Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a623030623a3a2f34382d3438203d3e203537383730.roa
File:                     326131333a646638373a623030623a3a2f34382d3438203d3e203537383730.roa (raw, json)
Hash identifier:          +78JJOixydl/O9SKV+DapJnkklQ/aDCXxCHsuKinb7M=
Subject key identifier:   11:6C:C3:FF:18:72:3C:C9:93:50:C4:79:50:08:01:4F:23:9D:2B:AC
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       1B4A30813A84938DFF146561F9BBA01F5FF4DDF9
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a623030623a3a2f34382d3438203d3e203537383730.roa
Signing time:             Fri 16 Jun 2023 20:08:38 +0000
ROA not before:           Fri 16 Jun 2023 20:03:38 +0000
ROA not after:            Fri 14 Jun 2024 20:08:38 +0000
asID:                     57870
IP address blocks:        2a13:df87:b00b::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:4a:30:81:3a:84:93:8d:ff:14:65:61:f9:bb:a0:1f:5f:f4:dd:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Jun 16 20:03:38 2023 GMT
            Not After : Jun 14 20:08:38 2024 GMT
        Subject: CN=116CC3FF18723CC99350C4795008014F239D2BAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0b:be:94:74:10:cb:0a:1a:29:3a:a1:19:02:
                    a4:d8:20:f3:e0:61:e5:77:12:76:32:c6:ce:61:fa:
                    76:04:d0:de:bf:66:63:e7:c9:70:07:fe:f4:36:36:
                    01:7a:d8:1b:ac:6e:d5:5a:12:ef:b7:c9:74:af:52:
                    15:f1:75:99:5b:80:42:25:cb:0e:96:59:3e:1e:64:
                    ac:dd:8a:db:d3:f7:da:c5:a2:f3:c8:29:a5:6a:b3:
                    a3:df:58:10:15:24:6a:b4:39:b3:3c:47:66:d1:40:
                    dd:2d:78:20:f1:ee:a1:e0:ab:24:60:a2:dd:ed:65:
                    91:62:c9:ad:ae:e8:e3:c2:6b:b7:51:ba:45:0e:2a:
                    c6:d9:37:80:f3:b1:2e:24:4c:5c:11:bf:f9:91:8d:
                    93:fc:fb:71:b2:fb:57:50:a0:eb:be:77:24:7e:66:
                    cc:45:97:ad:dd:02:dc:f2:9d:ed:36:30:b8:b7:63:
                    10:f2:1a:87:b8:6f:e5:bc:a6:87:5c:2a:07:f7:d7:
                    ca:22:be:c6:19:4e:c1:31:32:ca:f6:f0:12:47:c2:
                    d4:81:44:a5:9c:50:34:48:57:05:88:2e:2b:d7:e0:
                    e0:0f:5c:a3:f8:87:89:9e:5c:91:62:75:39:43:d3:
                    ac:f1:b2:d8:75:19:10:17:fa:13:bf:92:d7:21:04:
                    83:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:6C:C3:FF:18:72:3C:C9:93:50:C4:79:50:08:01:4F:23:9D:2B:AC
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a623030623a3a2f34382d3438203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:a4:73:10:bf:65:f9:c1:15:64:4f:c3:ab:cc:c5:fc:43:cb:
         3f:4b:3c:22:2b:0f:f4:f0:02:a0:eb:f6:99:df:e3:52:bd:93:
         a9:c0:cc:eb:e5:63:95:6f:28:af:a3:73:c7:35:12:87:d6:ad:
         ab:a4:a7:f2:58:6a:90:a1:58:31:35:03:05:b1:34:2c:e0:b0:
         1c:c6:b3:94:05:24:0d:2e:8f:00:ec:50:97:b4:06:e2:39:b0:
         52:c6:98:c5:93:a8:d9:79:e7:c7:5d:b0:59:38:3b:15:c8:32:
         06:50:e2:93:ef:94:9a:26:b0:56:d3:a3:56:8d:ff:c6:bf:bd:
         53:b5:a4:e3:74:61:47:38:b2:5b:34:86:f2:cd:89:95:e1:ca:
         ad:25:42:28:f4:00:79:e2:bd:ff:ce:e5:17:3b:bd:23:27:73:
         e7:80:67:aa:ed:d5:f2:d3:8f:a0:6e:5e:da:1c:2e:46:cd:11:
         d9:b5:bc:e6:b4:cc:4d:f9:64:8c:4b:57:2b:53:bd:71:3f:10:
         7e:79:30:0a:8f:0a:e9:09:fe:e5:eb:f7:ba:17:50:1d:ee:b7:
         26:b6:90:26:5c:71:62:5c:15:aa:cb:70:94:e3:b3:7e:e5:85:
         95:13:1f:33:40:62:06:3a:99:6d:c9:aa:38:16:b7:c0:56:86:
         fe:be:ed:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----