Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6330313a3a2f34382d3438203d3e20323136313037.roa
File:                     326130353a646663313a6330313a3a2f34382d3438203d3e20323136313037.roa (raw, json)
Hash identifier:          MgAF2AbitaR9xVxpKKLj6xIyewDxVvKddJ6CmRHkyqY=
Subject key identifier:   E9:E2:43:7B:29:82:5A:CC:11:2B:D0:1E:10:53:01:74:AB:C3:8B:F8
Certificate issuer:       /CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
Certificate serial:       3076A44777BD8D31CC3632137C0376D824625916
Authority key identifier: A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6330313a3a2f34382d3438203d3e20323136313037.roa
Signing time:             Fri 19 Jan 2024 19:25:45 +0000
ROA not before:           Fri 19 Jan 2024 19:20:45 +0000
ROA not after:            Fri 17 Jan 2025 19:25:45 +0000
asID:                     216107
IP address blocks:        2a05:dfc1:c01::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:76:a4:47:77:bd:8d:31:cc:36:32:13:7c:03:76:d8:24:62:59:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
        Validity
            Not Before: Jan 19 19:20:45 2024 GMT
            Not After : Jan 17 19:25:45 2025 GMT
        Subject: CN=E9E2437B29825ACC112BD01E10530174ABC38BF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5b:83:26:cb:51:ff:92:89:5b:d9:d2:87:b8:
                    d9:57:5c:27:3f:c5:b9:68:79:c5:3e:c1:35:68:6c:
                    a6:ea:6d:8d:c0:0f:16:42:b2:f5:ee:02:f7:2a:4e:
                    fd:bf:bf:d3:2f:8a:21:71:24:ce:ba:17:30:e9:c1:
                    16:81:3d:c7:7a:1e:ee:69:6d:3e:e0:6f:4e:dd:ec:
                    ea:52:00:ae:10:9c:51:d4:ae:27:df:90:a5:0a:b5:
                    3c:a6:59:c5:7c:21:2a:95:4d:7e:02:89:d5:04:cc:
                    36:cb:93:1b:a0:b0:f1:20:e8:3a:f8:03:f1:26:3e:
                    8b:8a:bd:5f:b3:fa:65:d4:17:3e:49:15:c9:d5:f0:
                    e4:d7:b1:df:9c:72:11:45:93:47:c5:bd:a2:00:2e:
                    74:65:e3:b5:a0:e7:00:9f:cb:8f:60:fc:78:de:33:
                    83:c6:62:0d:30:53:69:1f:83:b5:72:28:19:0c:88:
                    b1:54:bc:76:8d:42:a8:c1:22:ef:7f:0a:dd:c2:94:
                    aa:d6:37:83:b4:aa:ca:81:a0:63:38:4a:25:bd:59:
                    ca:43:59:d9:20:43:b0:51:33:b9:cd:22:a6:a9:66:
                    31:7f:d7:17:55:56:c8:12:57:8b:77:96:bf:99:b4:
                    40:8f:bb:47:1b:02:75:8b:47:1c:e5:26:f7:12:5a:
                    1c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E2:43:7B:29:82:5A:CC:11:2B:D0:1E:10:53:01:74:AB:C3:8B:F8
            X509v3 Authority Key Identifier:
                keyid:A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6330313a3a2f34382d3438203d3e20323136313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:c01::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:17:c4:cd:22:21:f4:7c:20:f2:b0:61:13:68:b1:71:65:ca:
         97:2d:f5:f6:de:01:af:79:fc:35:dd:a8:14:8d:5f:5f:af:89:
         fe:16:69:4e:45:64:09:b7:e5:f9:f4:ce:c0:57:83:7b:27:48:
         00:96:02:6d:57:01:33:15:f2:29:d8:a9:af:32:7f:80:6f:40:
         59:5b:b7:43:b5:2f:d5:99:e8:ec:4d:49:19:98:f8:4c:17:35:
         74:b7:d9:26:d3:a9:b7:8e:d5:69:4b:0a:da:00:9a:ab:43:91:
         bc:29:38:02:3b:b7:2e:c6:fc:74:31:52:5f:81:df:2c:7a:fd:
         40:a7:e7:d9:e6:1e:08:a2:01:c7:70:e2:72:0a:a6:66:06:f0:
         69:98:86:61:f4:d5:59:42:58:0f:db:3e:da:8f:81:fc:6d:be:
         4f:ac:cc:dc:61:88:01:9b:c7:f4:8c:b8:78:48:a0:7b:c5:45:
         43:d1:a7:3e:2f:ef:23:d5:ee:13:70:67:e8:64:1d:0d:a4:df:
         59:03:f0:56:f0:75:09:bd:60:4a:93:7b:e8:f2:0f:d6:53:21:
         74:c3:bc:25:ab:4a:0e:44:03:da:6b:e4:40:2a:15:dd:81:54:
         40:3a:70:b6:e7:2d:bf:8d:ce:d9:c4:a6:de:40:67:6e:db:ef:
         d4:58:81:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----