Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/326130363a396634343a663131303a3a2f34342d3438203d3e20323136333637.roa
File:                     326130363a396634343a663131303a3a2f34342d3438203d3e20323136333637.roa (raw, json)
Hash identifier:          65qnsbZ/PSu/u6744mywa+3nJ5nDW89U54q9iXre4NM=
Subject key identifier:   6F:37:39:1B:78:72:58:EE:98:45:29:46:9A:C6:0A:9E:D8:8B:FE:FF
Certificate issuer:       /CN=B9542CF5B0923A9011033E2F7CA543D6A25A48C1
Certificate serial:       0618E88A6C06CF5FB7AF6DD97AA92CE2663055A8
Authority key identifier: B9:54:2C:F5:B0:92:3A:90:11:03:3E:2F:7C:A5:43:D6:A2:5A:48:C1
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/326130363a396634343a663131303a3a2f34342d3438203d3e20323136333637.roa
Signing time:             Mon 11 Dec 2023 03:08:39 +0000
ROA not before:           Mon 11 Dec 2023 03:03:39 +0000
ROA not after:            Mon 09 Dec 2024 03:08:39 +0000
asID:                     216367
IP address blocks:        2a06:9f44:f110::/44 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:18:e8:8a:6c:06:cf:5f:b7:af:6d:d9:7a:a9:2c:e2:66:30:55:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9542CF5B0923A9011033E2F7CA543D6A25A48C1
        Validity
            Not Before: Dec 11 03:03:39 2023 GMT
            Not After : Dec  9 03:08:39 2024 GMT
        Subject: CN=6F37391B787258EE984529469AC60A9ED88BFEFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:97:58:f0:41:9a:8e:f7:4e:8c:8b:f1:52:5e:
                    01:2e:d1:2a:fa:30:cf:fa:51:67:ea:b6:a4:9c:ba:
                    d2:c5:32:a2:34:7f:50:37:a5:17:ff:f6:63:3d:6f:
                    f1:f7:28:86:67:4d:07:00:11:68:be:c1:02:f5:d1:
                    95:2d:51:7d:3a:84:49:dd:d1:28:11:d1:b0:36:ae:
                    b2:7b:7e:46:7d:4c:87:fa:de:f7:8e:f4:5d:d6:69:
                    73:3d:88:24:d5:e0:27:fd:24:76:56:12:6d:3c:e1:
                    e6:cf:33:ee:8f:6b:f7:fc:42:dd:91:bc:8b:20:fb:
                    16:48:45:d0:63:85:19:9d:19:0c:f7:da:b6:92:7c:
                    41:e0:7a:73:75:18:9e:ba:40:a7:83:66:25:58:73:
                    ce:59:f8:67:2e:99:55:3f:e2:3d:1b:29:21:7b:bf:
                    b3:c9:0c:62:ea:13:bf:d6:d3:52:1c:1d:24:c8:87:
                    9b:15:d5:df:7d:92:f5:07:20:db:99:91:13:d7:da:
                    03:d9:b7:46:4e:1a:a7:66:c6:60:44:2a:dd:7a:1f:
                    45:05:71:de:36:01:3f:48:e2:11:7a:b6:48:48:b3:
                    48:54:b4:29:14:f7:24:39:ce:42:9b:59:9c:ac:7f:
                    72:8e:a5:98:c8:46:16:35:f8:bc:2f:1b:7c:db:d1:
                    eb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:37:39:1B:78:72:58:EE:98:45:29:46:9A:C6:0A:9E:D8:8B:FE:FF
            X509v3 Authority Key Identifier:
                keyid:B9:54:2C:F5:B0:92:3A:90:11:03:3E:2F:7C:A5:43:D6:A2:5A:48:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/326130363a396634343a663131303a3a2f34342d3438203d3e20323136333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f44:f110::/44

    Signature Algorithm: sha256WithRSAEncryption
         0b:e3:40:68:38:68:0a:bf:bf:e8:f5:af:d1:e0:ea:14:9b:18:
         56:80:32:21:63:6c:b8:be:9f:23:bf:08:98:21:53:d6:97:7c:
         61:36:20:af:55:b4:d4:ac:c4:b3:ed:b6:41:8c:3a:8c:62:3c:
         2b:c1:3b:f0:b8:37:1a:e7:4c:0b:6f:79:6d:dc:24:6c:89:19:
         f7:39:15:77:4c:e4:80:48:b4:e0:31:e2:04:75:67:be:32:a7:
         f9:83:20:fb:62:c9:18:7a:9e:ac:9c:b1:61:b6:46:98:fc:ea:
         d8:bd:01:10:47:5c:be:22:9f:da:6a:fc:cf:aa:09:75:6e:b2:
         93:ab:07:d1:45:83:e5:b3:e7:32:34:78:18:e5:5f:4c:15:79:
         b2:45:b2:c3:7b:b3:e2:54:83:8b:f5:2d:3b:dc:28:96:3c:31:
         49:ae:c2:32:4f:42:82:a5:ec:05:ca:47:4f:40:26:5b:8d:1b:
         09:42:f6:03:a9:48:6e:fd:97:f6:5b:70:b2:c4:6e:eb:c8:b8:
         90:dd:1a:59:bf:d3:e4:48:96:43:e0:0e:70:95:0e:d8:55:35:
         b2:1d:87:fc:71:97:3e:eb:b7:fe:b1:eb:6c:24:c8:e6:2b:f7:
         b4:78:16:69:4c:de:66:75:e2:bb:4a:c8:c2:b6:ef:78:37:d9:
         87:35:d8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----