Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/326130373a323438363a343030663a3a2f34382d3438203d3e20323134393030.roa
File:                     326130373a323438363a343030663a3a2f34382d3438203d3e20323134393030.roa (raw, json)
Hash identifier:          JVYwjDBhfdlpoA1NjQkIy2F5GvCl3ZhHo6E2kO0aNUk=
Subject key identifier:   95:1D:88:9F:4C:03:AC:13:42:B2:39:E3:E1:7D:16:62:17:62:FA:7A
Certificate issuer:       /CN=07d362bdd7ca6e80e2c244437597bd47ef7a4fde
Certificate serial:       04C5AA8F6BF24C5979805CA13D3904F30DBD79AE
Authority key identifier: 07:D3:62:BD:D7:CA:6E:80:E2:C2:44:43:75:97:BD:47:EF:7A:4F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9NivdfKboDiwkRDdZe9R-96T94.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/326130373a323438363a343030663a3a2f34382d3438203d3e20323134393030.roa
Signing time:             Wed 22 May 2024 18:21:20 +0000
ROA not before:           Wed 22 May 2024 18:16:20 +0000
ROA not after:            Wed 21 May 2025 18:21:20 +0000
asID:                     214900
IP address blocks:        2a07:2486:400f::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c5:aa:8f:6b:f2:4c:59:79:80:5c:a1:3d:39:04:f3:0d:bd:79:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d362bdd7ca6e80e2c244437597bd47ef7a4fde
        Validity
            Not Before: May 22 18:16:20 2024 GMT
            Not After : May 21 18:21:20 2025 GMT
        Subject: CN=951D889F4C03AC1342B239E3E17D16621762FA7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5a:b7:ab:a4:1d:3f:77:55:a1:b5:cc:a2:26:
                    51:98:7a:57:1b:a3:ca:7e:c1:8a:53:dd:48:13:38:
                    43:94:ba:91:be:76:a3:46:93:a1:49:75:72:62:4c:
                    01:23:00:53:7b:2d:f0:43:36:65:db:9f:e4:e6:fa:
                    09:99:17:e8:75:86:83:36:ac:1c:83:0f:72:d4:33:
                    0e:3a:bb:5a:0b:fa:c9:9d:2f:e9:c7:3a:7a:e5:73:
                    74:d3:06:4e:48:c9:a2:46:9f:95:89:a8:24:92:43:
                    5d:10:b8:a6:b8:98:ad:1f:14:74:6c:ae:78:3a:6e:
                    0e:28:7b:4c:d6:2d:21:4e:29:a5:52:a9:89:78:b4:
                    14:dd:73:79:c2:92:fd:0b:d0:5d:64:67:54:59:6f:
                    b6:5f:77:f9:10:44:ce:bd:d7:0c:0b:54:31:8d:e9:
                    09:9b:4f:79:2a:02:da:61:8a:f6:8c:fc:6a:3d:0a:
                    6b:92:5a:93:ba:56:57:d2:a6:0b:bf:3a:aa:77:2e:
                    91:1e:5e:eb:85:2d:b1:0c:15:c0:34:44:3b:eb:99:
                    c1:03:fe:72:72:af:c8:8e:4b:5c:81:78:6a:a8:94:
                    d3:1b:fc:dc:b9:e3:04:fe:b9:93:ef:27:02:73:e4:
                    96:90:2d:5d:83:5d:b0:75:00:24:07:85:2b:5d:e2:
                    1d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:1D:88:9F:4C:03:AC:13:42:B2:39:E3:E1:7D:16:62:17:62:FA:7A
            X509v3 Authority Key Identifier:
                keyid:07:D3:62:BD:D7:CA:6E:80:E2:C2:44:43:75:97:BD:47:EF:7A:4F:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9NivdfKboDiwkRDdZe9R-96T94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/326130373a323438363a343030663a3a2f34382d3438203d3e20323134393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:2486:400f::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:1d:ba:ce:71:1e:35:fa:7e:b6:b0:6e:d0:58:5b:2d:6b:20:
         96:df:31:bb:24:3c:bf:dd:66:02:4b:80:db:4d:02:00:02:ab:
         b8:2e:5f:d0:29:2a:4f:15:88:96:96:2e:3e:15:a9:71:b7:70:
         72:7a:4c:ed:1f:05:f9:02:db:78:1f:fc:d8:52:ef:21:9d:2e:
         7f:54:2c:1f:78:0d:9d:12:d5:a1:cc:a7:6c:8c:f1:39:87:a3:
         3b:1a:95:72:f5:b8:f2:a1:20:7a:07:f6:82:f0:41:22:ce:5c:
         bd:16:9c:f6:05:b8:84:3e:a1:78:35:74:09:ed:2b:d3:65:82:
         92:2b:12:dc:3f:97:85:6e:67:d3:f3:37:ac:9e:95:b5:3d:1b:
         59:59:91:71:5b:54:b8:c8:78:e8:29:01:21:7a:3c:65:e0:d1:
         68:88:63:ef:92:e0:61:24:e3:40:69:00:3c:b3:39:4f:e8:f2:
         79:1c:97:39:52:9b:7c:13:f5:b4:8b:ac:c7:8d:81:13:b3:50:
         6d:1b:5b:a4:86:44:73:3a:80:66:e1:df:2d:fc:e0:fd:f1:e1:
         1c:53:a1:a9:33:22:0e:89:78:ce:91:ef:d1:48:4d:83:9c:bf:
         43:ba:c9:40:03:08:b3:7a:80:e6:92:85:fe:8f:92:cb:e4:5d:
         45:12:d0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----