Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa
File:                     323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier:          X9hDIakZxMyYW09+8o3DY1NSDUaTkUm2cM6/XfJPWAU=
Subject key identifier:   05:4D:EB:0E:2B:E1:5C:B8:AC:F0:2F:B5:DB:4D:95:DC:D7:31:E6:80
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       3AAC1238D2D08B0076739854468EC9094CA73810
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa
Signing time:             Thu 28 Dec 2023 21:56:26 +0000
ROA not before:           Thu 28 Dec 2023 21:51:26 +0000
ROA not after:            Thu 26 Dec 2024 21:56:26 +0000
asID:                     0
IP address blocks:        2001:7f8:14b::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ac:12:38:d2:d0:8b:00:76:73:98:54:46:8e:c9:09:4c:a7:38:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Dec 28 21:51:26 2023 GMT
            Not After : Dec 26 21:56:26 2024 GMT
        Subject: CN=054DEB0E2BE15CB8ACF02FB5DB4D95DCD731E680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:67:78:24:a8:73:b4:10:26:27:49:b2:19:9c:
                    66:e8:c9:f6:7f:3a:b8:37:80:50:3f:81:5c:d2:16:
                    8d:78:33:59:a2:44:df:ef:6e:92:7e:c6:05:7f:6f:
                    ae:0f:1f:ca:a2:15:d7:14:0e:65:37:ed:9a:98:07:
                    8c:74:5b:db:9d:70:fb:1a:46:0f:7d:ab:58:c6:98:
                    5c:cc:f3:43:fe:12:78:d6:54:9f:22:da:c9:a7:db:
                    7f:cb:35:34:ce:83:81:01:a8:c7:40:1c:fd:be:13:
                    8a:f7:12:e3:a0:b3:78:39:d4:64:3b:71:11:b5:3a:
                    fe:ac:63:b5:65:02:b8:5d:98:7f:b7:95:d5:a1:9c:
                    82:2f:96:5a:34:7a:40:f4:ed:67:9f:a2:2f:5a:db:
                    4e:31:60:27:4f:96:30:49:5d:fe:25:a7:3e:c9:43:
                    5c:41:f6:e6:6d:49:f4:35:50:d1:c1:84:3f:a2:27:
                    62:8c:e4:e1:03:fa:5c:28:3f:24:bd:33:49:4b:27:
                    30:08:4d:37:2d:df:cc:3a:d9:bf:54:2d:35:23:cb:
                    20:4b:a8:49:15:06:5d:42:7f:15:9d:13:b1:92:84:
                    57:37:8f:4e:2e:22:d4:c9:b4:16:e4:4a:41:b9:5a:
                    67:21:c3:bb:b0:fb:a1:ac:7a:cc:2b:a1:27:b5:8c:
                    f7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:4D:EB:0E:2B:E1:5C:B8:AC:F0:2F:B5:DB:4D:95:DC:D7:31:E6:80
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:7f8:14b::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:d8:ec:8f:50:78:84:67:5e:77:7b:0d:23:e9:e8:7e:b9:8f:
         cb:ae:54:8c:18:5f:66:32:f5:63:d4:5a:bc:a6:24:42:79:d1:
         8c:4e:8d:3b:8a:cc:a2:03:fc:7a:e7:a3:5b:d1:31:19:5c:b3:
         0e:b2:a3:43:45:b2:bd:38:8c:7a:b6:0c:9f:dd:f2:b8:f5:d9:
         97:77:9a:07:b3:3e:68:32:12:e5:19:36:e0:d8:a8:48:8e:00:
         8d:2a:ff:ed:97:2d:2a:f1:ae:9a:54:0f:b6:56:38:58:e8:1a:
         2d:8b:cf:22:3b:77:b8:ec:85:7c:c2:ad:6a:7d:f7:79:5b:df:
         d5:13:31:76:d0:06:fe:fa:bb:c2:d1:fe:e5:25:6a:05:5f:01:
         0e:04:6a:f8:32:6e:d4:d7:98:9c:ba:1c:d2:e5:57:52:3e:82:
         ea:3d:36:c5:53:92:1d:01:eb:30:7c:85:96:c0:11:9e:a9:9a:
         ec:83:9e:52:a4:90:8d:ff:8a:c5:ab:e6:8e:94:dd:e1:88:68:
         89:82:a8:2f:17:93:eb:51:51:2a:14:e4:7f:c6:4d:f9:02:4f:
         2b:fd:59:bc:d1:be:28:c5:be:7a:45:2d:a6:82:b2:11:e4:78:
         a3:8b:81:b8:79:25:f1:f6:d9:ef:82:8c:a5:0c:50:a8:be:e3:
         13:11:d8:b1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOqwSONLQiwB2c5hURo7JCUynOBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl
MmE1YmIzODAeFw0yMzEyMjgyMTUxMjZaFw0yNDEyMjYyMTU2MjZaMDMxMTAvBgNV
BAMTKDA1NERFQjBFMkJFMTVDQjhBQ0YwMkZCNURCNEQ5NURDRDczMUU2ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Z3gkqHO0ECYnSbIZnGboyfZ/
Org3gFA/gVzSFo14M1miRN/vbpJ+xgV/b64PH8qiFdcUDmU37ZqYB4x0W9udcPsa
Rg99q1jGmFzM80P+EnjWVJ8i2smn23/LNTTOg4EBqMdAHP2+E4r3EuOgs3g51GQ7
cRG1Ov6sY7VlArhdmH+3ldWhnIIvllo0ekD07Wefoi9a204xYCdPljBJXf4lpz7J
Q1xB9uZtSfQ1UNHBhD+iJ2KM5OED+lwoPyS9M0lLJzAITTct38w62b9ULTUjyyBL
qEkVBl1CfxWdE7GShFc3j04uItTJtBbkSkG5Wmchw7uw+6GseswroSe1jPfzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUBU3rDivhXLis8C+1202V3Ncx5oAwHwYDVR0j
BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0
OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL
bHV6Zy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUt
MmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0OGZhLzAvMzIzMDMwMzEzYTM3NjYzODNh
MzEzNDYyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQf4
AUswDQYJKoZIhvcNAQELBQADggEBAKfY7I9QeIRnXnd7DSPp6H65j8uuVIwYX2Yy
9WPUWrymJEJ50YxOjTuKzKID/Hrno1vRMRlcsw6yo0NFsr04jHq2DJ/d8rj12Zd3
mgezPmgyEuUZNuDYqEiOAI0q/+2XLSrxrppUD7ZWOFjoGi2LzyI7d7jshXzCrWp9
93lb39UTMXbQBv76u8LR/uUlagVfAQ4EavgybtTXmJy6HNLlV1I+guo9NsVTkh0B
6zB8hZbAEZ6pmuyDnlKkkI3/isWr5o6U3eGIaImCqC8Xk+tRUSoU5H/GTfkCTyv9
WbzRvijFvnpFLaaCshHkeKOLgbh5JfH22e+CjKUMUKi+4xMR2LE=
-----END CERTIFICATE-----