Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313330303a3a2f34302d3438203d3e20323033363335.roa
File:                     326130373a353463353a313330303a3a2f34302d3438203d3e20323033363335.roa (raw, json)
Hash identifier:          r/3Qz7zV8/BD8otqkrg3Gsw8N20PZXVp8JjpEl+zgRw=
Subject key identifier:   84:B1:39:2C:C1:D5:05:49:01:AA:96:11:4C:8D:FA:0D:7E:87:E0:D5
Certificate issuer:       /CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
Certificate serial:       445A30DE7E80016E861116EA539361215E37944E
Authority key identifier: B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313330303a3a2f34302d3438203d3e20323033363335.roa
Signing time:             Wed 19 Apr 2023 00:19:30 +0000
ROA not before:           Wed 19 Apr 2023 00:14:30 +0000
ROA not after:            Wed 17 Apr 2024 00:19:30 +0000
asID:                     203635
IP address blocks:        2a07:54c5:1300::/40 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:5a:30:de:7e:80:01:6e:86:11:16:ea:53:93:61:21:5e:37:94:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
        Validity
            Not Before: Apr 19 00:14:30 2023 GMT
            Not After : Apr 17 00:19:30 2024 GMT
        Subject: CN=84B1392CC1D5054901AA96114C8DFA0D7E87E0D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d8:fe:27:64:62:d2:79:0c:8b:84:13:eb:5e:
                    10:d2:c8:78:35:d7:12:7e:1e:13:45:a4:b2:10:51:
                    e5:1d:f8:5d:e2:2c:3d:92:c1:f6:67:4a:89:fc:9a:
                    21:02:90:44:4a:09:51:4c:fd:3f:f8:c0:7a:3a:a1:
                    d6:86:44:23:de:24:02:ec:05:15:84:af:df:4d:2f:
                    e8:57:b2:99:a3:ec:22:eb:2c:62:ce:20:18:30:60:
                    7c:de:97:04:ad:8e:f7:80:84:b9:ed:2b:6b:44:75:
                    74:b6:a2:79:3f:96:1e:7e:db:8e:64:6c:f4:86:43:
                    12:b0:d1:7f:90:38:79:99:f6:8d:50:7f:b9:07:73:
                    f7:75:9a:60:6e:c2:0c:3a:21:d7:59:96:38:6c:9c:
                    7e:49:1d:7a:cc:6b:59:3f:14:d3:47:2f:d8:5b:6f:
                    d0:fd:b0:5f:f8:46:dd:83:87:d9:e8:96:d9:bc:e3:
                    09:63:84:5c:70:99:10:94:8f:4c:03:e7:af:0a:fe:
                    00:d9:e7:75:3c:5a:c4:7b:84:b1:a1:ad:23:cf:86:
                    44:04:bb:92:10:2a:a2:4a:40:5b:3d:73:ce:b6:18:
                    f0:fa:ac:54:5a:fb:59:fa:6c:49:01:ee:9a:03:37:
                    81:0e:78:c9:6b:25:43:40:0b:66:71:8f:9f:e9:6f:
                    59:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B1:39:2C:C1:D5:05:49:01:AA:96:11:4C:8D:FA:0D:7E:87:E0:D5
            X509v3 Authority Key Identifier:
                keyid:B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313330303a3a2f34302d3438203d3e20323033363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c5:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         58:d2:a5:d1:8d:5e:16:c0:5a:53:f3:7f:f6:3e:3d:b2:d2:b5:
         cb:8b:f4:20:93:55:85:de:3a:5e:85:60:5b:5d:b0:38:59:67:
         e2:0e:ec:f0:4a:74:70:de:e1:fc:52:3d:fa:aa:5b:8b:e6:20:
         45:95:32:71:e0:31:fc:5a:8f:fd:df:e3:d4:7e:65:db:8b:d8:
         32:fd:18:c3:27:4a:c1:44:c8:bc:04:3a:43:19:a3:ae:06:fb:
         1c:2f:a8:ad:5d:86:ad:97:0f:bd:62:30:5f:0f:ab:71:83:72:
         b7:db:e7:1b:58:bc:ae:64:c5:1f:c9:22:90:62:1c:33:d0:b3:
         71:42:c5:bc:91:92:72:94:a8:39:fa:35:e4:aa:43:b3:7d:6a:
         02:66:a5:b2:d7:f6:5f:0c:f8:e9:57:5f:cc:d2:86:ff:56:03:
         76:b9:7a:1b:e2:61:b4:62:fd:34:1b:e6:d5:51:2d:40:33:01:
         b4:76:19:99:e1:4e:06:02:04:ab:c3:3b:8b:f7:68:09:b2:af:
         da:6c:e7:8b:73:ae:b4:06:a7:9f:b5:f6:5c:3d:41:bb:97:b8:
         1a:82:71:66:0c:6c:c9:21:35:0c:6f:d7:7f:50:29:e0:5f:18:
         f3:80:dc:55:66:71:80:2c:fd:80:d4:3a:ee:76:ce:13:fa:10:
         9f:a3:4d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----