Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/14/326130353a646663363a3a2f33322d3332203d3e203530303538.roa
File:                     326130353a646663363a3a2f33322d3332203d3e203530303538.roa (raw, json)
Hash identifier:          p+EgtotsVlq0TWJtz3nuJzmKJ1p9VmDTlV8awLrdzSM=
Subject key identifier:   71:BB:AD:A7:38:C4:71:B3:62:05:75:08:43:99:C6:10:C9:FB:C1:76
Certificate issuer:       /CN=3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9
Certificate serial:       70F7E99720FFF475B09DA9C21C03EFD7E09DC026
Authority key identifier: 3E:38:23:CF:F4:D4:1C:2C:6F:6B:3A:20:CC:DD:59:F6:EB:BE:AD:E9
Authority info access:    rsync://rpki.co/repo/August/13/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.cer
Subject info access:      rsync://rpki.co/repo/AS945/14/326130353a646663363a3a2f33322d3332203d3e203530303538.roa
Signing time:             Tue 11 Apr 2023 01:15:39 +0000
ROA not before:           Tue 11 Apr 2023 01:10:39 +0000
ROA not after:            Tue 09 Apr 2024 01:15:39 +0000
asID:                     50058
IP address blocks:        2a05:dfc6::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f7:e9:97:20:ff:f4:75:b0:9d:a9:c2:1c:03:ef:d7:e0:9d:c0:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9
        Validity
            Not Before: Apr 11 01:10:39 2023 GMT
            Not After : Apr  9 01:15:39 2024 GMT
        Subject: CN=71BBADA738C471B3620575084399C610C9FBC176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7c:52:8e:fe:af:8b:ea:89:1e:23:77:7c:d6:
                    d0:e0:1c:12:c0:c2:02:14:6f:38:88:b5:7b:53:58:
                    34:a4:db:76:8a:af:9a:53:9e:dc:52:cd:f9:07:2c:
                    d0:3a:99:ae:aa:f8:e2:df:aa:65:24:ed:e4:56:d3:
                    c8:ab:19:e8:f0:bf:73:57:c3:87:0c:11:4a:9f:e7:
                    65:7c:a1:31:ff:08:03:35:88:3d:a0:f1:90:e6:a1:
                    e2:11:95:6c:c4:97:4d:c5:d8:b5:0a:9a:98:88:e3:
                    98:51:ff:c1:af:6d:a8:5a:06:44:40:5f:5a:3d:5d:
                    3b:ab:c3:9c:1b:75:80:1b:34:7f:56:f0:72:78:e2:
                    73:a8:e8:bb:3b:2f:e5:de:25:ad:0c:63:99:a4:c6:
                    ef:8e:05:17:03:91:76:c3:38:99:c0:f8:42:a1:7d:
                    43:cb:55:ca:26:11:e2:d6:7a:e4:76:85:00:6c:6f:
                    02:9c:c6:1f:4e:4d:77:4e:db:ab:e6:f9:6c:1b:0a:
                    33:63:2f:4e:bc:74:80:c3:e2:bb:b6:5d:d5:a7:81:
                    8f:08:e4:54:69:f0:70:c2:36:89:aa:d1:6f:54:43:
                    46:a5:ea:bb:07:11:99:f4:09:cb:e1:60:2e:77:6e:
                    db:de:26:9b:c3:ad:06:61:12:14:6f:50:0d:4d:cd:
                    e2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BB:AD:A7:38:C4:71:B3:62:05:75:08:43:99:C6:10:C9:FB:C1:76
            X509v3 Authority Key Identifier:
                keyid:3E:38:23:CF:F4:D4:1C:2C:6F:6B:3A:20:CC:DD:59:F6:EB:BE:AD:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/14/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/13/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/14/326130353a646663363a3a2f33322d3332203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc6::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:2f:76:0e:ba:9c:28:7e:04:5a:ae:81:4e:e2:24:c5:1a:b7:
         45:cf:a5:6c:16:0f:7a:80:c2:93:82:39:d5:3f:07:6b:ad:d2:
         68:99:4b:ab:02:be:d8:2b:ab:90:53:19:e2:96:f7:fe:f0:3a:
         05:e0:16:c5:b5:a9:67:ee:cd:5a:6f:38:0b:6c:82:38:b9:9c:
         1c:2c:2f:0b:a0:d3:f7:96:34:1c:8a:41:a8:24:a6:68:a8:88:
         c2:d8:b9:6c:29:90:06:cb:a2:86:a2:3b:50:37:bd:80:b7:a5:
         2f:95:73:2f:86:ce:73:b9:34:2c:5a:be:43:89:ab:d7:7d:ae:
         cc:a1:46:b8:51:83:df:c6:26:11:a2:3d:60:53:ee:d5:28:a7:
         1a:bc:91:95:7c:31:a5:2b:ca:bd:6a:8a:15:3c:fb:64:3c:0e:
         e0:a3:be:5c:18:68:a1:e4:0d:85:f2:f3:a9:86:3e:3c:c4:52:
         82:a8:f3:4d:ff:f9:02:50:80:19:2c:87:ac:18:7d:05:49:58:
         9f:58:aa:11:cd:c6:d9:f5:ae:64:a3:ff:68:8e:70:0c:54:64:
         2f:ce:d1:e5:99:d2:c2:b2:0d:d8:04:99:92:3d:33:9b:44:7d:
         b7:fa:dd:7a:82:8f:8d:a2:6e:f3:7b:4d:6e:3d:a7:c1:da:f4:
         fc:73:f2:39
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIUcPfplyD/9HWwnanCHAPv1+CdwCYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UzODIzQ0ZGNEQ0MUMyQzZGNkIzQTIwQ0NERDU5RjZF
QkJFQURFOTAeFw0yMzA0MTEwMTEwMzlaFw0yNDA0MDkwMTE1MzlaMDMxMTAvBgNV
BAMTKDcxQkJBREE3MzhDNDcxQjM2MjA1NzUwODQzOTlDNjEwQzlGQkMxNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjfFKO/q+L6okeI3d81tDgHBLA
wgIUbziItXtTWDSk23aKr5pTntxSzfkHLNA6ma6q+OLfqmUk7eRW08irGejwv3NX
w4cMEUqf52V8oTH/CAM1iD2g8ZDmoeIRlWzEl03F2LUKmpiI45hR/8GvbahaBkRA
X1o9XTurw5wbdYAbNH9W8HJ44nOo6Ls7L+XeJa0MY5mkxu+OBRcDkXbDOJnA+EKh
fUPLVcomEeLWeuR2hQBsbwKcxh9OTXdO26vm+WwbCjNjL068dIDD4ru2XdWngY8I
5FRp8HDCNomq0W9UQ0al6rsHEZn0CcvhYC53btveJpvDrQZhEhRvUA1NzeKlAgMB
AAGjggHKMIIBxjAdBgNVHQ4EFgQUcbutpzjEcbNiBXUIQ5nGEMn7wXYwHwYDVR0j
BBgwFoAUPjgjz/TUHCxvazogzN1Z9uu+rekwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzE0LzNFMzgy
M0NGRjRENDFDMkM2RjZCM0EyMENDREQ1OUY2RUJCRUFERTkuY3JsMGcGCCsGAQUF
BwEBBFswWTBXBggrBgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmNvL3JlcG8vQXVndXN0
LzEzLzNFMzgyM0NGRjRENDFDMkM2RjZCM0EyMENDREQ1OUY2RUJCRUFERTkuY2Vy
MHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9ycGtpLmNvL3Jl
cG8vQVM5NDUvMTQvMzI2MTMwMzUzYTY0NjY2MzM2M2EzYTJmMzMzMjJkMzMzMjIw
M2QzZTIwMzUzMDMwMzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoF38YwDQYJKoZIhvcNAQELBQAD
ggEBAIkvdg66nCh+BFqugU7iJMUat0XPpWwWD3qAwpOCOdU/B2ut0miZS6sCvtgr
q5BTGeKW9/7wOgXgFsW1qWfuzVpvOAtsgji5nBwsLwug0/eWNByKQagkpmioiMLY
uWwpkAbLooaiO1A3vYC3pS+Vcy+GznO5NCxavkOJq9d9rsyhRrhRg9/GJhGiPWBT
7tUopxq8kZV8MaUryr1qihU8+2Q8DuCjvlwYaKHkDYXy86mGPjzEUoKo803/+QJQ
gBksh6wYfQVJWJ9YqhHNxtn1rmSj/2iOcAxUZC/O0eWZ0sKyDdgEmZI9M5tEfbf6
3XqCj42ibvN7TW49p8Ha9Pxz8jk=
-----END CERTIFICATE-----