Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638353a626530303a3a2f34302d3634203d3e20323136333432.roa
File:                     326131333a646638353a626530303a3a2f34302d3634203d3e20323136333432.roa (raw, json)
Hash identifier:          H694sZrrcvJi3uPwJacwlc64dRpJ01Da1ez/aJo0t44=
Subject key identifier:   3E:05:3D:95:4E:A1:48:69:A0:5C:1C:6C:5D:C7:99:2F:E7:86:5A:E3
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       2AEBD43DB3A982C8AE972993AE5975CAA059C881
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638353a626530303a3a2f34302d3634203d3e20323136333432.roa
Signing time:             Wed 06 Dec 2023 22:33:47 +0000
ROA not before:           Wed 06 Dec 2023 22:28:47 +0000
ROA not after:            Wed 04 Dec 2024 22:33:47 +0000
asID:                     216342
IP address blocks:        2a13:df85:be00::/40 maxlen: 64

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:eb:d4:3d:b3:a9:82:c8:ae:97:29:93:ae:59:75:ca:a0:59:c8:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Dec  6 22:28:47 2023 GMT
            Not After : Dec  4 22:33:47 2024 GMT
        Subject: CN=3E053D954EA14869A05C1C6C5DC7992FE7865AE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:de:ae:55:ed:b1:1d:f6:d9:30:d2:ad:a0:da:
                    5d:fe:03:01:05:ab:e7:b4:ef:d7:3c:63:22:9b:a6:
                    71:f7:c7:1e:a5:88:5a:d2:c2:b9:c6:bc:d6:50:d3:
                    e0:a2:ae:fe:f2:ba:44:09:d8:30:97:ca:93:c9:3d:
                    eb:1f:1d:6e:c6:6e:23:78:1b:ed:38:6e:18:f4:6c:
                    67:16:e0:28:90:88:22:53:c4:35:db:da:ac:ae:73:
                    60:37:2d:f6:5a:38:60:a4:3b:0d:a0:2e:5f:78:36:
                    3a:46:71:7a:30:f0:64:b4:bb:88:a6:d8:ca:b6:02:
                    04:86:7a:d2:1a:66:b6:a3:7d:ad:b1:de:d6:48:f5:
                    fc:20:e2:ae:fc:b7:a3:b0:67:23:3f:51:80:05:cf:
                    cb:b9:94:5a:e8:12:37:52:2b:b2:59:ea:2e:89:61:
                    b4:7d:97:f3:22:a0:a4:0b:75:74:9e:e9:12:7f:0e:
                    05:b3:81:33:ad:51:61:bf:c9:6a:35:f1:c4:39:95:
                    53:68:7c:f9:3a:ee:ad:32:5d:44:d3:96:11:73:84:
                    a2:00:71:b5:a3:b6:ed:38:e9:a5:7c:27:c6:a0:ef:
                    b4:8a:40:66:06:07:61:19:46:82:23:b4:1c:ae:9c:
                    17:13:35:39:f9:18:f6:3b:2b:5a:aa:9a:9b:ec:95:
                    b1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:05:3D:95:4E:A1:48:69:A0:5C:1C:6C:5D:C7:99:2F:E7:86:5A:E3
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638353a626530303a3a2f34302d3634203d3e20323136333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df85:be00::/40

    Signature Algorithm: sha256WithRSAEncryption
         73:e8:d8:35:09:25:86:6b:4e:f0:16:16:18:f3:b8:d6:08:04:
         7f:27:07:18:43:d2:79:c1:a7:56:a0:07:4c:61:b7:7b:25:44:
         36:d1:35:50:f2:7d:8a:ee:d1:82:a7:fa:2b:4b:a1:28:3d:b5:
         88:08:8a:bd:3b:1a:85:03:a1:b0:a3:bd:74:a2:a2:ca:04:b2:
         74:d3:1b:14:58:9f:cf:3f:6d:76:93:bd:6a:c8:43:8a:f7:6a:
         47:23:f9:db:f5:8f:57:52:44:a3:4b:34:22:75:fe:72:5b:08:
         2e:cf:4b:29:8e:bf:34:b3:87:70:05:86:71:96:b1:ef:71:8b:
         9d:27:7c:0c:26:5a:6d:e9:ca:a5:a2:a3:2d:a2:6e:31:b4:b7:
         a6:f8:03:28:ce:ec:10:ef:94:0a:11:c6:93:bc:c6:f4:d1:4b:
         6d:fd:de:57:19:8f:9e:c6:30:fa:6d:53:56:47:1b:51:98:a1:
         57:bb:87:f7:3d:d3:77:5b:c3:c2:78:c0:8a:50:e8:8e:f2:a2:
         fd:bb:d4:77:10:11:a1:74:ba:66:09:09:aa:1c:ad:8c:76:c5:
         b3:79:d4:cc:e7:82:82:4c:49:dc:b2:d1:18:fa:1c:92:66:68:
         fb:c4:95:54:af:90:c0:8e:84:8e:e4:89:2f:02:be:ce:ab:02:
         99:f7:77:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----