Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a333030313a3a2f34382d3438203d3e20323135393732.roa
File:                     326131333a646638373a333030313a3a2f34382d3438203d3e20323135393732.roa (raw, json)
Hash identifier:          fF7jZSEcVpxZXr/fRKGKBZTXsy3ezb1bl4bbxIWNX4A=
Subject key identifier:   0B:37:BE:E2:6B:DD:B4:D5:66:BB:7F:C4:BB:FD:76:28:05:CE:E5:F4
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       08C6DA19CFC4F0DD90A88ADC87E4352AFBB6EF56
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a333030313a3a2f34382d3438203d3e20323135393732.roa
Signing time:             Mon 20 Nov 2023 19:00:51 +0000
ROA not before:           Mon 20 Nov 2023 18:55:51 +0000
ROA not after:            Mon 18 Nov 2024 19:00:51 +0000
asID:                     215972
IP address blocks:        2a13:df87:3001::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c6:da:19:cf:c4:f0:dd:90:a8:8a:dc:87:e4:35:2a:fb:b6:ef:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Nov 20 18:55:51 2023 GMT
            Not After : Nov 18 19:00:51 2024 GMT
        Subject: CN=0B37BEE26BDDB4D566BB7FC4BBFD762805CEE5F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4a:df:fd:6d:5a:5d:fd:db:66:2f:ad:38:e8:
                    65:b5:b3:e9:01:8a:9e:4e:64:31:3b:f7:8c:51:04:
                    af:66:75:2a:10:92:a4:52:1b:26:a6:ce:40:7a:10:
                    e3:46:8f:c5:2f:d9:ea:b0:8a:bc:e8:f3:8f:15:57:
                    12:89:3d:7f:a5:fd:ea:7e:21:52:0f:15:72:80:c6:
                    d4:0e:ab:73:e8:d7:66:38:5b:b3:c3:34:57:15:ae:
                    b3:6a:a0:83:9a:51:73:d6:d4:bc:b0:56:0e:17:e6:
                    14:0a:b7:4f:a7:30:20:59:6c:53:8c:0b:b3:fa:39:
                    cc:ab:02:8e:a5:b3:56:29:99:50:1e:90:5b:65:34:
                    a6:d4:9a:ec:ec:a2:f8:8e:05:66:09:e4:2b:ec:6b:
                    16:ee:8d:87:72:78:81:f3:cb:ff:72:3a:8c:0b:84:
                    56:55:ea:5f:66:3d:9d:78:d1:8d:90:c6:2b:c4:9f:
                    25:32:a7:b0:b9:d7:c5:e7:0a:7c:e0:4a:73:93:97:
                    9a:b3:ed:30:96:31:ee:7c:b9:64:56:c7:79:cb:5a:
                    1f:2e:1d:b9:2a:13:ed:41:47:cb:05:c3:87:59:73:
                    58:ac:b0:ca:1f:0f:47:19:3a:bb:25:ba:7a:55:e3:
                    1a:b1:84:d0:b7:e6:cf:30:0a:9c:5b:4c:1f:c3:98:
                    a0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:37:BE:E2:6B:DD:B4:D5:66:BB:7F:C4:BB:FD:76:28:05:CE:E5:F4
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a333030313a3a2f34382d3438203d3e20323135393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87:3001::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:57:94:a5:2c:4e:da:ab:1f:54:66:af:3f:7b:ce:c9:41:a4:
         ae:5c:b3:74:8a:34:76:c1:b3:57:19:b3:c6:7c:49:d0:ef:bf:
         07:91:c2:2d:ae:ee:da:a2:65:fc:dd:ed:3c:b7:80:2b:f6:fd:
         a6:ec:2d:6f:3b:77:bd:b0:ba:01:fa:14:8b:14:76:3a:02:48:
         1c:fa:e7:fe:d8:c7:3e:18:bd:be:0b:43:1c:a5:ad:ec:5b:2b:
         6f:7c:be:74:9a:f5:be:64:09:9e:94:b0:09:58:48:4d:c6:f2:
         0f:5e:1d:15:44:9f:37:68:ce:2e:00:af:8a:e2:8c:ec:20:ef:
         7d:38:5c:ae:1d:3a:52:05:18:69:8f:97:9a:2e:a7:dc:f6:e1:
         1d:7d:a1:8c:be:94:5b:9c:79:2b:4f:06:75:7a:91:ca:a1:e4:
         ff:86:71:dd:b0:9e:6c:6f:b7:68:8b:6d:ce:db:c6:72:17:8a:
         61:c6:ed:30:74:23:7f:0d:2d:55:17:7e:75:30:25:54:6c:7f:
         09:f4:70:2b:35:72:6f:83:36:08:0a:2d:42:72:59:83:0c:a4:
         11:9c:7c:40:d4:17:8d:db:6b:78:0a:e0:66:2c:a5:2c:ba:1e:
         4e:be:42:83:33:0e:51:6a:d7:90:20:28:72:0b:46:df:3e:ba:
         d4:26:2e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----