Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a38303a3a2f34342d3434203d3e203632343134.roa
File:                     326131333a646638303a38303a3a2f34342d3434203d3e203632343134.roa (raw, json)
Hash identifier:          d57iK+9diaJqw9LnJH1gH7cf4dJlGm9/6sSdU9GNTOQ=
Subject key identifier:   BC:DA:50:32:6A:9C:FF:FC:A9:3B:F7:02:7A:EB:A1:54:33:F6:5B:00
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       6E85B431D940F7966FD308DFD760D83149550E6B
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a38303a3a2f34342d3434203d3e203632343134.roa
Signing time:             Fri 16 Jun 2023 20:08:44 +0000
ROA not before:           Fri 16 Jun 2023 20:03:44 +0000
ROA not after:            Fri 14 Jun 2024 20:08:44 +0000
asID:                     62414
IP address blocks:        2a13:df80:80::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:85:b4:31:d9:40:f7:96:6f:d3:08:df:d7:60:d8:31:49:55:0e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Jun 16 20:03:44 2023 GMT
            Not After : Jun 14 20:08:44 2024 GMT
        Subject: CN=BCDA50326A9CFFFCA93BF7027AEBA15433F65B00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ca:d0:7a:c4:ae:97:cf:de:64:29:1f:8e:30:
                    f2:d5:c1:71:19:72:6f:6f:26:1b:f6:6e:24:c2:ef:
                    fe:00:54:57:7b:64:54:ea:7c:47:7d:9c:7a:9d:11:
                    e3:c8:ad:7c:f2:a8:ea:66:3a:1b:01:c0:a9:21:5e:
                    e9:ee:df:90:a2:32:93:9e:2f:02:88:d9:7e:fe:09:
                    1a:ca:d7:79:21:8c:ff:bd:52:6c:84:1c:cd:b2:95:
                    76:15:e7:87:17:15:90:96:0c:06:f2:bc:54:c6:3a:
                    91:35:f9:a5:ff:ba:ac:e3:d4:08:f6:9a:62:1f:4f:
                    23:c0:de:88:75:29:99:2a:66:3c:28:77:6b:5b:6b:
                    c0:7b:5b:fe:24:3a:ca:54:46:3b:d5:3b:98:69:6e:
                    06:43:5d:c3:eb:d7:2c:ab:1e:70:93:8d:fe:8c:33:
                    a1:f9:9c:93:cd:07:2f:e7:f9:52:39:10:26:fe:79:
                    44:d3:e1:21:af:90:b6:0f:db:b0:d8:4a:9a:26:17:
                    2b:c7:be:78:20:97:32:80:8f:64:22:a8:b2:b6:1b:
                    e1:5f:65:b8:b9:26:ec:6f:94:30:e6:e5:1b:aa:83:
                    a3:9e:28:e2:bd:a2:12:f1:53:82:a4:07:77:f5:8b:
                    94:fd:c4:a3:8b:16:de:75:d3:5d:9e:49:18:60:43:
                    a1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:DA:50:32:6A:9C:FF:FC:A9:3B:F7:02:7A:EB:A1:54:33:F6:5B:00
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a38303a3a2f34342d3434203d3e203632343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:80::/44

    Signature Algorithm: sha256WithRSAEncryption
         89:7f:16:53:e8:14:68:5c:73:2b:51:37:4f:88:9f:84:e9:a0:
         ba:ba:0e:de:23:c2:d8:03:a0:f5:9e:2f:b1:f2:a7:c4:90:a5:
         fc:37:3c:35:6d:0c:f7:53:e2:9a:c4:54:81:f4:ce:c0:7b:ad:
         0b:72:37:ba:e9:ab:74:4c:8c:2f:13:40:9a:5a:59:26:46:88:
         37:88:a2:6f:79:e6:64:34:38:ea:c9:76:fe:9a:36:d9:e1:bc:
         c3:89:90:25:7c:9a:9b:13:07:2a:a5:e5:5a:17:78:d1:3c:57:
         cc:be:2f:89:48:7e:63:68:59:0f:ab:51:a2:8d:50:3a:1a:a7:
         34:dc:23:d9:b6:89:86:bc:e2:75:f3:f2:e7:57:d7:a2:2e:56:
         f6:05:74:64:c5:ce:74:88:6f:3b:a6:f7:ee:66:ab:de:3d:1d:
         d7:39:67:5b:8b:c4:52:d7:2a:37:f7:d0:8f:24:2e:e0:da:85:
         b5:b7:98:52:94:28:2a:cb:3a:31:e5:03:85:fd:40:8a:18:ac:
         f4:00:97:a0:24:c7:4f:0e:7a:10:74:15:46:6c:3f:0b:5f:11:
         4e:ce:93:77:29:9f:57:65:53:7c:d8:a6:37:49:bf:e6:cf:30:
         83:da:40:a3:d3:b8:d9:95:ba:2c:cf:df:70:da:e7:6f:ee:eb:
         74:36:2e:1f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----