Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a6e77863-5f7e-4f53-bc36-887d1616f828/1/326130663a383563313a3333313a3a2f34382d3438203d3e20323135383835.roa
File:                     326130663a383563313a3333313a3a2f34382d3438203d3e20323135383835.roa (raw, json)
Hash identifier:          ig8jYkjS5pkS4LkobyiUpR3pXzvq8g8KG7sJwWc1dSs=
Subject key identifier:   3F:BA:EB:6D:48:EE:48:FC:ED:D7:32:AD:DB:6C:8C:CE:A0:21:48:63
Certificate issuer:       /CN=EF9F2D6EC712DCE081DA9CED1F956372EA648756
Certificate serial:       32A0532255ACC544524A1B5C1CA5337BDA6DC25A
Authority key identifier: EF:9F:2D:6E:C7:12:DC:E0:81:DA:9C:ED:1F:95:63:72:EA:64:87:56
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/EF9F2D6EC712DCE081DA9CED1F956372EA648756.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a6e77863-5f7e-4f53-bc36-887d1616f828/1/326130663a383563313a3333313a3a2f34382d3438203d3e20323135383835.roa
Signing time:             Fri 31 May 2024 02:07:14 +0000
ROA not before:           Fri 31 May 2024 02:02:14 +0000
ROA not after:            Fri 30 May 2025 02:07:14 +0000
asID:                     215885
IP address blocks:        2a0f:85c1:331::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a0:53:22:55:ac:c5:44:52:4a:1b:5c:1c:a5:33:7b:da:6d:c2:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF9F2D6EC712DCE081DA9CED1F956372EA648756
        Validity
            Not Before: May 31 02:02:14 2024 GMT
            Not After : May 30 02:07:14 2025 GMT
        Subject: CN=3FBAEB6D48EE48FCEDD732ADDB6C8CCEA0214863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:54:2f:d7:c4:29:21:75:f3:fc:7e:33:11:b3:
                    d1:e6:1c:c9:25:19:53:7b:ee:2a:3d:f6:b0:ca:5e:
                    b2:3a:12:cd:50:ef:c8:d2:19:69:ce:1d:01:19:38:
                    34:67:8a:68:8d:65:c8:c2:8a:cf:84:d9:db:05:88:
                    43:dc:8b:bb:93:48:66:2a:9c:73:30:12:c9:62:63:
                    3c:bb:61:e5:b7:5d:00:38:50:57:a5:98:1f:c3:39:
                    fc:59:00:6f:b6:ed:ca:82:df:6d:02:9a:72:62:0c:
                    8c:bb:29:52:79:47:28:d6:f7:e7:a3:62:c6:a6:46:
                    a8:f1:46:be:7b:bd:12:fb:98:af:dc:ee:3c:a3:6e:
                    63:38:45:98:c0:d8:bb:0d:25:8b:7e:b2:dc:1c:6e:
                    77:3b:c9:28:d9:f3:44:1b:a2:e8:98:3b:12:40:ab:
                    85:b7:e3:6b:3d:82:63:da:f5:d2:02:bb:ec:27:c5:
                    2d:6e:61:16:6d:0d:e3:80:db:53:b1:01:72:8c:eb:
                    01:e5:26:ba:a3:e3:64:c1:2f:d4:9e:17:43:ab:0c:
                    0e:81:8b:87:77:e6:b9:e2:64:b9:db:e1:4c:5c:d3:
                    2e:0e:e7:74:7a:4a:0c:31:6a:79:93:17:b7:c4:87:
                    a9:54:d9:34:0b:bc:2d:23:d7:6d:a2:19:ee:74:a7:
                    8e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BA:EB:6D:48:EE:48:FC:ED:D7:32:AD:DB:6C:8C:CE:A0:21:48:63
            X509v3 Authority Key Identifier:
                keyid:EF:9F:2D:6E:C7:12:DC:E0:81:DA:9C:ED:1F:95:63:72:EA:64:87:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a6e77863-5f7e-4f53-bc36-887d1616f828/1/EF9F2D6EC712DCE081DA9CED1F956372EA648756.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/EF9F2D6EC712DCE081DA9CED1F956372EA648756.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a6e77863-5f7e-4f53-bc36-887d1616f828/1/326130663a383563313a3333313a3a2f34382d3438203d3e20323135383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:331::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:ea:af:5e:a0:70:23:42:cf:6f:1a:e2:15:e4:d0:07:de:ba:
         e1:cd:63:cf:bf:a0:ad:a5:7a:32:a7:cd:74:4c:69:65:25:5f:
         05:e8:77:c0:17:4b:fd:bb:18:a0:04:8e:08:f1:31:0f:86:9c:
         1a:b4:9f:18:1f:dd:ce:3d:c3:e5:01:33:2d:38:ac:61:33:fc:
         f9:bc:51:ad:b9:a4:45:31:3a:b0:8a:ee:d4:b9:e5:0c:13:f2:
         e1:57:30:8a:20:cd:49:94:43:5d:71:05:11:d0:6b:74:ac:bc:
         83:d5:f1:ba:e7:67:94:82:e3:83:cd:05:79:01:d0:ac:51:ac:
         d1:b4:d3:5a:1a:31:b6:13:ce:d0:51:17:3f:8a:c5:53:ac:cb:
         17:53:a3:93:28:a0:77:2c:ab:a1:a0:69:72:03:b0:7e:b7:7a:
         9b:e2:5f:c8:a1:2e:c7:f6:1a:5c:69:f7:21:b1:7d:40:03:b6:
         2a:b7:45:a6:ed:53:6c:6d:d5:42:11:a0:6b:54:41:5b:1b:c9:
         97:f5:58:86:b4:72:9b:39:c8:17:63:bd:32:12:42:27:8f:4d:
         57:b0:6b:b9:5a:ab:b9:05:69:3d:bc:99:23:b2:eb:df:c5:43:
         fa:a0:6c:68:67:00:41:55:32:27:1c:40:34:05:6b:97:81:5a:
         d5:13:df:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----