Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/5/326131333a633030303a3a2f33322d3332203d3e20393435.roa
File:                     326131333a633030303a3a2f33322d3332203d3e20393435.roa (raw, json)
Hash identifier:          hyo5dmdUr6ykxjxMFeKT409TbxtKV7zjocr1oSJUgRE=
Subject key identifier:   82:80:82:E8:93:37:09:E7:68:84:42:1B:F9:9A:BB:82:EC:AD:E6:97
Certificate issuer:       /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial:       310455A4F358869F2FD3F04C91A16EC4B405EC29
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access:    rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access:      rsync://rpki.co/repo/AS945/5/326131333a633030303a3a2f33322d3332203d3e20393435.roa
Signing time:             Mon 10 Apr 2023 03:31:20 +0000
ROA not before:           Mon 10 Apr 2023 03:26:20 +0000
ROA not after:            Mon 08 Apr 2024 03:31:20 +0000
asID:                     945
IP address blocks:        2a13:c000::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:04:55:a4:f3:58:86:9f:2f:d3:f0:4c:91:a1:6e:c4:b4:05:ec:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
        Validity
            Not Before: Apr 10 03:26:20 2023 GMT
            Not After : Apr  8 03:31:20 2024 GMT
        Subject: CN=828082E8933709E76884421BF99ABB82ECADE697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:18:a8:06:ee:8c:7b:35:25:ac:83:b7:e8:cf:
                    19:3b:a2:d8:fe:f6:c3:7b:f9:3b:8e:88:d8:db:96:
                    1d:f9:d9:8f:cb:1f:fa:33:f3:c1:29:b6:6f:ec:59:
                    a7:09:7e:61:5b:06:eb:7d:c3:f0:65:ae:6f:84:0f:
                    f7:3b:35:6f:82:33:b5:02:dd:ac:6c:67:81:00:1a:
                    c2:0d:71:9d:e9:c7:be:0a:38:13:d4:33:13:51:d0:
                    f3:0b:4a:6d:a7:0c:85:2e:76:27:bf:1a:ce:35:cd:
                    c4:6f:99:11:a1:cb:63:75:ea:3c:84:8e:2b:7c:e5:
                    ec:65:f5:63:fe:75:d9:98:b7:2a:e6:43:21:71:ef:
                    cc:28:7a:98:70:bf:7b:28:48:a5:28:f9:84:4f:be:
                    79:2f:de:02:2f:35:d4:46:0a:c4:6c:b6:ba:ee:c5:
                    8c:64:6b:0e:61:5f:fe:10:5d:8d:7d:d2:10:52:20:
                    ff:cb:42:0d:d1:a3:c2:68:06:e8:50:ec:ad:57:21:
                    53:b7:b0:00:ab:47:fc:ad:9e:0a:5d:96:c2:13:ee:
                    d9:83:5e:d7:a4:5c:5e:5a:79:9b:d0:67:b0:05:7f:
                    9a:fc:88:bf:2f:3f:a9:c3:1d:5d:88:5b:c9:4c:17:
                    bc:f8:85:17:83:67:90:cd:36:6f:84:88:f8:be:b1:
                    8b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:80:82:E8:93:37:09:E7:68:84:42:1B:F9:9A:BB:82:EC:AD:E6:97
            X509v3 Authority Key Identifier:
                keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/5/326131333a633030303a3a2f33322d3332203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c000::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:87:9d:56:f7:bf:c7:b8:6d:13:78:09:0a:26:c6:40:51:74:
         31:b7:c3:d2:fc:de:67:0d:60:56:86:25:7b:3e:73:a3:bf:29:
         e4:f5:1a:23:3e:83:ff:54:52:f8:04:ec:85:45:ab:fa:e4:68:
         45:aa:26:85:ec:59:fb:bc:29:62:13:50:93:3a:30:b2:09:be:
         40:ae:ce:2e:48:b5:cb:84:a1:e4:30:37:8b:c6:30:67:6d:03:
         08:37:3f:44:26:29:9b:4c:9c:85:d3:f4:af:da:fc:cd:3f:4f:
         08:ba:34:0e:c5:94:25:e8:aa:bf:b6:e2:77:71:dc:59:6d:55:
         d0:94:4c:4e:35:3e:e5:be:0c:96:46:54:a9:87:f0:76:8f:78:
         91:2b:4f:41:07:c7:c4:35:a3:61:ac:0f:cb:a0:71:c6:6d:ff:
         06:12:2f:b5:e6:4b:31:48:0d:13:d5:20:f8:67:d8:c4:27:c6:
         25:48:b7:ce:76:85:4d:58:13:01:41:85:e5:20:0a:c7:29:23:
         7d:7d:3b:dd:68:5b:9f:d7:3e:b5:28:37:7b:f0:0a:de:37:1d:
         76:76:29:99:48:b5:a7:be:d9:c4:e1:67:95:e4:d6:47:bd:cf:
         ee:9e:09:7e:72:26:c2:b5:de:0d:2b:1b:d0:42:22:17:b1:73:
         a1:f5:33:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----