Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638323a623030623a3a2f34382d3438203d3e203537383730.roa
File:                     326131333a646638323a623030623a3a2f34382d3438203d3e203537383730.roa (raw, json)
Hash identifier:          XbSaS2JABbDHPzg+WnxxUaVzvRSmxVGm0MF0/Ru9V8o=
Subject key identifier:   F1:87:D2:ED:CE:11:3E:D6:2B:A0:A3:78:A0:2B:81:47:32:59:F5:DF
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       147848A868BE5670BB7954F51DA0774BC54F7F60
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638323a623030623a3a2f34382d3438203d3e203537383730.roa
Signing time:             Fri 16 Jun 2023 20:08:48 +0000
ROA not before:           Fri 16 Jun 2023 20:03:48 +0000
ROA not after:            Fri 14 Jun 2024 20:08:48 +0000
asID:                     57870
IP address blocks:        2a13:df82:b00b::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:78:48:a8:68:be:56:70:bb:79:54:f5:1d:a0:77:4b:c5:4f:7f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Jun 16 20:03:48 2023 GMT
            Not After : Jun 14 20:08:48 2024 GMT
        Subject: CN=F187D2EDCE113ED62BA0A378A02B81473259F5DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:39:4b:89:04:d8:36:55:ab:a3:f8:19:8c:ef:
                    ea:85:8d:05:91:75:29:06:a4:5a:92:aa:d5:23:9d:
                    3a:77:fa:30:2a:16:1c:56:e9:f0:e7:c4:4e:b2:95:
                    86:44:7c:39:da:74:34:77:75:bf:47:8e:f1:7a:f3:
                    48:39:6a:cb:31:11:9d:15:7e:33:05:e7:7f:72:8a:
                    2e:e6:a6:1b:58:47:c8:51:a9:41:1e:99:04:df:14:
                    20:12:0d:00:26:3a:05:7f:ac:49:20:b9:bf:d2:34:
                    14:53:30:a5:5d:01:40:28:e1:2f:30:42:20:33:c1:
                    a6:b4:eb:79:1e:a2:e4:ca:76:89:0a:23:63:f4:7e:
                    ef:80:b8:55:08:8d:a7:09:e7:5d:59:67:be:b1:8a:
                    5e:8f:85:84:cd:2c:3e:64:95:c1:71:55:68:49:6b:
                    5b:b6:3f:00:5b:83:0e:79:74:60:8b:5e:8e:22:c3:
                    56:c9:0e:44:44:da:44:63:47:eb:b6:5d:47:89:eb:
                    55:38:21:5b:39:fd:b6:e3:6e:cf:b8:4f:88:ce:f3:
                    c0:7d:cf:93:9e:b3:f0:31:ea:12:36:58:9d:cc:11:
                    a8:40:e8:a9:74:4a:90:3c:6a:d6:1a:aa:1b:17:0d:
                    cf:1c:93:a4:9d:4f:28:cc:3d:d7:23:39:7d:30:47:
                    68:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:87:D2:ED:CE:11:3E:D6:2B:A0:A3:78:A0:2B:81:47:32:59:F5:DF
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638323a623030623a3a2f34382d3438203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df82:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:49:3c:12:a2:8a:24:ad:09:70:26:97:bd:14:ce:15:e7:ee:
         83:f1:e8:2e:3f:df:47:48:86:e2:f7:df:81:52:20:6a:8b:ce:
         f4:25:5b:7e:f3:a2:bb:89:9b:26:f5:9e:5b:04:6c:46:9d:91:
         df:b2:91:ae:06:19:0b:ad:b5:98:a9:91:0c:76:de:21:1b:b2:
         b9:bb:18:81:f9:ab:90:00:31:fe:c7:45:9f:01:57:ee:34:1c:
         6e:3e:5b:eb:30:99:e0:db:e3:9e:9e:9d:e0:d9:26:f4:cb:33:
         93:a6:61:66:5d:43:6b:dc:dd:3e:e1:d2:10:e4:49:ca:de:12:
         95:af:65:cf:a6:9a:3a:ea:20:9c:20:ba:47:68:3e:99:99:a0:
         84:df:45:1b:76:9d:da:82:8b:94:0d:de:d6:73:e1:4f:69:71:
         50:9d:cf:85:60:fe:03:56:c4:3d:68:cf:16:99:53:a7:54:f6:
         4c:41:cb:62:c0:3b:68:1b:4d:58:09:b3:f2:3a:84:8b:08:64:
         9d:99:61:b3:cd:d4:81:7e:c2:7c:db:28:5c:8d:02:de:cc:19:
         a7:f3:1e:10:5b:e1:dc:48:5a:c3:c9:71:68:d5:22:f3:84:c4:
         fd:6d:1c:a1:e4:a7:a5:95:e8:f8:b1:38:bb:f5:d7:a4:31:61:
         b8:1d:2a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----