Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a383030303a3a2f33382d3438203d3e203439313935.roa
File:                     326131333a646638303a383030303a3a2f33382d3438203d3e203439313935.roa (raw, json)
Hash identifier:          LMrOgR4KHb90olsE6z4jUFEKf9VS/PZ71MSpHrwa9WU=
Subject key identifier:   8F:C0:64:DC:4B:FB:C2:44:19:74:ED:A7:73:08:8D:9C:53:5C:AC:53
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       71C1D0FFC36106881F9892FDB9851B5A2DEB9BFD
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a383030303a3a2f33382d3438203d3e203439313935.roa
Signing time:             Fri 01 Sep 2023 01:17:37 +0000
ROA not before:           Fri 01 Sep 2023 01:12:37 +0000
ROA not after:            Fri 30 Aug 2024 01:17:37 +0000
asID:                     49195
IP address blocks:        2a13:df80:8000::/38 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c1:d0:ff:c3:61:06:88:1f:98:92:fd:b9:85:1b:5a:2d:eb:9b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Sep  1 01:12:37 2023 GMT
            Not After : Aug 30 01:17:37 2024 GMT
        Subject: CN=8FC064DC4BFBC2441974EDA773088D9C535CAC53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8c:66:71:ca:3c:36:c9:55:ac:45:ae:4c:fc:
                    af:19:05:89:29:1a:69:3c:4f:da:cf:6a:eb:cc:05:
                    4c:c9:f0:8e:9c:fd:cf:e7:c0:7e:1d:14:d8:a1:e3:
                    61:09:ca:6d:89:55:90:e4:8c:4c:62:97:95:75:a3:
                    7f:b4:72:fa:26:32:f4:86:2a:52:d9:ef:99:0e:f2:
                    71:97:ae:de:70:13:c7:65:08:f7:9b:88:bf:f9:f6:
                    95:2d:43:82:b6:48:10:a0:bd:b0:4a:d1:14:7b:c1:
                    f8:53:e2:e9:cb:98:b8:0d:67:5b:fb:cc:3c:d1:43:
                    97:99:01:72:79:9f:8e:83:27:67:58:32:a9:a5:21:
                    ea:41:79:64:d4:d7:d1:8b:2a:f5:f1:d4:2c:9f:81:
                    df:53:6d:07:32:f7:1c:35:84:fb:cc:7f:f9:92:ee:
                    b1:df:e1:21:17:e7:15:84:59:f3:8f:55:79:0e:32:
                    02:34:ca:33:7e:b8:14:b2:54:7a:d4:44:3a:ad:25:
                    a3:2f:d7:37:8f:4e:74:05:d0:03:c3:4f:65:26:b2:
                    a6:c6:62:4d:1e:5e:2c:58:3c:fe:fd:6d:35:4a:b3:
                    1f:e2:af:43:11:fd:e0:12:06:91:6e:cf:b9:f6:7f:
                    8e:e3:eb:88:5d:ca:d1:01:aa:b3:7c:61:31:b3:28:
                    f9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C0:64:DC:4B:FB:C2:44:19:74:ED:A7:73:08:8D:9C:53:5C:AC:53
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a383030303a3a2f33382d3438203d3e203439313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:8000::/38

    Signature Algorithm: sha256WithRSAEncryption
         00:42:aa:b1:8b:3c:55:a4:b9:39:07:9f:de:33:3f:1a:f0:b6:
         e6:ce:7c:f5:c1:1a:f9:1c:c9:db:67:58:a3:64:46:e9:bd:a6:
         4a:e1:97:42:57:fd:7c:de:c4:70:13:ee:0b:c7:3d:87:ae:df:
         bb:50:a5:2e:ed:ed:91:cf:e4:c0:31:d3:19:db:a4:42:f3:62:
         da:b1:84:0d:2f:c2:b0:65:11:9d:9e:23:cc:0b:69:21:7c:e1:
         28:e0:0f:72:d6:eb:a4:fb:0c:ba:95:37:ea:b9:b1:5c:f2:8f:
         ad:d2:7e:b0:e0:5b:87:bf:16:62:d3:fa:cc:a0:e3:09:4c:2f:
         bb:64:96:7f:c4:3d:51:17:4b:fb:ed:73:7d:1b:89:33:73:08:
         41:99:b8:ea:bc:97:89:27:e8:9e:09:3f:5a:6a:de:27:ad:10:
         bb:40:9e:6c:b9:30:c6:b8:a0:b9:da:bb:e8:37:1e:60:ef:e4:
         35:ca:94:e5:fd:ba:ff:d0:43:d9:59:79:02:f3:d9:f0:26:46:
         ec:7b:f8:03:49:c1:26:21:8e:0f:e5:05:a9:59:52:5b:f6:1e:
         e2:11:cc:83:a3:82:d2:13:b2:7c:41:bf:75:4b:7e:b5:b2:ca:
         e9:fd:f5:c8:fe:95:6d:c9:a9:96:7c:53:09:06:89:1c:9a:be:
         ad:46:65:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----