Route Origin Authorization

$ rpki-client -vvf rpki-repository.haruue.net/repo/YC3254-RPKI/2/326130613a363034303a326430303a3a2f34302d3438203d3e20323030323536.roa
File:                     326130613a363034303a326430303a3a2f34302d3438203d3e20323030323536.roa (raw, json)
Hash identifier:          PVpjAQXG3L5eu3AZCp5ocDZXrlgY6ZdPaXL/2jErtr4=
Subject key identifier:   06:64:29:C3:07:DF:12:19:46:23:E7:B0:99:22:E5:87:A0:EC:44:36
Certificate issuer:       /CN=3F0AC25D352C83DA8307594B98ED061BE8489682
Certificate serial:       4AE0AF5679F2250AD1C421222601CDE759851F98
Authority key identifier: 3F:0A:C2:5D:35:2C:83:DA:83:07:59:4B:98:ED:06:1B:E8:48:96:82
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3F0AC25D352C83DA8307594B98ED061BE8489682.cer
Subject info access:      rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/326130613a363034303a326430303a3a2f34302d3438203d3e20323030323536.roa
Signing time:             Thu 07 Nov 2024 15:30:24 +0000
ROA not before:           Thu 07 Nov 2024 15:25:24 +0000
ROA not after:            Thu 06 Nov 2025 15:30:24 +0000
asID:                     200256
IP address blocks:        2a0a:6040:2d00::/40 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e0:af:56:79:f2:25:0a:d1:c4:21:22:26:01:cd:e7:59:85:1f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F0AC25D352C83DA8307594B98ED061BE8489682
        Validity
            Not Before: Nov  7 15:25:24 2024 GMT
            Not After : Nov  6 15:30:24 2025 GMT
        Subject: CN=066429C307DF12194623E7B09922E587A0EC4436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2a:e8:03:87:3c:32:ac:b2:a6:f3:28:8f:df:
                    2c:a6:dd:a3:a9:fa:51:ae:be:57:88:c2:62:bf:76:
                    bd:99:1d:be:f4:03:f9:5f:ab:ff:a0:b8:ae:14:a6:
                    ea:e1:6e:11:df:65:ef:fd:74:6f:2d:3a:7a:60:a0:
                    e0:5f:45:22:e3:fb:ab:56:36:32:39:91:af:e4:80:
                    d0:5f:f6:6a:37:5a:fe:43:7a:5d:ae:7a:be:76:cd:
                    9e:46:43:b5:ad:1c:7e:c5:52:e6:14:6c:82:20:3f:
                    1a:42:15:2e:6c:ce:62:08:9b:a9:f9:09:02:87:02:
                    e5:aa:72:be:e6:25:12:65:94:4c:ed:31:8d:44:e0:
                    48:75:e8:92:3d:76:c6:ca:95:96:fe:27:06:f8:76:
                    0f:4b:7d:74:ea:b1:9c:8c:f0:8e:8a:a8:69:a6:65:
                    2a:f4:99:8a:c3:85:be:97:90:dd:1d:d3:d8:db:0a:
                    d6:31:7a:a1:b0:f4:93:76:fe:92:22:5a:ac:ec:2a:
                    cb:ab:b4:39:8c:f8:03:e2:ed:ea:98:7b:2f:6c:ba:
                    68:8b:34:06:3b:d5:70:d2:3f:e6:cf:94:0e:9f:18:
                    26:d4:1a:91:ca:dd:45:5d:94:92:25:56:ec:6d:4b:
                    a6:d0:6d:fc:b2:e7:35:5b:ac:1d:83:4a:a3:2b:ae:
                    0b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:64:29:C3:07:DF:12:19:46:23:E7:B0:99:22:E5:87:A0:EC:44:36
            X509v3 Authority Key Identifier:
                keyid:3F:0A:C2:5D:35:2C:83:DA:83:07:59:4B:98:ED:06:1B:E8:48:96:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/3F0AC25D352C83DA8307594B98ED061BE8489682.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3F0AC25D352C83DA8307594B98ED061BE8489682.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/326130613a363034303a326430303a3a2f34302d3438203d3e20323030323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:2d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         ba:a9:1f:c3:67:38:8b:54:52:93:06:86:af:00:de:9a:57:fa:
         3e:39:b4:73:57:02:12:16:07:74:ac:f6:58:a8:9c:a5:7d:5b:
         05:f8:e0:83:30:4e:e8:aa:8a:66:31:ce:02:d0:b6:af:ff:6d:
         81:de:a8:29:07:d6:bf:f9:8d:c3:51:3b:2b:74:52:bb:a4:50:
         33:b1:01:d5:c7:d5:9c:75:90:55:a8:6a:40:96:ac:14:99:e0:
         cb:09:14:c6:e9:7f:2f:78:84:d9:c0:72:67:b2:18:46:1c:e1:
         01:29:a8:cd:4c:cf:f6:e7:bb:21:95:79:83:5b:aa:a6:6d:0d:
         30:a1:ab:bd:78:8a:f6:d2:1f:81:ea:49:0b:f2:55:64:6d:72:
         4b:50:05:75:8f:7b:33:0c:68:0d:69:3b:53:05:7d:53:8c:e7:
         7d:6e:3e:48:34:89:94:33:e5:f4:bc:51:a1:3b:40:e9:e0:8d:
         4c:7f:2d:ea:c0:cf:48:52:02:e1:57:5a:73:81:98:e3:b2:b6:
         84:f6:d3:00:ea:08:38:14:fd:95:18:3b:d5:71:ec:b3:b2:8b:
         ef:11:5a:0a:46:6d:c3:67:ce:9e:30:31:ff:74:d4:4f:9f:54:
         f5:aa:27:45:c0:db:a5:f5:0e:7c:45:c5:e7:cf:5e:ff:80:db:
         6b:a9:43:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----