Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a623030303a3a2f33382d3438203d3e20313937343634.roa
File:                     326131333a646638303a623030303a3a2f33382d3438203d3e20313937343634.roa (raw, json)
Hash identifier:          WOmBYSgrEeOj8FDW/DEC+h3iugGF54VmVY2Vhdf5UV8=
Subject key identifier:   64:E2:01:3E:A0:F3:70:39:B0:E6:9A:85:64:30:27:5D:8C:DD:1D:83
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       3FDD777896380605FA28A37E8D7F5953A5AC09D1
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a623030303a3a2f33382d3438203d3e20313937343634.roa
Signing time:             Fri 15 Dec 2023 22:01:50 +0000
ROA not before:           Fri 15 Dec 2023 21:56:50 +0000
ROA not after:            Fri 13 Dec 2024 22:01:50 +0000
asID:                     197464
IP address blocks:        2a13:df80:b000::/38 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:dd:77:78:96:38:06:05:fa:28:a3:7e:8d:7f:59:53:a5:ac:09:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Dec 15 21:56:50 2023 GMT
            Not After : Dec 13 22:01:50 2024 GMT
        Subject: CN=64E2013EA0F37039B0E69A856430275D8CDD1D83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d9:0a:d5:5d:3b:67:70:99:75:ab:84:2d:5c:
                    02:46:6d:4a:75:9e:72:42:c9:47:ec:1b:87:ea:54:
                    ce:57:9f:dd:e3:70:c3:e2:80:b9:f8:14:7b:7a:ef:
                    90:fd:52:f4:0c:7b:64:a1:31:be:62:10:3e:4e:4c:
                    15:a2:64:c4:45:31:ac:90:24:cf:8b:9b:86:d8:9a:
                    a0:88:38:62:7e:48:26:11:52:5c:34:a7:0b:21:44:
                    95:54:dc:01:7a:b2:99:fa:40:25:56:c8:fa:e5:d2:
                    c5:ea:a3:6a:6e:3a:67:60:91:fd:76:45:7e:e8:0e:
                    07:d1:db:62:d4:7f:36:1d:4d:a0:6b:47:7b:ad:a8:
                    a0:70:b2:18:ce:a2:3a:3d:d1:54:93:94:07:1e:64:
                    0e:2a:39:9e:78:19:f3:fb:23:cb:2f:b6:12:d1:de:
                    a2:31:eb:cd:b2:17:b8:d1:f4:ac:30:b2:1e:5e:fc:
                    ee:30:e6:b2:4a:50:91:85:22:01:d1:e3:6a:e5:a4:
                    e2:a3:43:37:d5:43:a0:fb:44:98:78:91:27:cb:4e:
                    6b:cc:3a:5a:92:c2:2e:0b:83:a9:91:e7:8a:70:5c:
                    fc:63:23:03:fc:b8:2a:c0:64:ee:f0:85:0b:f7:b9:
                    2b:f4:03:50:58:66:a6:7a:30:ab:e8:62:0d:5a:07:
                    14:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E2:01:3E:A0:F3:70:39:B0:E6:9A:85:64:30:27:5D:8C:DD:1D:83
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a623030303a3a2f33382d3438203d3e20313937343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:b000::/38

    Signature Algorithm: sha256WithRSAEncryption
         ae:08:b5:7d:59:e2:1e:24:39:1e:1c:a7:39:d0:47:0d:3a:c0:
         8e:30:f6:5e:20:f3:22:a7:21:0b:42:d2:e3:e2:fe:ff:34:69:
         e8:95:d5:32:08:4e:78:b0:83:56:cd:56:43:9f:54:83:94:6e:
         74:04:d5:78:f8:7d:a1:75:91:4f:5b:56:45:e9:45:e5:77:ed:
         d8:b5:ff:31:25:fa:1a:c5:36:27:26:09:3a:3d:2c:22:68:fc:
         5b:d7:a0:af:4d:b7:59:0f:51:69:f3:ee:40:87:c2:ee:19:87:
         82:8e:e5:71:53:f8:3d:d0:f5:d1:c3:d5:f5:34:2b:f7:f8:18:
         cd:79:f2:66:fd:b6:df:3d:7d:c1:e3:88:2b:f7:0d:03:a6:46:
         88:41:d3:e6:3f:35:18:15:ae:c4:ab:3d:c3:0a:e5:5b:79:1e:
         6e:c8:7e:ab:c4:2f:22:06:66:f7:be:34:e1:1f:ba:53:a6:eb:
         e5:69:7a:96:ad:cf:ba:fb:fb:c1:26:f7:4a:f9:60:6c:15:ff:
         5f:63:e7:f6:19:59:57:bd:08:da:c3:06:1d:86:39:ca:61:32:
         97:d0:70:b6:e8:5c:18:7d:a3:41:3f:a4:79:e6:b0:70:8c:07:
         c0:63:c4:67:c8:8e:74:b3:d2:af:00:7a:be:ac:2f:74:30:ac:
         86:f0:b7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----