Route Origin Authorization

$ rpki-client -vvf rpki.pedjoeang.group/repo/pedjoeang-digital-networks/4/326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa
File:                     326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa (raw, json)
Hash identifier:          1gSOcntEXuc89RW4jmEJ0wMCqW4wwb4IK34kEx6x4Zw=
Subject key identifier:   A9:FA:10:94:4D:33:88:F0:64:72:44:C5:74:7C:AF:E3:8F:9C:B3:71
Certificate issuer:       /CN=3B608CE8C196E76B2F005FC3CDED10B1E1069410
Certificate serial:       4E8FA224CB02CA1BFB0994EBE20984CDC39AB2EA
Authority key identifier: 3B:60:8C:E8:C1:96:E7:6B:2F:00:5F:C3:CD:ED:10:B1:E1:06:94:10
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3B608CE8C196E76B2F005FC3CDED10B1E1069410.cer
Subject info access:      rsync://rpki.pedjoeang.group/repo/pedjoeang-digital-networks/4/326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa
Signing time:             Wed 20 Dec 2023 04:07:40 +0000
ROA not before:           Wed 20 Dec 2023 04:02:40 +0000
ROA not after:            Wed 18 Dec 2024 04:07:40 +0000
asID:                     50104
IP address blocks:        2a0a:6040:4400::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:8f:a2:24:cb:02:ca:1b:fb:09:94:eb:e2:09:84:cd:c3:9a:b2:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B608CE8C196E76B2F005FC3CDED10B1E1069410
        Validity
            Not Before: Dec 20 04:02:40 2023 GMT
            Not After : Dec 18 04:07:40 2024 GMT
        Subject: CN=A9FA10944D3388F0647244C5747CAFE38F9CB371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:33:bb:6f:88:bb:9b:65:2c:5e:0a:1c:b6:81:
                    bc:8a:99:49:e6:84:03:ed:25:11:92:09:06:b2:d5:
                    df:cf:fc:57:cc:7e:85:62:19:98:b0:49:17:01:8b:
                    68:5d:3f:a7:43:a3:29:f3:e1:8d:1c:0e:38:cb:8f:
                    6f:ae:07:6a:84:c7:4a:99:3b:16:20:ea:40:dd:55:
                    74:41:a5:4d:45:70:06:84:22:67:8b:f1:49:63:d1:
                    7b:b9:5f:90:53:c6:d6:98:de:08:17:19:c3:9a:a9:
                    53:38:7e:21:35:c8:7d:ed:b0:4e:25:f1:6b:6d:57:
                    7f:95:af:9d:37:90:97:50:1d:3c:6d:55:a1:48:0e:
                    ac:3c:d5:19:70:3e:7b:3b:a2:a2:08:20:a7:fa:a2:
                    3a:e4:05:bd:9e:4c:5e:73:c3:7a:ba:be:af:f8:6d:
                    9e:61:23:81:79:45:f7:9f:13:64:f6:0f:4c:30:45:
                    a6:90:58:25:ca:3f:b6:0d:a6:16:1b:f4:b1:4b:b4:
                    2a:c0:92:56:c6:e8:88:15:12:a2:e6:71:f3:4e:14:
                    de:c8:e1:30:05:b3:a3:a0:1e:6a:ea:df:cf:81:c6:
                    12:e9:6b:05:8f:c3:2a:07:d8:b6:98:cb:6a:30:8f:
                    8c:95:8c:d6:28:73:67:e9:4e:30:e5:ca:93:0b:bf:
                    9d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:FA:10:94:4D:33:88:F0:64:72:44:C5:74:7C:AF:E3:8F:9C:B3:71
            X509v3 Authority Key Identifier:
                keyid:3B:60:8C:E8:C1:96:E7:6B:2F:00:5F:C3:CD:ED:10:B1:E1:06:94:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.pedjoeang.group/repo/pedjoeang-digital-networks/4/3B608CE8C196E76B2F005FC3CDED10B1E1069410.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3B608CE8C196E76B2F005FC3CDED10B1E1069410.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.pedjoeang.group/repo/pedjoeang-digital-networks/4/326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:4400::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:cd:2b:a9:18:f9:6f:87:92:30:2a:69:36:bd:b5:11:80:d9:
         0a:f1:56:c8:4f:9e:c5:50:fc:0a:18:ec:a4:ce:a2:cc:ff:df:
         d7:b0:ae:f4:59:a0:85:ab:89:a4:c9:80:b0:84:d3:84:db:f0:
         76:0f:c7:60:f5:a2:b2:b2:e6:3f:41:3b:99:69:7c:77:9f:24:
         fa:a8:b1:7d:4a:e5:17:92:24:48:95:74:fa:01:33:d4:8c:ce:
         7a:b3:4b:04:38:48:6a:8c:80:42:60:5c:36:0e:9b:b7:fb:0e:
         57:23:ca:92:26:a8:9e:bf:41:27:b0:81:9a:9d:08:64:cc:99:
         bf:af:2d:3a:af:2c:1a:d9:b4:64:68:6a:58:3d:96:21:6e:d5:
         b3:9f:7b:c5:5f:b0:39:1c:a5:78:bc:e1:f6:da:58:1e:af:08:
         ee:87:84:eb:57:c4:5f:6f:76:f3:d8:49:fb:c2:65:55:c2:b3:
         f8:ae:80:57:9c:1f:d2:b2:0f:06:7f:e4:35:3d:c6:f4:c8:f4:
         fc:de:0a:23:d8:0c:1a:21:dd:b3:f0:f1:ab:da:b5:07:a0:e5:
         77:f8:34:94:a6:5d:b2:9f:99:15:1c:cb:a0:25:25:65:bb:1f:
         df:1f:c0:05:ff:35:49:6d:44:07:a4:f6:47:ea:1d:a9:ce:d7:
         eb:cf:e3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----