Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343833303a3a2f34342d3438203d3e20323135323231.roa
File:                     326131343a373538313a343833303a3a2f34342d3438203d3e20323135323231.roa (raw, json)
Hash identifier:          5kwf5snTkmK7LtAATO7gOLvfpi+re7REaK8WEI28poM=
Subject key identifier:   80:EB:05:DC:F6:4B:44:4C:02:4E:8D:85:A0:96:FD:2F:42:4C:69:E9
Certificate issuer:       /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Certificate serial:       2599002C062E876CEE877779102161718EC479C8
Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343833303a3a2f34342d3438203d3e20323135323231.roa
Signing time:             Wed 27 Mar 2024 12:44:50 +0000
ROA not before:           Wed 27 Mar 2024 12:39:50 +0000
ROA not after:            Wed 26 Mar 2025 12:44:50 +0000
asID:                     215221
IP address blocks:        2a14:7581:4830::/44 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:99:00:2c:06:2e:87:6c:ee:87:77:79:10:21:61:71:8e:c4:79:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
        Validity
            Not Before: Mar 27 12:39:50 2024 GMT
            Not After : Mar 26 12:44:50 2025 GMT
        Subject: CN=80EB05DCF64B444C024E8D85A096FD2F424C69E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:df:f5:a2:c4:70:0f:b4:5c:b2:7b:06:d6:50:
                    4a:2a:e4:8a:f4:5e:9b:95:58:85:5a:10:a6:44:74:
                    c0:43:62:aa:9c:65:ce:95:8b:a7:84:32:4b:25:b0:
                    48:64:47:6f:81:f5:78:21:58:17:56:74:20:ef:0c:
                    df:bb:b5:7a:97:4c:9f:20:2f:a4:ec:7a:7c:6c:53:
                    1d:26:93:15:57:e1:c2:c5:9e:fc:fd:f7:b5:79:89:
                    52:fc:2b:d7:06:01:a9:52:86:30:52:ad:5d:f0:a3:
                    a2:17:0b:f5:c8:45:42:f6:7f:c3:5c:1f:7a:b8:b6:
                    ed:3c:9a:59:73:1f:92:0b:39:00:7e:bd:63:3c:9c:
                    43:c4:97:a3:45:57:61:8d:40:30:b6:c8:84:3d:e8:
                    9e:49:98:9b:b2:b9:49:5f:b7:8d:ea:59:74:88:e3:
                    72:27:89:09:98:75:7f:3d:d2:9d:54:68:c9:31:1c:
                    50:12:72:d7:8d:5f:86:1c:5b:eb:23:00:01:f4:8d:
                    09:73:8b:7f:cd:6e:06:29:e1:c0:09:bd:c3:da:d0:
                    20:e7:f2:9d:98:d5:fb:44:74:6d:76:1b:ef:60:3b:
                    d4:b2:52:0f:25:36:cb:46:02:4e:6d:ab:ba:e1:a9:
                    48:73:9e:d3:7c:17:81:21:74:2f:2a:78:5a:eb:fe:
                    27:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:EB:05:DC:F6:4B:44:4C:02:4E:8D:85:A0:96:FD:2F:42:4C:69:E9
            X509v3 Authority Key Identifier:
                keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343833303a3a2f34342d3438203d3e20323135323231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:4830::/44

    Signature Algorithm: sha256WithRSAEncryption
         3e:2b:74:0c:62:73:40:b6:a9:b8:72:87:2b:c4:72:90:d6:16:
         b3:7e:41:4d:5b:e2:5f:d4:61:17:93:0b:6b:0c:47:8a:eb:f9:
         a7:13:21:12:ae:68:01:9d:75:48:60:21:23:89:66:d3:89:ff:
         6b:12:72:71:e2:4a:61:12:b1:79:06:fc:12:c7:68:2d:8f:7d:
         42:67:34:f8:7d:8d:75:a0:40:0a:61:9a:e4:95:e3:8b:a9:d2:
         78:ab:3f:3a:7c:03:0e:ae:9c:eb:1b:61:c7:19:f3:2d:81:c7:
         79:e5:73:86:83:69:2d:d3:ca:a1:24:38:13:41:b0:fe:d6:ba:
         20:ce:2b:e1:5c:a7:c7:9e:9a:38:fc:79:ec:36:56:41:80:56:
         6a:f3:1b:75:ae:e5:be:33:4e:41:2f:e7:c2:5e:36:a3:b3:a5:
         ca:9c:d9:73:61:77:21:72:a3:92:e1:f5:39:5d:ce:d8:82:28:
         6e:7e:87:ba:41:da:67:91:73:42:99:34:12:88:88:75:b0:06:
         22:af:d9:60:60:78:a3:c9:1a:0d:9a:94:7d:d6:b6:09:f4:a3:
         54:8b:b2:ff:8a:f8:11:b2:45:a4:6f:29:ad:41:fa:1d:ef:0a:
         51:df:4d:f2:1c:e4:e9:e8:0a:84:27:b0:d6:15:f9:af:e1:46:
         12:42:a0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----