Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333831373a3a2f34382d3438203d3e20323136313332.roa
File:                     326131333a646638303a333831373a3a2f34382d3438203d3e20323136313332.roa (raw, json)
Hash identifier:          po52t17wcMOr3l8alzeHBb7AwZcsGE4nLGAtEEN1Cx4=
Subject key identifier:   A5:E4:67:16:E2:F0:F4:21:42:09:56:C3:DF:2A:A6:E8:E3:85:C0:4B
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       4C76F8BFADE01BE4286585D529575EF16B077F2C
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333831373a3a2f34382d3438203d3e20323136313332.roa
Signing time:             Tue 24 Oct 2023 18:30:16 +0000
ROA not before:           Tue 24 Oct 2023 18:25:16 +0000
ROA not after:            Tue 22 Oct 2024 18:30:16 +0000
asID:                     216132
IP address blocks:        2a13:df80:3817::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:76:f8:bf:ad:e0:1b:e4:28:65:85:d5:29:57:5e:f1:6b:07:7f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Oct 24 18:25:16 2023 GMT
            Not After : Oct 22 18:30:16 2024 GMT
        Subject: CN=A5E46716E2F0F421420956C3DF2AA6E8E385C04B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3e:a8:3c:ed:57:94:4c:3b:c3:c5:9b:77:99:
                    4b:ea:49:98:ca:5d:6f:7c:95:65:6e:df:72:0f:fa:
                    2f:98:9b:bc:13:db:b4:b0:97:c3:78:61:df:77:4a:
                    3a:a3:34:99:0a:1f:34:a9:1c:7a:9e:c1:7c:71:5e:
                    46:a5:e9:64:06:65:08:89:89:3c:6e:78:7d:aa:23:
                    08:08:15:cc:da:bd:85:23:60:4d:b5:7b:fa:b1:26:
                    b4:5f:76:a9:c1:5a:8f:3c:76:af:7c:1d:d9:34:95:
                    52:e8:95:a2:3a:ff:89:eb:1b:e1:14:a1:53:34:a1:
                    11:30:f0:05:db:b8:43:b4:a8:25:22:4b:6b:1c:a5:
                    11:ce:c5:f6:e1:17:6e:b8:5d:97:d4:bb:93:5f:67:
                    82:17:4d:70:37:28:6e:2d:44:c6:bb:14:79:e3:06:
                    41:50:3b:f3:da:a3:e6:1a:b1:7e:9e:8a:9f:e7:aa:
                    8c:27:de:34:7d:9e:9a:0c:05:36:b8:a9:15:a7:a0:
                    88:b1:3c:a1:0f:d3:9a:b7:ba:1f:25:42:dd:fb:1e:
                    8b:f2:19:5c:e2:ad:3e:44:7b:3b:01:3f:00:f7:92:
                    31:3f:69:06:bf:4c:93:b1:fe:0f:92:01:74:cc:31:
                    ed:3f:3c:f6:43:7c:cc:14:fb:8a:4d:f9:70:e1:04:
                    16:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E4:67:16:E2:F0:F4:21:42:09:56:C3:DF:2A:A6:E8:E3:85:C0:4B
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a333831373a3a2f34382d3438203d3e20323136313332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:3817::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:04:e3:0f:a2:65:6b:bb:20:9e:07:62:28:3b:0c:34:7b:40:
         21:52:d1:25:ac:ba:4b:ce:88:a0:8e:4f:99:63:c5:00:59:80:
         17:c1:2f:5f:ed:ef:18:5a:dd:e1:01:b9:16:bc:d1:5c:cf:d8:
         fe:73:dd:33:87:ef:5e:26:75:75:78:bf:03:73:13:bf:89:e9:
         42:06:1b:2c:1c:fa:ff:2f:fd:4a:00:4e:1c:61:9a:de:6a:8e:
         16:9c:01:f2:d3:44:88:f6:b6:7c:b4:df:ae:1d:49:db:04:62:
         fb:36:96:c7:46:4b:f3:e6:95:ab:7c:b1:c7:4f:ad:e3:5d:f1:
         3c:2a:6f:22:11:56:50:ec:d2:c3:db:9f:1c:fb:78:92:18:6e:
         52:79:60:5c:10:63:a9:4e:06:d6:67:a6:ad:da:f3:fc:74:4a:
         fd:99:8a:1e:f1:3a:31:a6:af:59:23:4c:21:ec:d3:85:af:ff:
         6c:ac:95:46:0a:57:33:51:66:3a:1e:18:c3:82:fd:c6:00:57:
         fc:de:e5:c2:32:3a:43:a5:11:fc:cf:ee:0c:b2:59:4e:7a:af:
         ac:2c:2f:0d:59:94:99:74:94:d3:37:be:3b:97:85:68:22:91:
         f8:22:59:cc:32:76:c1:4a:2b:d8:83:22:8c:9c:72:96:0c:ae:
         7f:c9:a0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----