Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333831303a3a2f34382d3438203d3e203437353039.roa
File:                     326131333a646638303a333831303a3a2f34382d3438203d3e203437353039.roa (raw, json)
Hash identifier:          Fx3SdP6droozM6N/jgcHvYVPM87Q5Es7FYngS7yZMIQ=
Subject key identifier:   79:C0:4B:94:45:CF:B4:9C:2B:F3:7A:67:BC:74:A3:73:7E:3F:48:75
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       1E55E278CEA229D08FDC3BE9BAA81940C927E483
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333831303a3a2f34382d3438203d3e203437353039.roa
Signing time:             Sat 09 Sep 2023 10:32:34 +0000
ROA not before:           Sat 09 Sep 2023 10:27:34 +0000
ROA not after:            Sat 07 Sep 2024 10:32:34 +0000
asID:                     47509
IP address blocks:        2a13:df80:3810::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:55:e2:78:ce:a2:29:d0:8f:dc:3b:e9:ba:a8:19:40:c9:27:e4:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Sep  9 10:27:34 2023 GMT
            Not After : Sep  7 10:32:34 2024 GMT
        Subject: CN=79C04B9445CFB49C2BF37A67BC74A3737E3F4875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ca:d9:17:47:49:35:2a:1a:8c:ea:a9:f9:7a:
                    67:d5:06:d7:92:31:64:42:4a:d7:2e:2e:c1:0b:11:
                    f7:29:5d:79:08:88:ed:fb:21:9e:4f:a1:38:0d:22:
                    7a:69:91:56:b3:33:fd:59:51:82:5e:11:17:71:f1:
                    2b:46:cb:54:eb:89:9b:21:8a:00:1d:c4:38:8c:34:
                    7f:1f:cf:cc:40:47:0c:f2:3a:79:db:55:a9:cd:72:
                    3a:fe:74:5e:1a:a5:da:52:6a:f1:63:a4:4f:1c:a5:
                    4c:cb:6b:f9:2b:4e:91:3f:5b:9b:24:a2:59:0d:b9:
                    e1:74:b8:4e:c2:64:d7:81:03:d4:6f:f2:cf:1c:66:
                    90:9d:5b:f5:32:2b:a2:82:38:1d:73:bb:7a:6c:a9:
                    d1:6d:ec:5d:2d:2c:00:b8:06:6d:fe:1b:9d:a0:60:
                    2d:7d:a4:7e:cd:72:38:14:c5:2c:d3:6f:ff:0b:7a:
                    78:f0:70:ec:c3:59:e5:0b:51:50:2b:83:91:7c:4d:
                    7a:6a:a8:a1:74:db:09:9b:a6:a8:0f:84:40:ba:b3:
                    3d:a9:e4:00:5e:af:e8:73:af:2d:6f:bd:99:74:4d:
                    71:9e:4b:4b:86:13:fb:39:98:3a:64:ec:fd:99:56:
                    5f:44:9f:e3:e9:de:83:9b:8e:d7:b4:86:be:e8:75:
                    d8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C0:4B:94:45:CF:B4:9C:2B:F3:7A:67:BC:74:A3:73:7E:3F:48:75
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333831303a3a2f34382d3438203d3e203437353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:3810::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:bd:32:81:ad:e1:04:ee:a5:00:52:50:d3:2e:6e:e9:d2:06:
         90:24:e9:e9:b8:a9:91:7b:22:1f:ed:e4:56:8c:a9:90:55:f1:
         67:fb:13:72:43:a7:2e:82:fd:2d:94:8b:e4:66:1d:bc:9b:df:
         bd:c5:7f:7d:7f:94:df:36:1c:0d:69:d3:02:79:e3:e2:37:5b:
         95:29:f7:95:ad:c0:07:cf:fe:a7:b3:de:a6:fc:60:14:c7:6a:
         ca:c7:a9:da:3e:b5:ca:5e:54:dd:9c:d7:f5:16:34:02:0b:3c:
         cf:f0:51:79:41:1a:49:46:ce:01:4b:f3:0a:43:df:36:92:6a:
         dd:71:bb:54:02:7f:fb:69:99:72:d0:20:88:1c:3d:cf:3e:d6:
         a2:3d:01:20:c1:8b:27:7f:ef:9a:9d:b2:62:31:e8:18:9b:12:
         ec:12:e6:5a:b2:97:d2:d3:07:cd:61:70:b9:6e:1a:b9:c4:91:
         cc:f0:96:ad:24:14:a3:72:3d:35:a8:e4:82:94:4b:11:36:f8:
         e4:ad:a4:ea:75:e0:67:5f:bf:94:87:5f:1c:14:60:2c:0d:10:
         e7:f5:bf:eb:e3:c6:2b:8a:c9:ec:99:aa:74:fc:06:17:bd:01:
         11:9b:fa:88:a5:f9:a2:c1:32:ff:cc:82:a9:2a:66:f3:25:cd:
         72:b3:a4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----