Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638333a623030623a3a2f34382d3438203d3e203537383730.roa
File:                     326131333a646638333a623030623a3a2f34382d3438203d3e203537383730.roa (raw, json)
Hash identifier:          DiMEqU2I9ntmtEXdE5yzg1c83pLbLdMa7HOUh3GY9dE=
Subject key identifier:   8D:5B:FA:73:5E:A6:E4:89:FD:83:06:86:57:29:C6:B7:E5:E2:27:C2
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       654D8AFB6DC62E1EE58A7585491E8402D16AECA3
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638333a623030623a3a2f34382d3438203d3e203537383730.roa
Signing time:             Fri 16 Jun 2023 20:08:45 +0000
ROA not before:           Fri 16 Jun 2023 20:03:45 +0000
ROA not after:            Fri 14 Jun 2024 20:08:45 +0000
asID:                     57870
IP address blocks:        2a13:df83:b00b::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:4d:8a:fb:6d:c6:2e:1e:e5:8a:75:85:49:1e:84:02:d1:6a:ec:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Jun 16 20:03:45 2023 GMT
            Not After : Jun 14 20:08:45 2024 GMT
        Subject: CN=8D5BFA735EA6E489FD8306865729C6B7E5E227C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0d:e5:6a:85:a9:33:d6:54:63:f7:bf:35:73:
                    8d:8e:2e:d2:32:6d:23:49:78:c7:30:8a:a6:47:10:
                    6a:a7:7d:96:b2:5b:ac:bf:ea:bd:cb:27:a5:c0:72:
                    e3:ea:98:8b:b2:33:84:c9:23:fe:3a:69:24:48:a5:
                    29:73:c1:fb:12:f6:e1:c5:f3:e3:88:74:59:4d:11:
                    f7:97:d5:aa:6a:ac:e3:6f:7f:f3:04:2d:2d:8f:a6:
                    d6:e8:d4:4c:55:a5:4c:16:61:16:e6:e6:ab:41:7f:
                    26:ad:60:46:6a:af:c7:c9:af:b6:63:23:54:c7:7e:
                    56:75:b6:82:c0:17:58:3f:b4:ea:fd:ea:0b:d0:fe:
                    3e:17:b9:e3:11:fe:91:09:fe:98:3e:b1:dd:93:3b:
                    5f:5f:d7:00:4f:0d:70:c0:ae:5e:14:0f:97:ff:2c:
                    46:14:1c:71:28:4b:db:07:d0:21:b7:d7:79:d3:3d:
                    43:0d:95:2c:59:92:1c:e3:4a:a8:3f:11:44:60:3a:
                    e4:3a:97:cc:46:4f:d2:33:5a:2a:61:a2:6d:5d:00:
                    cc:cc:ab:42:79:b7:d0:23:a7:25:e9:2d:87:88:e7:
                    bb:22:24:b8:0f:8d:5c:ed:84:db:ea:13:86:2a:4f:
                    19:30:50:95:77:0f:ef:d7:e6:75:9c:2e:df:dd:73:
                    a1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5B:FA:73:5E:A6:E4:89:FD:83:06:86:57:29:C6:B7:E5:E2:27:C2
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638333a623030623a3a2f34382d3438203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df83:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:11:90:cc:7a:56:cc:3b:08:e6:53:e7:c2:bd:15:af:32:94:
         02:9d:14:55:b3:ef:0c:55:8c:01:f8:b5:b4:aa:2d:07:9e:68:
         6d:07:06:5d:28:0a:66:74:5a:c1:67:1b:c6:1e:62:b2:35:91:
         0a:ad:f8:c9:1b:2f:22:ae:ff:f5:c7:e0:ba:38:43:1a:70:a7:
         e2:0b:6e:70:58:d5:a2:84:31:e6:cc:83:d6:5c:79:b4:5e:2b:
         43:7a:e4:a7:9a:0f:24:80:86:ad:31:04:c2:db:d2:bc:ef:0c:
         25:a9:82:80:e3:e4:8f:42:44:1e:5b:1d:0f:8b:d7:2c:d5:76:
         b3:50:26:c9:2e:51:7c:6d:31:34:3c:1f:50:e7:b8:70:57:2e:
         f7:fd:82:4c:a2:94:07:74:0e:34:de:8b:d6:72:56:56:b1:0c:
         a9:12:3b:46:65:93:6b:73:09:08:11:94:5a:31:fd:37:a6:27:
         fd:2c:e0:bd:e9:6e:aa:8e:1f:c0:3f:4b:a1:63:ed:b9:b2:6a:
         f2:a8:e1:b4:45:bb:2a:35:3b:c6:87:cf:d7:09:5e:84:57:44:
         5f:74:ba:67:e3:bf:ab:db:9b:1d:ab:df:a5:7a:b2:cb:ca:b3:
         1b:3f:c9:8e:47:e4:53:3e:66:9d:80:34:4b:95:e2:bf:83:31:
         69:17:9d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----