Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393030313a3a2f34382d3438203d3e203437323732.roa
File:                     326131313a323963303a393030313a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          IVsEW+Wfs8JCwHG4XVvhIFJuGVKvdk9nHgFWgh/G4HU=
Subject key identifier:   C4:06:DF:2F:CE:69:38:D1:1E:F4:01:1D:CD:06:5B:61:B9:A0:0C:C8
Certificate issuer:       /CN=CDC014669D381152AFB94B76936268BFF73E7D50
Certificate serial:       7FB6484A17F3281EDE96621BADF5E1F15F00DBBB
Authority key identifier: CD:C0:14:66:9D:38:11:52:AF:B9:4B:76:93:62:68:BF:F7:3E:7D:50
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393030313a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 26 Nov 2023 11:08:45 +0000
ROA not before:           Sun 26 Nov 2023 11:03:45 +0000
ROA not after:            Sun 24 Nov 2024 11:08:45 +0000
asID:                     47272
IP address blocks:        2a11:29c0:9001::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b6:48:4a:17:f3:28:1e:de:96:62:1b:ad:f5:e1:f1:5f:00:db:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC014669D381152AFB94B76936268BFF73E7D50
        Validity
            Not Before: Nov 26 11:03:45 2023 GMT
            Not After : Nov 24 11:08:45 2024 GMT
        Subject: CN=C406DF2FCE6938D11EF4011DCD065B61B9A00CC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4e:54:57:5a:86:fd:e1:21:d3:1f:f9:43:0f:
                    b9:45:b5:48:d0:59:3f:c2:c6:9c:74:07:3e:09:33:
                    26:9a:a7:eb:a7:8c:7c:00:c5:9b:d7:99:52:9c:9a:
                    a1:d1:7a:de:76:e9:48:0e:bb:b3:01:70:dd:1c:ce:
                    2e:b6:42:91:96:c0:3c:48:87:28:3b:46:53:49:dc:
                    be:18:4e:d3:ef:b9:a1:d1:32:e8:75:ee:68:6d:21:
                    3d:1d:8c:12:7e:11:54:54:06:e1:e6:ee:78:cd:01:
                    29:8e:15:e7:b0:3c:88:89:ea:fb:5e:15:8b:86:3d:
                    d6:ab:77:29:8e:7f:e8:ba:37:1d:b7:7e:af:47:00:
                    19:9b:5b:1f:ab:9f:1d:11:2e:cd:2f:ce:96:1e:45:
                    70:3f:7f:da:9b:fb:13:09:b4:5f:96:e8:86:f1:ed:
                    78:e8:94:5e:ef:e5:9e:f0:88:2e:03:a9:ae:78:f2:
                    c7:6e:8e:77:02:1c:76:a7:0b:15:f4:6f:6e:26:62:
                    d5:a1:76:24:b4:a2:e4:91:65:52:5d:d8:96:5f:2c:
                    94:b9:73:0a:a6:8b:2d:59:7b:5a:4a:c3:af:9b:dd:
                    da:21:05:5f:c9:02:8e:5f:7a:d7:fc:f0:02:fe:8f:
                    e0:e7:52:08:1c:be:c8:2f:bc:61:f4:24:70:04:24:
                    f3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:06:DF:2F:CE:69:38:D1:1E:F4:01:1D:CD:06:5B:61:B9:A0:0C:C8
            X509v3 Authority Key Identifier:
                keyid:CD:C0:14:66:9D:38:11:52:AF:B9:4B:76:93:62:68:BF:F7:3E:7D:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/326131313a323963303a393030313a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:9001::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:40:c3:8b:34:a5:b2:e4:47:79:dc:40:83:67:2b:2c:9d:cc:
         5c:88:d4:ff:7c:1f:ac:20:14:8a:1f:d4:ec:ed:2f:b3:80:ef:
         90:95:5c:4b:b5:84:bf:28:f1:6b:d0:71:51:4d:48:96:c0:c7:
         47:0e:74:c1:02:e5:59:06:4b:22:95:d2:7b:a4:1a:82:c8:86:
         65:f3:cc:76:04:34:a9:00:8e:98:21:1a:2e:00:61:bf:0f:2a:
         de:cb:a5:0f:9e:d6:e8:2d:fe:ba:1a:fb:b5:59:55:10:54:44:
         a6:b4:b6:cf:da:2c:87:f6:cd:74:4e:e0:06:f2:23:7d:ec:57:
         62:34:cb:26:b9:6d:0f:1b:17:9e:be:50:08:f5:05:52:74:7f:
         4a:c6:17:55:39:e1:6c:d4:56:ab:9c:21:eb:08:3a:9c:1f:66:
         45:0b:b8:19:59:68:c1:20:38:20:3f:81:69:a4:a3:77:0e:c3:
         37:a5:c7:74:3b:73:96:b3:ee:81:ee:50:5e:f1:62:09:0f:22:
         88:c8:97:64:e7:2d:86:5e:03:9c:db:37:25:59:a1:4d:d3:ec:
         24:07:f1:4f:69:60:24:99:8a:7c:28:44:22:c1:55:a5:76:b4:
         d1:62:03:68:0c:dc:49:1b:08:ee:eb:ff:52:bb:57:ab:11:77:
         ea:a5:5b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----