Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a366130303a3a2f34302d3438203d3e20323136333031.roa
File:                     326131333a646638303a366130303a3a2f34302d3438203d3e20323136333031.roa (raw, json)
Hash identifier:          xGfVZqdfih/IB/2xnfuLVWU77w2muDov0xH7ari8+3g=
Subject key identifier:   EB:4E:7D:31:CC:C4:9D:28:CF:EB:12:98:D1:44:86:63:05:F5:28:95
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       32DAEE994A1E55B9EB193F68B0FB13B6B10DA9C7
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a366130303a3a2f34302d3438203d3e20323136333031.roa
Signing time:             Mon 18 Sep 2023 09:43:19 +0000
ROA not before:           Mon 18 Sep 2023 09:38:19 +0000
ROA not after:            Mon 16 Sep 2024 09:43:19 +0000
asID:                     216301
IP address blocks:        2a13:df80:6a00::/40 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:da:ee:99:4a:1e:55:b9:eb:19:3f:68:b0:fb:13:b6:b1:0d:a9:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Sep 18 09:38:19 2023 GMT
            Not After : Sep 16 09:43:19 2024 GMT
        Subject: CN=EB4E7D31CCC49D28CFEB1298D144866305F52895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7e:be:ed:67:b6:94:d7:2c:8d:88:29:9b:78:
                    41:68:93:9c:a3:63:08:8c:56:6e:cb:4c:34:48:b2:
                    7b:9f:27:45:92:eb:fd:7d:1e:6f:98:b9:55:79:49:
                    53:33:57:ab:b8:76:7f:d1:bc:88:d3:b0:36:48:04:
                    67:e3:79:11:4a:2a:f5:9f:fc:c5:bb:d1:91:ca:bb:
                    61:b1:91:6e:2a:e7:19:ec:a2:2f:78:69:a3:ce:02:
                    6c:64:de:73:51:0c:5e:23:eb:56:4b:a5:57:95:e6:
                    83:fe:a2:90:9c:03:ad:fa:ab:86:36:f2:db:40:82:
                    97:b8:76:94:73:7f:a8:46:50:a2:2c:ca:03:96:52:
                    61:a5:ea:54:18:5c:98:b1:69:b2:46:65:b8:67:de:
                    89:ef:b8:0b:8e:0d:53:46:5f:fc:58:9b:bc:c1:86:
                    20:12:84:cb:a5:43:7c:06:33:05:69:79:66:3e:73:
                    55:c6:61:6a:6f:81:6b:3d:6e:e8:0c:70:2f:07:2d:
                    40:68:82:9f:c5:35:06:7f:59:94:d7:e0:3d:83:c9:
                    be:40:d1:10:e5:1c:63:d6:07:09:6c:a2:7d:e4:00:
                    e3:e0:2c:1c:60:f3:5d:b1:6b:78:6c:3c:90:5b:fe:
                    0b:ce:e8:33:93:da:98:1c:c3:f0:26:06:c5:2c:1d:
                    b7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4E:7D:31:CC:C4:9D:28:CF:EB:12:98:D1:44:86:63:05:F5:28:95
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a366130303a3a2f34302d3438203d3e20323136333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:6a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         63:4b:44:1a:36:40:59:50:b1:d1:4e:57:66:5e:e9:02:73:52:
         90:54:7c:d9:9d:27:7a:a0:9c:8e:7c:20:3f:23:1f:fc:44:56:
         31:a1:49:52:32:b3:14:88:16:5e:b4:d5:a1:5d:9d:05:78:2f:
         70:91:e0:38:66:41:52:16:ec:64:49:0f:a9:47:7a:88:6d:17:
         0b:9c:b1:9d:ff:4f:21:8e:2c:f8:55:d5:61:10:95:b3:df:aa:
         2a:f9:03:0d:f8:c6:4b:d1:51:71:c0:fd:57:9a:71:f1:95:94:
         c4:19:84:5c:94:c9:e8:cd:f3:2e:c2:5e:48:30:1d:36:49:7a:
         ee:ac:e1:2d:75:4a:d6:ca:fe:1e:a1:a3:09:02:d7:72:87:86:
         bb:ac:86:da:55:9f:6e:e4:bc:f6:97:45:64:c5:42:05:1e:4b:
         ac:53:87:17:92:02:c9:f5:e7:73:49:80:ac:16:70:89:74:17:
         8b:16:3f:2d:4b:dd:60:91:a8:06:93:e7:bb:0b:ea:32:d9:a0:
         df:36:62:59:ae:e0:98:25:af:20:90:e4:4f:d7:d3:75:8a:3b:
         40:b8:1a:5e:41:7f:30:3b:80:5d:a1:04:8b:8c:20:7d:19:9a:
         28:b8:d9:87:9f:2c:3b:e6:cd:1a:14:b7:bf:dd:b1:d6:7f:f1:
         f0:de:98:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----