Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a376362303a3a2f34342d3434203d3e20323135363035.roa
File:                     326130613a363034343a376362303a3a2f34342d3434203d3e20323135363035.roa (raw, json)
Hash identifier:          0TGemcIft5iD3vjE6VLIqIhUsL2umTrPGftGuDYcfAA=
Subject key identifier:   72:1D:D9:EB:DB:F1:24:57:9D:51:2C:22:CF:EA:71:46:08:2B:ED:BA
Certificate issuer:       /CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09
Certificate serial:       386B07B143F51D4E767F15E0C4EC9104ED75FC94
Authority key identifier: B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a376362303a3a2f34342d3434203d3e20323135363035.roa
Signing time:             Fri 22 Mar 2024 20:19:59 +0000
ROA not before:           Fri 22 Mar 2024 20:14:59 +0000
ROA not after:            Fri 21 Mar 2025 20:19:59 +0000
asID:                     215605
IP address blocks:        2a0a:6044:7cb0::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:6b:07:b1:43:f5:1d:4e:76:7f:15:e0:c4:ec:91:04:ed:75:fc:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09
        Validity
            Not Before: Mar 22 20:14:59 2024 GMT
            Not After : Mar 21 20:19:59 2025 GMT
        Subject: CN=721DD9EBDBF124579D512C22CFEA7146082BEDBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:59:e0:ed:a6:61:85:38:cd:0d:f2:ae:34:c7:
                    60:9c:5d:7e:54:42:83:67:79:1f:a4:91:ee:11:f8:
                    ef:03:4e:2e:f8:2f:55:0d:b6:f0:e3:e6:ef:dd:22:
                    c8:f1:b3:e0:31:04:31:e3:f2:b3:37:56:45:28:d4:
                    fd:90:fa:7d:d1:e1:27:53:ca:b8:48:ee:ba:27:f5:
                    4d:d7:6b:60:34:28:90:5d:86:a6:43:ff:0a:92:c6:
                    b6:6b:05:71:98:23:17:94:f5:f5:f4:86:1c:da:55:
                    28:71:7f:fa:45:5c:e9:3b:b4:af:bc:3d:bb:41:fd:
                    89:fd:72:df:6f:19:65:ce:3f:36:8f:d6:6c:fc:8d:
                    cc:39:d5:f3:81:2c:f7:61:b2:93:81:de:e7:07:d3:
                    1e:f0:6a:18:f8:f4:1b:e0:0e:6f:d5:ab:47:16:e9:
                    a9:33:3c:80:c3:d6:7b:32:a5:f6:81:23:5a:4d:14:
                    d4:91:15:94:e5:51:f8:a5:f0:9c:46:35:ed:f8:37:
                    cf:a9:ed:d7:ff:21:2e:43:6e:1a:6c:13:48:d9:ee:
                    65:a1:3e:9c:2c:29:fa:4f:bd:65:cc:ca:89:f9:7e:
                    c2:75:72:42:6e:71:32:08:dc:6a:72:89:27:01:f2:
                    02:3a:74:d7:8e:c6:f2:a7:f5:c5:55:8f:09:46:2d:
                    1e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:1D:D9:EB:DB:F1:24:57:9D:51:2C:22:CF:EA:71:46:08:2B:ED:BA
            X509v3 Authority Key Identifier:
                keyid:B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a376362303a3a2f34342d3434203d3e20323135363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7cb0::/44

    Signature Algorithm: sha256WithRSAEncryption
         03:82:80:26:ae:59:1b:bd:80:67:7d:a6:07:47:68:c5:ee:13:
         f1:b6:82:da:d8:ba:fb:5a:95:82:de:64:d5:23:1a:35:ba:e0:
         dc:07:2c:a7:91:b5:48:71:52:39:26:c8:7e:ba:39:09:a8:a9:
         43:fb:b5:75:fd:c2:8d:45:de:9f:96:db:e7:0f:ad:8f:ea:5c:
         5a:e3:b7:86:b0:be:ad:e5:ee:6b:51:0f:e7:a4:1f:f5:30:e9:
         53:80:7d:d6:56:f5:1f:12:32:72:17:f6:e9:d1:0c:96:fa:f6:
         47:6e:b5:05:12:aa:78:84:bc:55:67:14:b3:c5:6a:62:4c:d7:
         e1:d0:86:0f:5f:08:e6:b8:f7:f8:47:8c:aa:07:6b:cf:6c:a8:
         55:4a:51:03:0b:bd:b5:7d:f1:ac:bf:6e:9a:51:a0:a6:e7:4f:
         66:44:04:72:a1:ab:bb:07:df:25:7e:2a:7f:4d:6e:90:9d:09:
         9d:2d:45:6a:c9:03:75:cf:f8:ba:bf:cb:43:cc:64:be:10:9c:
         8c:94:12:34:7e:ff:25:e2:a6:7f:4f:54:d6:36:51:b7:12:d2:
         0c:1f:97:b4:68:54:c1:36:23:25:7f:9c:35:b8:f8:91:77:28:
         cd:f7:43:a2:fd:58:a8:af:74:5c:82:0f:ab:bd:04:0c:6a:fa:
         85:0e:20:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----