Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3ae9d6ba-6910-47c9-9b2b-209548ef531a/1/326130613a363034343a626630303a3a2f34382d3438203d3e20323135343732.roa
File:                     326130613a363034343a626630303a3a2f34382d3438203d3e20323135343732.roa (raw, json)
Hash identifier:          bvxel1hk1aZqtKmi/AXwpJWAUOQjsjqppkoV61zTWfU=
Subject key identifier:   8F:2D:53:FB:25:28:45:08:C4:9A:9F:DC:2A:D9:AF:15:9F:F1:76:08
Certificate issuer:       /CN=362BBACF6433B5D7341F52AE03A397A596DCE5C6
Certificate serial:       554E43D910CE4BC2A326127E539BC22692DBDDDC
Authority key identifier: 36:2B:BA:CF:64:33:B5:D7:34:1F:52:AE:03:A3:97:A5:96:DC:E5:C6
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/362BBACF6433B5D7341F52AE03A397A596DCE5C6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3ae9d6ba-6910-47c9-9b2b-209548ef531a/1/326130613a363034343a626630303a3a2f34382d3438203d3e20323135343732.roa
Signing time:             Mon 29 Jul 2024 08:21:23 +0000
ROA not before:           Mon 29 Jul 2024 08:16:23 +0000
ROA not after:            Mon 28 Jul 2025 08:21:23 +0000
asID:                     215472
IP address blocks:        2a0a:6044:bf00::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:4e:43:d9:10:ce:4b:c2:a3:26:12:7e:53:9b:c2:26:92:db:dd:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=362BBACF6433B5D7341F52AE03A397A596DCE5C6
        Validity
            Not Before: Jul 29 08:16:23 2024 GMT
            Not After : Jul 28 08:21:23 2025 GMT
        Subject: CN=8F2D53FB25284508C49A9FDC2AD9AF159FF17608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:19:be:95:8c:e8:c1:61:0e:12:4d:48:2e:31:
                    ec:d5:e1:e1:ce:1c:5f:2a:9d:89:e3:95:e5:68:fb:
                    2f:cd:38:c0:35:ed:92:5c:da:a9:f5:e3:e4:81:50:
                    53:2a:8c:40:b2:ca:10:27:6d:3a:c7:4b:00:e0:4c:
                    e9:97:97:9f:8e:3b:93:27:f9:04:2e:d6:de:2f:5b:
                    6d:87:49:c8:1a:d8:ae:fd:e5:04:36:a7:3e:7b:51:
                    55:75:30:a7:a5:dc:7b:ee:7c:bd:c9:44:5d:38:f1:
                    e5:4b:46:fe:a4:80:4e:c9:08:ed:f8:a5:2b:d1:ec:
                    08:90:e5:f1:ea:bf:ab:85:52:90:ad:24:a5:c3:e9:
                    32:aa:1b:50:c8:40:23:ff:45:2c:67:b4:bc:4f:bc:
                    9b:b7:f5:85:bc:85:75:16:01:4f:ce:18:b6:07:2f:
                    a5:05:d2:0a:38:64:9f:a4:6c:6c:ad:5f:e2:60:2c:
                    54:f7:3b:df:de:5f:db:bf:62:20:a4:33:6c:78:cd:
                    f5:c9:7c:1c:ed:e8:ff:5e:48:7f:52:8e:eb:bf:91:
                    60:42:20:b2:b9:f3:ba:63:d0:f1:fc:86:1e:96:95:
                    d7:b4:68:ac:85:78:74:bf:58:34:ad:11:16:28:4d:
                    d5:fe:3c:38:6b:55:ac:0c:ad:c0:c8:a5:b6:bf:1a:
                    36:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:2D:53:FB:25:28:45:08:C4:9A:9F:DC:2A:D9:AF:15:9F:F1:76:08
            X509v3 Authority Key Identifier:
                keyid:36:2B:BA:CF:64:33:B5:D7:34:1F:52:AE:03:A3:97:A5:96:DC:E5:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3ae9d6ba-6910-47c9-9b2b-209548ef531a/1/362BBACF6433B5D7341F52AE03A397A596DCE5C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/362BBACF6433B5D7341F52AE03A397A596DCE5C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3ae9d6ba-6910-47c9-9b2b-209548ef531a/1/326130613a363034343a626630303a3a2f34382d3438203d3e20323135343732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:bf00::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:bc:c7:0e:35:2e:5c:39:46:82:47:30:72:f2:eb:6a:ee:55:
         90:34:ab:c3:65:01:9f:65:e7:08:18:8f:1a:9b:48:fa:b1:2b:
         8b:51:7f:0c:ca:6f:37:96:ba:18:df:bb:8d:b6:58:18:1a:32:
         d1:6b:42:f0:ba:8b:07:e1:4e:41:6c:6f:ba:aa:17:f3:33:e7:
         e8:e2:ee:64:9a:f8:83:96:d6:6f:5a:47:69:d4:0a:73:72:54:
         41:42:ee:33:5f:6e:e4:7f:4d:26:a2:d7:a4:26:47:1f:29:9c:
         45:07:5b:03:36:0a:d5:fa:5b:41:27:38:34:c2:87:94:6e:4c:
         be:84:ab:ae:09:6f:6b:4c:4a:eb:31:3b:90:45:b2:73:02:fd:
         c2:1f:19:38:e3:09:ec:a3:f4:e2:e3:f5:df:b3:cd:0f:51:e7:
         92:b9:eb:2d:eb:82:30:63:b4:7b:12:cf:2c:51:a4:a7:41:a7:
         a0:e0:6f:a2:f7:46:2d:d0:85:8a:1c:17:5d:3f:d4:dd:9f:bb:
         66:ef:25:d8:5f:3e:a5:9d:2a:de:e5:94:17:b3:2e:7a:9c:12:
         cd:cf:08:2c:e1:88:fd:ef:8b:a9:16:96:79:60:ec:04:f6:c9:
         f7:8c:43:35:17:3f:cb:a2:94:54:51:a3:27:52:c9:5c:b0:4a:
         cb:c3:8b:10
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUVU5D2RDOS8KjJhJ+U5vCJpLb3dwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzYyQkJBQ0Y2NDMzQjVENzM0MUY1MkFFMDNBMzk3QTU5
NkRDRTVDNjAeFw0yNDA3MjkwODE2MjNaFw0yNTA3MjgwODIxMjNaMDMxMTAvBgNV
BAMTKDhGMkQ1M0ZCMjUyODQ1MDhDNDlBOUZEQzJBRDlBRjE1OUZGMTc2MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWGb6VjOjBYQ4STUguMezV4eHO
HF8qnYnjleVo+y/NOMA17ZJc2qn14+SBUFMqjECyyhAnbTrHSwDgTOmXl5+OO5Mn
+QQu1t4vW22HScga2K795QQ2pz57UVV1MKel3HvufL3JRF048eVLRv6kgE7JCO34
pSvR7AiQ5fHqv6uFUpCtJKXD6TKqG1DIQCP/RSxntLxPvJu39YW8hXUWAU/OGLYH
L6UF0go4ZJ+kbGytX+JgLFT3O9/eX9u/YiCkM2x4zfXJfBzt6P9eSH9Sjuu/kWBC
ILK587pj0PH8hh6Wlde0aKyFeHS/WDStERYoTdX+PDhrVawMrcDIpba/GjZDAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUjy1T+yUoRQjEmp/cKtmvFZ/xdggwHwYDVR0j
BBgwFoAUNiu6z2Qztdc0H1KuA6OXpZbc5cYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvM2FlOWQ2YmEtNjkxMC00N2M5LTliMmItMjA5NTQ4ZWY1
MzFhLzEvMzYyQkJBQ0Y2NDMzQjVENzM0MUY1MkFFMDNBMzk3QTU5NkRDRTVDNi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC8zNjJCQkFDRjY0MzNCNUQ3MzQxRjUyQUUw
M0EzOTdBNTk2RENFNUM2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8zYWU5ZDZiYS02OTEwLTQ3YzktOWIyYi0yMDk1NDhlZjUzMWEvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTYyNjYzMDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM1MzQzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRL8AMA0GCSqGSIb3DQEBCwUAA4IBAQBb
vMcONS5cOUaCRzBy8utq7lWQNKvDZQGfZecIGI8am0j6sSuLUX8Mym83lroY37uN
tlgYGjLRa0LwuosH4U5BbG+6qhfzM+fo4u5kmviDltZvWkdp1ApzclRBQu4zX27k
f00motekJkcfKZxFB1sDNgrV+ltBJzg0woeUbky+hKuuCW9rTErrMTuQRbJzAv3C
Hxk44wnso/Ti4/Xfs80PUeeSuest64IwY7R7Es8sUaSnQaeg4G+i90Yt0IWKHBdd
P9Tdn7tm7yXYXz6lnSre5ZQXsy56nBLNzwgs4Yj974upFpZ5YOwE9sn3jEM1Fz/L
opRUUaMnUslcsErLw4sQ
-----END CERTIFICATE-----