba:fc:5d:af:21:
         f1:06:90:6a:ad:fc:3f:62:dd:a4:d2:71:11:03:dc:c3:64:fb:
         ae:b3:26:a3:77:05:f3:dd:b8:4c:8b:eb:a2:5a:f9:31:20:37:
         9e:68:51:81:3a:ec:22:ac:d9:ad:9e:ca:fd:0f:35:03:10:09:
         7c:74:e0:38:ff:7f:63:10:81:5b:47:4e:ef:12:11:18:a5:f4:
         5a:cf:63:85:07:e6:78:f6:09:95:04:da:2b:04:c9:88:0e:aa:
         3d:ab:21:bd:19:8d:19:ec:c8:84:88:bd:78:46:60:4d:b1:9b:
         7e:f5:bb:d9:0c:b9:78:db:9a:bd:ad:14:8b:97:38:92:4f:c0:
         c6:22:dd:dc:23:60:4f:1d:cc:5b:bb:9a:6f:31:6e:ed:90:71:
         c7:4a:61:ec
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUSVh9jmoDR+ZdcjoN26MQ8Y3khiAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDVjM2Q1ZTcwZmM5YWQxMGJhOTBkNDVkYzY2NDU0ZTll
M2ExNDZhODAeFw0yMzA5MTkxMTI3MjZaFw0yNDA5MTcxMTMyMjZaMDMxMTAvBgNV
BAMTKEYzRUM2ODE1RkFFMzJGNDg3MUVENUFDQUUzRDA2N0I2RDgzMzQ0RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuHyhEHi9Xs9M7pcGgP0CCiX6B
8p7F3l5ab58tlCob3lXoJq7yWxUCtdyZKYBlv9U6J9eHl+S+c/3wuwMcfFQS5pLc
aU+F2rTpbtFVuYQPqifzNARWWjW9Lb4UMYttF0fqw5DiUL2dXxl2RhNXL1Oxr636
6wrus5MoMaujrIFKG/36fYy6GCKYvlRVl62NTWL3WaIwx9WhKb+L/Sn/cGy+mrY2
tB6SLSZarYHx0VqZprZomto+7lSmdXykm4f7loChgEI8Fkgl7KjWHKuer3ioO7WF
JlkKIT+MtwoCedr19kZ6H7dv3c9kBeDWfTs2ylochnispw+DUyBgdy91sA+pAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQU8+xoFfrjL0hx7VrK49BnttgzROYwHwYDVR0j
BBgwFoAU1cPV5w/JrRC6kNRdxmRU6eOhRqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYtMWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYx
NjdkLzAvRDVDM0Q1RTcwRkM5QUQxMEJBOTBENDVEQzY2NDU0RTlFM0ExNDZBOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjUFY1d19KclJDNmtOUmR4bVJVNmVP
aFJxZy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYt
MWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYxNjdkLzAvMzI2MTMxMzMzYTY0NjYzODMw
M2EzMTMyMzkzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMyMzEzNjMyMzkzMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHBCoT34ASkDANBgkqhkiG9w0BAQsFAAOCAQEAb57fyli9Myzem/Js
PxWz7xiS1hR9JMlvf9xrvr2oqASAzMbzLg2wvQomiQLqKapd5EB18u9uziATe82D
+NySjbiX25HtX/XDmC6BRyVgJQbE9qRi71v37kleEaImcf9CoThjzDZ6obr8Xa8h
8QaQaq38P2LdpNJxEQPcw2T7rrMmo3cF8924TIvrolr5MSA3nmhRgTrsIqzZrZ7K
/Q81AxAJfHTgOP9/YxCBW0dO7xIRGKX0Ws9jhQfmePYJlQTaKwTJiA6qPashvRmN
GezIhIi9eEZgTbGbfvW72Qy5eNuava0Ui5c4kk/AxiLd3CNgTx3MW7uabzFu7ZBx
x0ph7A==
-----END CERTIFICATE-----