Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a646330303a3a2f34302d3438203d3e20323135333034.roa
File:                     326131333a646638303a646330303a3a2f34302d3438203d3e20323135333034.roa (raw, json)
Hash identifier:          Jp9Uelo4SRn5TyGuF8wDkz4qExcSSZu4sZUXtb3Qk6g=
Subject key identifier:   1A:E5:A8:13:7A:FF:C8:19:FC:67:90:BC:35:CA:4F:36:48:AD:A4:31
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       585346612BB50EE781A2F435DA382526D7E4659F
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a646330303a3a2f34302d3438203d3e20323135333034.roa
Signing time:             Mon 18 Sep 2023 09:44:08 +0000
ROA not before:           Mon 18 Sep 2023 09:39:08 +0000
ROA not after:            Mon 16 Sep 2024 09:44:08 +0000
asID:                     215304
IP address blocks:        2a13:df80:dc00::/40 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:53:46:61:2b:b5:0e:e7:81:a2:f4:35:da:38:25:26:d7:e4:65:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Sep 18 09:39:08 2023 GMT
            Not After : Sep 16 09:44:08 2024 GMT
        Subject: CN=1AE5A8137AFFC819FC6790BC35CA4F3648ADA431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c4:72:eb:7a:ae:75:6e:f9:34:97:1c:b9:78:
                    38:05:5c:72:db:60:44:08:09:71:6c:4b:58:31:5d:
                    cf:99:2a:04:fe:f3:80:f6:cc:cf:14:eb:64:52:fe:
                    86:f1:b1:9f:56:91:5d:96:4d:ba:c6:21:7b:ea:b5:
                    98:9b:09:1d:c7:55:f6:af:e7:c4:c6:0b:fc:d7:0d:
                    ff:f3:5d:ea:02:d8:b6:60:d1:8b:1b:cc:1f:4b:6c:
                    a0:c4:f4:e8:48:b6:b9:e8:69:56:10:bb:d2:36:55:
                    b6:08:1c:34:bf:1f:1e:e8:9f:a9:ad:89:8e:6d:24:
                    b3:4b:62:e4:b1:9d:24:2c:c5:de:e0:39:d2:5e:30:
                    b0:da:ff:db:a3:40:cf:1b:c0:b1:fc:07:c1:45:c1:
                    8b:d6:fa:67:e7:68:b4:76:4f:63:30:87:ea:58:ac:
                    7b:44:75:35:4c:be:ca:dd:24:98:df:f5:0e:28:28:
                    9c:61:f4:a1:ba:bc:c2:f7:0a:f4:47:76:b0:89:b2:
                    1b:31:de:67:a5:27:34:09:dc:94:87:6f:9f:46:e2:
                    ea:2b:ce:cb:62:e5:63:53:2a:7e:8f:a0:41:9b:ca:
                    6e:cb:46:d2:4c:23:c9:13:73:7c:1e:55:d6:84:6c:
                    de:9d:55:4b:39:b6:55:ca:5b:52:da:b5:9c:60:b8:
                    ff:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E5:A8:13:7A:FF:C8:19:FC:67:90:BC:35:CA:4F:36:48:AD:A4:31
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a646330303a3a2f34302d3438203d3e20323135333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:dc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         bd:77:05:36:69:35:cf:92:73:b1:03:47:f5:e6:d6:1d:1b:35:
         2f:71:ef:1e:f6:e9:0d:44:82:5c:0c:f6:40:15:22:1b:db:f9:
         84:5d:ff:8a:4d:ee:ac:58:3d:81:7a:aa:ea:32:f8:62:eb:ab:
         b7:b3:19:0f:db:51:12:6d:1a:73:6f:4c:85:a7:5d:21:cf:a7:
         e7:40:6e:58:e6:2f:ed:90:84:0c:36:3f:93:18:94:6f:aa:9f:
         8f:b6:b9:f4:e2:8b:34:15:39:4c:45:14:41:a9:e7:12:42:6e:
         ea:5d:7a:70:63:cd:52:46:23:77:7c:12:a7:ee:22:83:14:b2:
         70:30:2f:56:d3:ee:87:0b:d5:37:2c:f6:70:97:a0:af:54:90:
         e2:e3:48:ed:2a:3c:f2:54:58:c9:6f:ff:24:98:2c:fd:56:37:
         49:e5:5c:62:32:e1:46:50:d8:c3:14:71:53:8f:5b:96:22:b0:
         ea:b1:6b:c3:9e:61:90:67:44:e4:ff:c8:e6:dd:46:68:d4:1a:
         7c:fd:90:6e:86:f3:f2:1b:ef:a5:e7:71:a5:61:5e:67:bd:f0:
         2b:50:fe:9e:91:78:ca:9a:2c:ff:c1:c1:4b:dd:0e:cf:e5:cf:
         ae:d6:9c:87:a6:70:03:bf:04:d0:f0:20:2b:9f:32:54:57:10:
         c2:b6:2c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----