Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a363830323a3a2f34382d3438203d3e20313530323439.roa
File:                     326131333a646638303a363830323a3a2f34382d3438203d3e20313530323439.roa (raw, json)
Hash identifier:          JyHfWPIa7lyYf/zrYYfV1phbvcOaUVdIzHJ9MPtR76A=
Subject key identifier:   3C:E2:1B:2D:55:94:B7:5D:25:AA:18:37:11:1E:EE:33:0A:A2:9D:55
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       4E18CFD3A84E05D448629479BFABFF20D79D1F7F
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a363830323a3a2f34382d3438203d3e20313530323439.roa
Signing time:             Tue 19 Sep 2023 14:01:07 +0000
ROA not before:           Tue 19 Sep 2023 13:56:07 +0000
ROA not after:            Tue 17 Sep 2024 14:01:07 +0000
asID:                     150249
IP address blocks:        2a13:df80:6802::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:18:cf:d3:a8:4e:05:d4:48:62:94:79:bf:ab:ff:20:d7:9d:1f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Sep 19 13:56:07 2023 GMT
            Not After : Sep 17 14:01:07 2024 GMT
        Subject: CN=3CE21B2D5594B75D25AA1837111EEE330AA29D55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:66:e5:01:bd:53:6d:bd:22:2d:9c:fb:3f:6e:
                    ca:d2:f5:88:bd:43:c6:44:03:ca:fe:37:d2:91:ff:
                    ff:f8:1f:ff:74:a6:83:0f:12:4a:07:c4:45:9d:03:
                    16:2f:bd:aa:55:c5:f3:78:bb:86:d0:24:50:fa:41:
                    51:5e:42:21:db:4b:43:2c:21:76:28:87:ae:61:a2:
                    c7:67:26:63:98:f8:5b:76:7d:4d:b5:ce:c2:b5:40:
                    0b:64:6b:29:45:6a:32:2c:eb:34:90:7a:93:c3:f5:
                    4d:5b:e1:f7:92:da:a2:26:a7:34:bf:b7:c7:29:8e:
                    7c:8e:a4:90:df:95:4d:69:14:39:94:1f:f7:57:2f:
                    8e:da:78:91:68:b0:c9:d7:7d:c8:25:4a:3d:d1:c3:
                    70:67:00:ae:f7:c7:f7:3c:9b:09:be:52:ea:ce:0c:
                    3f:3d:a3:41:b5:b7:a3:ce:f9:04:97:de:84:74:db:
                    f5:cb:69:06:47:34:8c:48:72:f6:c9:75:5c:04:23:
                    84:41:17:d7:5e:fd:38:88:d1:b3:51:c1:a0:73:cd:
                    66:9b:91:4c:d9:d0:9a:83:d9:cd:5b:8b:54:05:35:
                    73:cb:bf:78:81:e5:33:ec:af:18:9a:6c:da:6a:41:
                    93:e7:d8:55:f8:2c:db:4d:1f:ec:cf:1e:38:c0:e6:
                    78:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E2:1B:2D:55:94:B7:5D:25:AA:18:37:11:1E:EE:33:0A:A2:9D:55
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a363830323a3a2f34382d3438203d3e20313530323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:6802::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:ce:69:0e:86:ea:e9:f3:8e:d8:b8:03:eb:96:af:31:9f:d8:
         d4:21:41:33:72:32:84:83:7d:57:a5:45:c5:55:06:fe:d4:f0:
         39:72:40:c2:b0:01:32:36:e2:33:74:0d:01:43:f5:3e:08:b3:
         2f:2d:21:1c:86:36:7e:7f:8a:86:03:5e:98:b2:0a:25:50:c5:
         65:e6:3b:3d:86:f9:c8:ea:73:d7:6a:5a:89:30:75:76:28:c8:
         b2:ca:bd:96:78:f5:4d:3e:9f:51:f9:47:b6:14:f9:64:c1:f5:
         ca:6b:31:de:9e:95:b2:e8:06:58:5c:11:46:eb:95:92:65:85:
         14:dd:47:d4:b4:cf:64:da:65:2d:47:7e:07:3b:2c:e2:5b:11:
         6e:95:63:7e:b7:b3:18:4d:89:4f:3d:eb:44:e4:30:69:16:fe:
         c7:a4:f8:43:53:9f:6f:81:36:24:c7:aa:46:97:b1:7c:59:73:
         e7:8a:28:0b:ea:c1:82:52:c6:64:cb:49:f3:bd:40:43:f0:28:
         43:f9:08:81:eb:ad:e3:bf:b0:65:49:f5:96:2f:40:36:74:21:
         1f:16:6e:a5:51:0b:74:e6:d8:8b:51:b7:ca:76:98:d9:71:7a:
         aa:9d:ac:93:cb:4a:2f:56:d8:e1:33:ab:07:c0:4c:a1:17:6f:
         b9:45:4c:7d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUThjP06hOBdRIYpR5v6v/INedH38wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDVjM2Q1ZTcwZmM5YWQxMGJhOTBkNDVkYzY2NDU0ZTll
M2ExNDZhODAeFw0yMzA5MTkxMzU2MDdaFw0yNDA5MTcxNDAxMDdaMDMxMTAvBgNV
BAMTKDNDRTIxQjJENTU5NEI3NUQyNUFBMTgzNzExMUVFRTMzMEFBMjlENTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUZuUBvVNtvSItnPs/bsrS9Yi9
Q8ZEA8r+N9KR///4H/90poMPEkoHxEWdAxYvvapVxfN4u4bQJFD6QVFeQiHbS0Ms
IXYoh65hosdnJmOY+Ft2fU21zsK1QAtkaylFajIs6zSQepPD9U1b4feS2qImpzS/
t8cpjnyOpJDflU1pFDmUH/dXL47aeJFosMnXfcglSj3Rw3BnAK73x/c8mwm+UurO
DD89o0G1t6PO+QSX3oR02/XLaQZHNIxIcvbJdVwEI4RBF9de/TiI0bNRwaBzzWab
kUzZ0JqD2c1bi1QFNXPLv3iB5TPsrxiabNpqQZPn2FX4LNtNH+zPHjjA5nj1AgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUPOIbLVWUt10lqhg3ER7uMwqinVUwHwYDVR0j
BBgwFoAU1cPV5w/JrRC6kNRdxmRU6eOhRqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYtMWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYx
NjdkLzAvRDVDM0Q1RTcwRkM5QUQxMEJBOTBENDVEQzY2NDU0RTlFM0ExNDZBOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjUFY1d19KclJDNmtOUmR4bVJVNmVP
aFJxZy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYt
MWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYxNjdkLzAvMzI2MTMxMzMzYTY0NjYzODMw
M2EzNjM4MzAzMjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzUzMDMyMzQzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoT34BoAjANBgkqhkiG9w0BAQsFAAOCAQEATM5pDobq6fOO2LgD
65avMZ/Y1CFBM3IyhIN9V6VFxVUG/tTwOXJAwrABMjbiM3QNAUP1PgizLy0hHIY2
fn+KhgNemLIKJVDFZeY7PYb5yOpz12paiTB1dijIssq9lnj1TT6fUflHthT5ZMH1
ymsx3p6VsugGWFwRRuuVkmWFFN1H1LTPZNplLUd+Bzss4lsRbpVjfrezGE2JTz3r
ROQwaRb+x6T4Q1Ofb4E2JMeqRpexfFlz54ooC+rBglLGZMtJ871AQ/AoQ/kIgeut
47+wZUn1li9ANnQhHxZupVELdObYi1G3ynaY2XF6qp2sk8tKL1bY4TOrB8BMoRdv
uUVMfQ==
-----END CERTIFICATE-----