Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a663030303a3a2f33372d3438203d3e20323132363835.roa
File:                     326131333a646638373a663030303a3a2f33372d3438203d3e20323132363835.roa (raw, json)
Hash identifier:          p8KsQFesE4Wy1ph9bUx4dObTWSkdHmrvsRknJ7lH+bw=
Subject key identifier:   72:BE:3E:2F:99:12:49:01:32:BF:1F:F3:7F:BF:7D:2B:33:65:5D:2B
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       21FE202288FBAC7B6E715C84F9563A6F391F70B3
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a663030303a3a2f33372d3438203d3e20323132363835.roa
Signing time:             Fri 01 Dec 2023 20:34:16 +0000
ROA not before:           Fri 01 Dec 2023 20:29:16 +0000
ROA not after:            Fri 29 Nov 2024 20:34:16 +0000
asID:                     212685
IP address blocks:        2a13:df87:f000::/37 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:fe:20:22:88:fb:ac:7b:6e:71:5c:84:f9:56:3a:6f:39:1f:70:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Dec  1 20:29:16 2023 GMT
            Not After : Nov 29 20:34:16 2024 GMT
        Subject: CN=72BE3E2F9912490132BF1FF37FBF7D2B33655D2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:20:f6:ab:8f:44:81:3b:fe:a8:8c:3f:b3:12:
                    7a:b8:9d:24:04:e4:18:02:1b:0b:db:44:6d:a6:b5:
                    e6:34:54:02:ee:f7:2c:1d:dc:32:fd:7e:12:ea:9d:
                    e3:8c:62:f4:48:9f:9d:9c:1d:13:07:d3:93:6a:d6:
                    5f:7c:9b:a8:71:c6:ee:09:e3:e3:25:6b:ac:d4:b4:
                    31:69:2b:59:b6:9b:b8:6f:b8:11:2e:fe:69:0f:7e:
                    bf:bc:fe:eb:39:fb:69:5e:b3:97:51:cb:7a:ed:be:
                    02:6a:7a:2b:fa:e5:78:ff:aa:97:ec:b6:4c:95:56:
                    b7:68:b0:d4:91:e4:6b:b8:c7:eb:c4:cd:63:2b:e8:
                    5d:de:ed:22:77:b6:4c:26:6b:cf:3e:03:a5:b8:0d:
                    32:96:89:e8:ce:3c:fd:35:c7:34:92:0d:2e:e9:8d:
                    e4:a5:cf:c7:93:32:79:69:2c:ab:85:42:2b:6d:c2:
                    39:22:b2:e3:22:15:a8:70:2e:ce:79:8b:86:8b:cd:
                    94:e6:c8:e9:a6:36:ae:a9:c9:df:92:ce:5a:f8:ab:
                    80:f7:74:d4:77:16:c1:0e:d9:a8:fd:ba:77:c3:7b:
                    17:f3:1c:75:fb:b0:ec:04:6e:f2:02:3d:e2:81:1e:
                    0b:8f:b9:b7:33:4e:0c:e6:4f:88:c8:fa:2c:dc:93:
                    40:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BE:3E:2F:99:12:49:01:32:BF:1F:F3:7F:BF:7D:2B:33:65:5D:2B
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a663030303a3a2f33372d3438203d3e20323132363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87:f000::/37

    Signature Algorithm: sha256WithRSAEncryption
         2c:9a:ea:15:f1:f8:54:6a:18:a3:84:ed:f2:ad:1e:aa:62:4b:
         b0:dd:dd:5e:15:4b:59:fd:0b:d3:5e:e0:bf:20:f6:61:c4:83:
         64:d6:23:a1:e4:38:2a:6d:37:34:ad:7a:5e:7d:c4:72:59:80:
         e5:41:bb:15:a2:7d:c2:79:a1:3f:8e:46:58:70:4f:6f:2d:c1:
         5b:87:97:30:10:9a:cf:65:14:c0:a3:60:00:9c:95:f2:b6:d2:
         78:4a:c1:d8:9e:7e:58:7d:7f:2f:2d:3d:df:e8:e0:4d:34:fe:
         53:4f:3e:b5:9e:2a:9b:6c:73:92:c7:37:e8:bd:2e:5a:a3:49:
         56:82:d5:52:16:09:35:f1:ba:cb:85:b8:e0:d2:c7:ae:47:4c:
         cc:60:c3:14:56:da:bf:1d:9c:5a:8e:95:a8:f4:51:21:28:f2:
         be:06:56:aa:be:e8:4e:71:e1:36:7e:64:67:e7:54:87:a2:57:
         35:8b:6f:43:ad:a0:d0:5b:ee:33:86:cc:46:46:2f:f4:30:78:
         61:ac:58:7a:0f:6f:a5:e8:04:7d:6b:42:97:fe:65:a4:18:7a:
         29:7a:20:c8:a7:61:0f:91:72:70:cf:00:e3:40:21:bd:93:c4:
         a8:73:65:07:6e:8a:80:1a:96:7d:fa:24:09:66:28:f2:87:81:
         94:fb:7c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----