Route Origin Authorization

$ rpki-client -vvf rpki-repository.haruue.net/repo/YC3254-RPKI/2/326130613a363034303a326430303a3a2f34302d3438203d3e20313436393530.roa
File:                     326130613a363034303a326430303a3a2f34302d3438203d3e20313436393530.roa (raw, json)
Hash identifier:          1r5cfZQM2ovYXIUQ/UHNIUj5FHjZv0uG72qrp9QcfRo=
Subject key identifier:   C2:EC:DF:79:B0:F9:DE:FC:AB:EE:A5:28:E5:C7:6B:8B:DB:DC:36:4A
Certificate issuer:       /CN=3F0AC25D352C83DA8307594B98ED061BE8489682
Certificate serial:       D06A83EBF3D72CBFF8B905CBC36943D5789BF1
Authority key identifier: 3F:0A:C2:5D:35:2C:83:DA:83:07:59:4B:98:ED:06:1B:E8:48:96:82
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3F0AC25D352C83DA8307594B98ED061BE8489682.cer
Subject info access:      rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/326130613a363034303a326430303a3a2f34302d3438203d3e20313436393530.roa
Signing time:             Thu 07 Nov 2024 15:30:24 +0000
ROA not before:           Thu 07 Nov 2024 15:25:24 +0000
ROA not after:            Thu 06 Nov 2025 15:30:24 +0000
asID:                     146950
IP address blocks:        2a0a:6040:2d00::/40 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d0:6a:83:eb:f3:d7:2c:bf:f8:b9:05:cb:c3:69:43:d5:78:9b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F0AC25D352C83DA8307594B98ED061BE8489682
        Validity
            Not Before: Nov  7 15:25:24 2024 GMT
            Not After : Nov  6 15:30:24 2025 GMT
        Subject: CN=C2ECDF79B0F9DEFCABEEA528E5C76B8BDBDC364A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2c:e4:1a:65:30:15:34:2e:81:f0:8d:5d:98:
                    df:a2:7a:47:77:c8:d2:22:08:29:05:60:82:6e:d2:
                    71:b8:60:01:99:fa:37:7f:33:83:4d:90:3a:2a:4e:
                    6f:49:16:3b:74:40:24:10:6b:a9:0b:a0:07:2e:e9:
                    57:e5:a0:9a:c2:73:67:25:64:f2:ac:a5:95:22:13:
                    f4:61:85:37:01:bc:7b:4b:bc:25:09:f5:e0:27:e5:
                    0b:28:92:68:a6:f6:97:66:c1:23:ed:54:e1:bc:e9:
                    12:1e:df:a9:12:d3:ac:18:61:29:8a:fe:e3:43:65:
                    0d:0b:9b:75:ce:65:97:ac:8d:95:2a:8c:a7:c8:f7:
                    b3:09:9c:f5:d9:00:6e:03:2a:9f:52:3b:c4:21:54:
                    1d:25:12:02:8a:63:68:5a:37:89:d3:a2:2a:93:07:
                    87:b8:bc:fa:50:24:ed:95:2b:c4:24:97:ce:3c:11:
                    a1:1b:86:72:12:80:58:1d:c1:02:f3:58:ca:f5:0a:
                    3c:86:d4:ed:39:ff:41:9d:6f:7d:86:b6:c4:7f:bb:
                    fa:0a:98:c1:3e:c2:d3:f5:4b:80:42:7c:3b:88:02:
                    9a:32:82:d9:f6:ed:ba:77:4a:82:84:64:2a:c7:5e:
                    9b:c5:0e:37:fb:df:11:c9:90:fe:9c:1d:74:0d:4f:
                    2e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EC:DF:79:B0:F9:DE:FC:AB:EE:A5:28:E5:C7:6B:8B:DB:DC:36:4A
            X509v3 Authority Key Identifier:
                keyid:3F:0A:C2:5D:35:2C:83:DA:83:07:59:4B:98:ED:06:1B:E8:48:96:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/3F0AC25D352C83DA8307594B98ED061BE8489682.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3F0AC25D352C83DA8307594B98ED061BE8489682.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/326130613a363034303a326430303a3a2f34302d3438203d3e20313436393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:2d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8c:64:2e:cb:38:6d:76:83:71:f4:01:09:f9:c0:99:34:a2:2c:
         89:cd:c4:91:32:7f:f5:2b:c8:76:fe:99:45:fa:10:a4:ef:d3:
         02:a2:59:ca:9b:56:d1:d4:65:4a:69:a1:68:2d:d6:3b:e3:3c:
         ee:c1:ae:92:5e:75:41:4e:c4:48:9f:2e:87:54:b8:c0:ad:24:
         bc:7c:b1:a1:fb:bd:7f:4a:77:26:02:86:e0:51:73:3d:3d:20:
         be:5c:12:8b:88:02:6e:1f:38:9c:6c:63:b2:32:df:12:ff:2b:
         d4:f5:04:51:a2:b6:2d:2c:93:c3:21:19:01:c3:2b:fb:68:5c:
         4d:0b:c1:bd:17:d4:8a:e7:9a:2d:06:dc:ce:26:ec:d8:72:12:
         31:ac:fc:3b:22:7d:ed:f7:c3:1c:df:a2:11:f3:25:94:03:ee:
         e5:90:a0:94:e9:af:62:d5:a1:e0:f8:7d:13:15:37:fd:19:66:
         a2:ba:29:5d:53:a7:fb:26:c0:24:46:1d:01:ed:6f:3c:a0:4c:
         c1:2b:f0:a1:e2:da:65:a8:18:2c:b7:52:51:af:a7:40:ac:a9:
         91:8b:04:d7:c3:07:e2:14:b9:ae:7f:48:5f:77:76:4a:83:eb:
         f4:16:c9:9e:42:e4:22:0a:fb:e4:c9:af:55:39:de:f3:7c:5c:
         80:56:ca:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----