Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313366393a3a2f34382d3438203d3e20313938343830.roa
File:                     326131333a646638303a313366393a3a2f34382d3438203d3e20313938343830.roa (raw, json)
Hash identifier:          HM8tfjrgpMjv4MRTJvo6hlZe/GiHMmlMb/p2VFliTl0=
Subject key identifier:   2D:AE:E5:DC:2A:12:66:30:52:20:E6:7F:DF:36:44:98:71:C1:70:81
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       7DBA26B983063B999587650D473A05D745B6A96D
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313366393a3a2f34382d3438203d3e20313938343830.roa
Signing time:             Fri 18 Aug 2023 15:58:49 +0000
ROA not before:           Fri 18 Aug 2023 15:53:49 +0000
ROA not after:            Fri 16 Aug 2024 15:58:49 +0000
asID:                     198480
IP address blocks:        2a13:df80:13f9::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ba:26:b9:83:06:3b:99:95:87:65:0d:47:3a:05:d7:45:b6:a9:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Aug 18 15:53:49 2023 GMT
            Not After : Aug 16 15:58:49 2024 GMT
        Subject: CN=2DAEE5DC2A1266305220E67FDF36449871C17081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ef:b0:77:32:5e:9a:c2:69:a8:9e:e6:2f:6e:
                    87:c1:23:2a:17:9f:2b:a6:e4:43:65:2e:a6:72:93:
                    45:70:2b:6e:04:6c:40:a8:e9:ad:3d:40:87:48:fc:
                    1c:00:64:b4:ed:7d:06:78:9b:06:13:b4:87:27:e4:
                    fc:8e:22:09:1d:04:a2:cb:56:aa:18:b2:03:2e:26:
                    d6:e3:13:c7:85:26:a5:c4:d6:51:08:c1:96:6d:9d:
                    bb:41:af:78:c0:26:d3:26:4b:86:fa:d0:05:4e:bf:
                    16:80:32:1d:83:9e:a9:ce:b8:c5:98:5d:4f:06:0d:
                    26:8c:42:16:0e:e2:4f:0f:c0:35:5e:4b:6a:65:b1:
                    69:6b:74:80:7f:38:39:14:03:c3:3b:59:7e:0d:96:
                    8d:0d:fa:d5:81:1c:0c:5b:d7:67:74:05:ee:3d:75:
                    eb:5c:b5:f5:1d:fa:3c:1b:f9:02:0f:2e:38:3e:15:
                    51:75:ea:24:99:55:7c:ce:de:8b:56:69:4b:da:66:
                    6a:9e:61:0a:e8:93:86:c9:b8:be:b6:ec:f2:de:ce:
                    74:f8:00:72:20:83:e4:9f:73:1c:e7:1c:7c:96:b7:
                    eb:e1:c1:7a:a1:3b:89:f5:d4:2e:a8:55:1e:f6:ff:
                    9a:7f:96:6f:50:77:44:20:03:64:7f:d4:96:25:22:
                    36:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:AE:E5:DC:2A:12:66:30:52:20:E6:7F:DF:36:44:98:71:C1:70:81
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313366393a3a2f34382d3438203d3e20313938343830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:13f9::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:b3:0c:9a:35:7a:dd:6e:01:75:f7:93:57:f9:30:ad:b8:83:
         ad:24:6e:99:c4:cd:21:dc:3f:10:75:ec:85:18:21:b0:23:fd:
         a8:20:29:a2:4b:0f:27:07:02:e1:e2:5f:8e:58:79:ed:de:b4:
         8d:e7:2c:46:5d:42:a0:b0:e4:ba:b5:ad:be:f2:d6:73:31:13:
         0e:eb:36:eb:15:75:b7:2f:7a:a4:2f:68:f2:28:74:db:bc:e0:
         e3:a0:2a:99:55:ff:04:b6:33:53:22:de:24:6a:74:67:10:a0:
         9d:a1:2a:83:f0:46:34:ce:89:4f:3c:7f:fd:8f:e5:5d:69:5c:
         1e:a1:92:ff:01:69:36:43:35:b7:c9:9e:17:17:cc:10:7a:a9:
         28:56:d8:0d:64:79:fd:fb:89:68:42:56:b3:05:1c:be:36:5d:
         79:82:9f:03:02:18:d7:bd:ab:b2:57:96:77:c9:aa:11:aa:db:
         da:5a:2d:b0:39:5e:aa:26:86:c1:6e:d8:58:56:68:25:29:11:
         35:46:14:02:8f:9b:21:61:83:14:4a:36:da:e1:e8:ec:e0:9c:
         d2:4a:31:f0:1c:7d:90:44:17:68:e1:6e:21:75:80:40:8a:d8:
         1c:f8:da:1c:5e:d7:b1:e0:4a:ef:8f:bf:c6:d9:0b:21:2a:bf:
         c2:43:b8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----