Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638353a626330303a3a2f34302d3634203d3e20323135393235.roa
File:                     326131333a646638353a626330303a3a2f34302d3634203d3e20323135393235.roa (raw, json)
Hash identifier:          reOvsjCUGCRf9zw5ZGZyoV8tGQ+hkc2LLxVzFu1PcGM=
Subject key identifier:   87:01:75:5E:78:BC:51:30:B5:55:A0:A3:9F:1D:08:15:7B:E0:79:54
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       2C9737FF611823E576AFC9AC3A36246E7D65C6
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638353a626330303a3a2f34302d3634203d3e20323135393235.roa
Signing time:             Fri 15 Dec 2023 12:13:46 +0000
ROA not before:           Fri 15 Dec 2023 12:08:46 +0000
ROA not after:            Fri 13 Dec 2024 12:13:46 +0000
asID:                     215925
IP address blocks:        2a13:df85:bc00::/40 maxlen: 64

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:97:37:ff:61:18:23:e5:76:af:c9:ac:3a:36:24:6e:7d:65:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Dec 15 12:08:46 2023 GMT
            Not After : Dec 13 12:13:46 2024 GMT
        Subject: CN=8701755E78BC5130B555A0A39F1D08157BE07954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7b:a7:18:cc:1b:e3:3e:05:e8:61:80:95:61:
                    80:1f:67:74:da:78:8d:9a:3e:a3:64:f9:41:bd:38:
                    89:06:d0:0e:7f:50:97:67:21:99:2d:fe:20:90:4d:
                    7d:a1:b8:1d:66:88:e3:7e:42:7a:bc:f0:f9:f4:16:
                    fb:bf:cc:f3:cb:1c:cc:52:b1:f8:d2:ee:99:05:ff:
                    d1:c2:9d:8e:77:42:4c:d0:74:ba:bf:07:9d:02:d0:
                    73:d5:f2:f7:8f:39:70:b9:3f:8d:ae:49:e0:8d:e3:
                    c9:35:d8:c6:7a:e5:36:1c:95:7e:65:f7:cd:2e:ee:
                    00:c4:99:e0:f7:3e:06:b9:de:82:fb:b7:8d:d3:99:
                    86:c0:b0:46:f8:6b:0d:c6:11:4b:f9:f6:3c:5c:79:
                    b2:f2:be:e3:94:6a:32:37:b8:f5:4b:7b:32:46:e9:
                    dd:f5:25:ba:f7:38:10:0e:6f:4c:c0:cb:f2:38:51:
                    4f:44:bc:a3:ce:53:13:e7:24:d2:78:5d:4d:c6:cc:
                    ca:23:c4:ae:4e:52:ed:f7:c2:7c:3d:33:2b:1d:e6:
                    7a:62:a8:ac:93:69:4b:81:f8:91:bb:b5:5a:b3:1d:
                    41:1f:ae:70:18:bc:6d:c5:08:f7:14:e9:00:5b:d4:
                    52:75:6b:a4:c9:87:95:22:be:03:67:f9:fc:4c:ed:
                    1f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:01:75:5E:78:BC:51:30:B5:55:A0:A3:9F:1D:08:15:7B:E0:79:54
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638353a626330303a3a2f34302d3634203d3e20323135393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df85:bc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         02:b8:a4:a3:57:fe:4f:06:d6:4d:27:4c:b9:1e:4b:6f:93:d3:
         82:19:aa:46:1f:37:f5:a6:a5:02:10:a0:c7:f6:61:80:ae:0f:
         1d:14:a2:1d:5f:d4:6a:54:a3:58:83:04:37:8c:cb:d4:c7:ab:
         22:5d:72:34:b7:19:51:0d:fe:44:72:bc:46:34:62:fb:66:1f:
         5f:24:7e:1e:41:57:0a:f5:62:a2:9e:66:1d:0b:9e:7c:1f:90:
         e3:75:b8:e6:49:75:ce:07:79:00:36:a0:7c:d2:f1:4e:9b:c9:
         37:ac:ee:a7:c3:2e:10:c9:3c:e8:0e:12:49:c7:7e:ad:20:71:
         4f:b0:27:f2:80:ef:b6:14:8d:8d:54:dc:16:8e:32:f7:a5:d5:
         80:b9:22:3b:de:ba:a9:e4:03:b3:a1:80:a9:a2:59:f6:96:16:
         f2:f6:f4:4c:6d:bf:63:35:37:94:f1:fc:a3:7b:92:84:0b:a4:
         49:06:b8:01:69:09:65:04:e6:71:ac:56:a9:56:e9:9f:b7:1e:
         2d:7d:42:64:5b:7a:4e:dd:51:fd:b0:32:b9:69:71:e2:57:5c:
         f6:99:a1:aa:99:5e:9b:4c:35:7f:2f:36:5f:a7:60:3a:91:0b:
         44:26:e6:61:a3:13:4f:b4:d9:2b:7f:24:f1:09:06:ad:19:36:
         90:d1:13:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----