Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363030623a3a2f34382d3438203d3e20313939363933.roa
File:                     326130373a353463373a363030623a3a2f34382d3438203d3e20313939363933.roa (raw, json)
Hash identifier:          8qCQlnkcKS3Yxy7TUsz7jUEy7pH0V18cj7ijoBjZ9Rw=
Subject key identifier:   24:D4:BD:70:0D:BD:21:A5:55:6E:84:C5:2F:C7:B5:52:63:85:F3:4F
Certificate issuer:       /CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
Certificate serial:       6790B37EADACA768DEA05EBB754FB73651A577CF
Authority key identifier: F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363030623a3a2f34382d3438203d3e20313939363933.roa
Signing time:             Mon 04 Mar 2024 01:05:26 +0000
ROA not before:           Mon 04 Mar 2024 01:00:26 +0000
ROA not after:            Mon 03 Mar 2025 01:05:26 +0000
asID:                     199693
IP address blocks:        2a07:54c7:600b::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:90:b3:7e:ad:ac:a7:68:de:a0:5e:bb:75:4f:b7:36:51:a5:77:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
        Validity
            Not Before: Mar  4 01:00:26 2024 GMT
            Not After : Mar  3 01:05:26 2025 GMT
        Subject: CN=24D4BD700DBD21A5556E84C52FC7B5526385F34F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1d:bc:ed:ef:67:40:34:1a:93:65:a9:ea:81:
                    2b:66:d9:ab:96:47:26:3b:80:75:8c:37:b8:be:f9:
                    ca:b1:2e:92:26:26:41:14:89:0c:8c:dd:30:a2:8b:
                    b4:7e:1f:d6:fc:13:ab:5b:fd:0a:91:39:2e:83:4c:
                    44:3a:e0:12:1c:af:16:8f:fb:18:9a:a1:c8:5d:ed:
                    df:98:70:2b:8a:1f:79:1b:d7:2d:f9:b6:30:82:ca:
                    27:bf:19:52:bf:bc:ef:8a:ed:07:59:60:67:77:d9:
                    90:00:f2:72:df:39:3b:4e:82:b8:9f:d8:ad:03:37:
                    97:3f:b6:68:d8:6d:9d:ac:d7:0d:4d:73:c1:62:bf:
                    93:de:7b:a1:6e:67:66:dc:0a:03:42:95:0f:c0:99:
                    9a:89:29:15:e3:0e:25:26:92:d1:94:d0:17:4f:cf:
                    ce:85:e0:9f:62:c8:d4:a9:cf:84:6a:68:8d:7e:99:
                    e9:17:12:36:10:31:99:f3:d6:1d:d0:a3:dc:8f:eb:
                    d3:d8:78:d5:cb:d2:3f:fb:14:68:6a:96:a4:a1:cd:
                    ec:16:60:c1:5c:c4:4d:ba:97:1e:48:98:cd:d4:e7:
                    dd:fc:43:27:87:0a:be:59:d1:9d:3d:13:dc:af:d7:
                    1d:48:cd:9c:0d:54:da:d8:19:7d:16:4f:36:5c:6e:
                    b0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D4:BD:70:0D:BD:21:A5:55:6E:84:C5:2F:C7:B5:52:63:85:F3:4F
            X509v3 Authority Key Identifier:
                keyid:F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363030623a3a2f34382d3438203d3e20313939363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c7:600b::/48

    Signature Algorithm: sha256WithRSAEncryption
         d7:12:23:02:b4:b4:ee:4b:15:b0:95:94:d1:1d:42:d2:5f:51:
         32:7b:52:9c:75:b9:12:a5:11:33:d8:4d:f3:25:6e:aa:97:6e:
         d3:19:f3:c1:b2:8a:ba:9b:1c:27:fe:90:75:2a:4b:f9:72:0a:
         dd:07:ab:c7:22:c2:3d:6b:26:2f:51:74:d7:c8:8b:01:91:a9:
         af:02:27:3e:6f:7b:8c:28:73:96:a2:a3:a1:d0:9a:27:57:d2:
         58:3d:ac:a6:ad:54:b8:f9:d6:3f:ba:c3:9b:7e:b2:a6:9f:9f:
         dc:d4:6b:7c:4b:62:33:cb:76:62:0e:fd:67:85:4d:8f:9d:24:
         67:fa:80:12:9a:cb:6d:8c:65:fc:29:c6:42:9f:95:a4:f3:d2:
         5c:7b:17:70:92:8a:24:bc:71:f7:c3:58:32:b7:06:df:68:b8:
         42:2a:9e:d7:5b:84:9e:99:ac:bd:83:a9:ae:4a:68:89:db:0d:
         31:d9:9e:ca:fa:85:d5:8c:12:53:11:d1:d1:8e:97:be:81:f3:
         7f:6d:95:01:54:fb:c1:27:b4:28:8a:fb:e1:54:08:28:f2:2f:
         1f:e4:1c:65:35:b3:82:c5:b5:c6:27:ce:12:02:d0:71:bc:6b:
         b8:90:68:ea:7a:33:f1:93:06:f9:e3:99:a0:58:92:f2:fe:79:
         a0:c8:8a:54
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUZ5Czfq2sp2jeoF67dU+3NlGld88wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFBQkQ5NDI5RjNBNzMzNjY4Q0FDNjk4QzExM0E5RTM0
M0M5OUIzRTAeFw0yNDAzMDQwMTAwMjZaFw0yNTAzMDMwMTA1MjZaMDMxMTAvBgNV
BAMTKDI0RDRCRDcwMERCRDIxQTU1NTZFODRDNTJGQzdCNTUyNjM4NUYzNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZHbzt72dANBqTZanqgStm2auW
RyY7gHWMN7i++cqxLpImJkEUiQyM3TCii7R+H9b8E6tb/QqROS6DTEQ64BIcrxaP
+xiaochd7d+YcCuKH3kb1y35tjCCyie/GVK/vO+K7QdZYGd32ZAA8nLfOTtOgrif
2K0DN5c/tmjYbZ2s1w1Nc8Fiv5Pee6FuZ2bcCgNClQ/AmZqJKRXjDiUmktGU0BdP
z86F4J9iyNSpz4RqaI1+mekXEjYQMZnz1h3Qo9yP69PYeNXL0j/7FGhqlqShzewW
YMFcxE26lx5ImM3U5938QyeHCr5Z0Z09E9yv1x1IzZwNVNrYGX0WTzZcbrC7AgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUJNS9cA29IaVVboTFL8e1UmOF808wHwYDVR0j
BBgwFoAU8avZQp86czZoysaYwROp40PJmz4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjUzNmExZTQtM2JmMC00MzUyLTkwNjEtNjY2OTRkMmJj
YmQzLzAvRjFBQkQ5NDI5RjNBNzMzNjY4Q0FDNjk4QzExM0E5RTM0M0M5OUIzRS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk
YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC9GMUFCRDk0MjlGM0E3MzM2NjhDQUM2OThD
MTEzQTlFMzQzQzk5QjNFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9mNTM2YTFlNC0zYmYwLTQzNTItOTA2MS02NjY5NGQyYmNiZDMvMC8zMjYxMzAz
NzNhMzUzNDYzMzczYTM2MzAzMDYyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEz
OTM5MzYzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKgdUx2ALMA0GCSqGSIb3DQEBCwUAA4IBAQDX
EiMCtLTuSxWwlZTRHULSX1Eye1KcdbkSpREz2E3zJW6ql27TGfPBsoq6mxwn/pB1
Kkv5cgrdB6vHIsI9ayYvUXTXyIsBkamvAic+b3uMKHOWoqOh0JonV9JYPaymrVS4
+dY/usObfrKmn5/c1Gt8S2Izy3ZiDv1nhU2PnSRn+oASmsttjGX8KcZCn5Wk89Jc
exdwkookvHH3w1gytwbfaLhCKp7XW4Semay9g6muSmiJ2w0x2Z7K+oXVjBJTEdHR
jpe+gfN/bZUBVPvBJ7QoivvhVAgo8i8f5BxlNbOCxbXGJ84SAtBxvGu4kGjqejPx
kwb545mgWJLy/nmgyIpU
-----END CERTIFICATE-----