Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a623030623a3a2f34382d3438203d3e203537383730.roa
File:                     326131333a646638303a623030623a3a2f34382d3438203d3e203537383730.roa (raw, json)
Hash identifier:          XrdFp3UlGQugk5aROMr8VOtCzFLt+qLZ5kd4cAeGCJo=
Subject key identifier:   44:C2:BC:26:EB:7D:D6:7B:DA:9D:BD:62:33:B9:08:DA:99:E1:57:54
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       262963FA38347C58262C7C7A5BED385BABFB12AC
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a623030623a3a2f34382d3438203d3e203537383730.roa
Signing time:             Fri 16 Jun 2023 20:08:25 +0000
ROA not before:           Fri 16 Jun 2023 20:03:25 +0000
ROA not after:            Fri 14 Jun 2024 20:08:25 +0000
asID:                     57870
IP address blocks:        2a13:df80:b00b::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:29:63:fa:38:34:7c:58:26:2c:7c:7a:5b:ed:38:5b:ab:fb:12:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Jun 16 20:03:25 2023 GMT
            Not After : Jun 14 20:08:25 2024 GMT
        Subject: CN=44C2BC26EB7DD67BDA9DBD6233B908DA99E15754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ac:29:ab:a9:0e:c1:fa:cb:97:24:01:d9:77:
                    b6:c6:6a:97:d7:93:3b:1d:7e:2d:74:1a:43:29:4a:
                    81:b7:fe:90:6f:73:6b:d7:ff:cb:bc:80:cc:0b:1b:
                    92:21:6d:90:c4:30:48:c0:35:ee:d9:15:e1:9b:c7:
                    24:89:ec:03:f6:71:b9:91:e5:2e:48:22:7f:5e:03:
                    00:e6:cc:21:c8:83:f5:48:8c:c5:d2:fd:15:9e:33:
                    1e:88:70:51:49:d2:8c:aa:c5:57:4c:06:bf:22:a0:
                    a7:db:c6:2e:08:93:26:40:93:76:fb:da:b1:97:2d:
                    86:6f:cc:4a:a1:c9:dc:15:96:cb:cd:8f:49:82:19:
                    d3:fa:54:b2:b1:8a:9b:53:a7:6b:87:32:ec:5f:75:
                    3f:e7:b8:db:54:e3:69:61:fa:bc:0d:db:46:0b:7e:
                    96:9c:b6:70:94:28:99:9a:b2:42:3d:87:18:05:f1:
                    39:d8:5b:3c:07:37:a7:48:56:73:c8:52:d2:df:2a:
                    73:ad:6e:3c:a2:db:fe:42:ac:7e:11:2f:72:21:90:
                    af:d4:ef:29:32:bf:43:1c:3c:8b:6e:72:f7:07:84:
                    c8:57:33:bf:d9:30:19:44:66:3d:01:ed:cb:ff:58:
                    2c:17:68:7b:11:37:f8:d5:c8:af:6b:d2:eb:de:78:
                    c7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C2:BC:26:EB:7D:D6:7B:DA:9D:BD:62:33:B9:08:DA:99:E1:57:54
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a623030623a3a2f34382d3438203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:08:87:d5:c8:c3:b8:5f:b2:ba:14:6a:fd:93:4c:39:3c:a0:
         38:33:aa:e0:f5:bb:9e:b0:b1:95:99:67:72:76:f5:8d:a0:2a:
         94:0d:28:4b:7b:c4:cc:52:b7:55:44:82:e8:cf:b7:6e:37:00:
         f2:de:7e:d6:fb:d4:b7:80:8f:b9:5f:b6:98:c2:ee:4d:39:bc:
         07:1e:bc:3a:c8:f0:6b:f8:4d:80:c5:33:9f:78:a1:13:d6:17:
         c8:3f:5c:ca:e1:ce:08:64:eb:87:8d:bb:7d:89:32:5f:4f:68:
         d3:38:f2:b0:14:4b:77:68:6c:03:2a:fd:44:cc:b4:f4:5f:56:
         28:ad:f2:69:f5:45:20:f5:ef:ce:f9:9c:c3:1c:de:e8:b0:a3:
         67:b1:89:e5:5c:2c:59:25:43:32:a6:9e:65:e6:f0:f9:2a:2d:
         14:26:70:5b:de:c8:51:1c:12:e6:f0:fb:ff:7e:63:90:6f:c7:
         2b:d6:79:c8:d5:d7:64:d2:4b:de:23:a4:ec:79:5a:e5:56:98:
         93:26:5e:73:22:32:58:fd:cf:16:05:c5:2f:0a:92:7b:4a:be:
         2f:50:76:fc:a3:c0:0b:ad:42:85:d6:02:c9:23:50:63:e0:ce:
         49:66:f6:a8:54:93:5f:97:47:c8:37:b5:a2:4d:46:83:fd:70:
         58:30:98:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----