Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a386334303a3a2f34382d3438203d3e20323034303130.roa
File:                     326130613a363034343a386334303a3a2f34382d3438203d3e20323034303130.roa (raw, json)
Hash identifier:          SeJp7GdKonJMpt/YM+ZpyyHnztnQH2oFBYckCb4C4FU=
Subject key identifier:   61:90:6D:1F:21:C3:95:9A:E6:B1:F2:70:86:72:0F:7A:82:4F:53:D9
Certificate issuer:       /CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09
Certificate serial:       64A34B6FFCE06EB31B102161456BE6765D02B920
Authority key identifier: B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a386334303a3a2f34382d3438203d3e20323034303130.roa
Signing time:             Fri 22 Mar 2024 20:19:59 +0000
ROA not before:           Fri 22 Mar 2024 20:14:59 +0000
ROA not after:            Fri 21 Mar 2025 20:19:59 +0000
asID:                     204010
IP address blocks:        2a0a:6044:8c40::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a3:4b:6f:fc:e0:6e:b3:1b:10:21:61:45:6b:e6:76:5d:02:b9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09
        Validity
            Not Before: Mar 22 20:14:59 2024 GMT
            Not After : Mar 21 20:19:59 2025 GMT
        Subject: CN=61906D1F21C3959AE6B1F27086720F7A824F53D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:39:f2:55:da:a5:71:1a:fb:7a:51:b2:e3:cc:
                    ed:ad:62:2e:7e:e9:40:fc:47:04:9b:b8:48:cf:b2:
                    d9:c5:dd:d6:9f:68:5b:03:20:24:32:09:cb:36:5e:
                    5d:50:a7:ab:3d:8d:2b:61:26:14:31:2e:16:97:86:
                    9c:cd:2a:27:a2:9b:c0:1a:db:b3:38:9f:9c:3a:53:
                    83:d7:b4:cf:39:30:84:ea:38:0e:c0:76:19:8b:9b:
                    4e:df:e5:7c:8b:34:23:34:fe:df:bd:78:32:d9:fe:
                    c3:09:3c:29:87:f3:43:75:51:c6:aa:c6:b2:a9:4d:
                    86:e9:e1:6a:7b:03:55:aa:0a:8c:23:8b:d5:fc:82:
                    42:fb:1b:28:5c:35:ff:1d:55:dc:57:a6:e2:69:ae:
                    68:c2:cd:25:8f:9e:15:ea:5b:c5:06:15:b9:36:ed:
                    b8:b9:a0:21:ca:e1:9c:8a:96:37:5a:f5:79:45:3d:
                    3a:16:9f:bf:ac:ae:e8:fd:a1:19:44:20:88:0e:83:
                    ee:dc:a7:01:ca:2e:27:9d:be:ff:64:24:8d:72:a2:
                    06:c8:48:64:1c:92:8e:83:d5:54:c2:54:23:9e:b6:
                    d0:bf:86:6c:11:43:c6:ef:24:c2:aa:c1:28:bf:5b:
                    5b:2d:ab:82:44:87:d5:07:3c:1e:ac:67:8a:2f:a9:
                    a3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:90:6D:1F:21:C3:95:9A:E6:B1:F2:70:86:72:0F:7A:82:4F:53:D9
            X509v3 Authority Key Identifier:
                keyid:B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a386334303a3a2f34382d3438203d3e20323034303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:8c40::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:1d:23:63:70:82:17:b9:22:e6:e6:0c:35:47:a2:e6:3f:01:
         f1:00:bc:7a:94:2d:39:fb:ee:cb:ee:29:65:58:e6:ca:29:df:
         94:a1:b1:7a:44:5e:4f:65:b1:a6:46:10:f9:ac:50:60:22:b3:
         d8:d3:19:7d:10:e1:4d:82:7f:ee:75:f2:60:ba:85:a8:c7:57:
         7c:13:47:c9:f9:93:fb:73:37:f9:4b:b7:b4:f6:91:d2:dd:bf:
         a9:5c:bb:08:c1:a9:cb:4b:7d:52:b5:ba:8b:df:c4:15:fa:be:
         d4:e4:33:34:e5:6a:e3:a5:7e:f9:12:60:48:17:77:73:33:cf:
         98:00:cf:5a:13:c8:cc:21:63:93:21:59:a5:18:9e:e8:65:7d:
         1d:b4:e6:e4:2a:4c:f5:4b:fe:7e:f6:27:b8:58:ab:a5:b1:a8:
         d5:7e:0a:86:db:cf:b7:26:41:09:e0:a0:6f:98:52:44:6c:35:
         2e:a5:04:f7:60:23:97:b8:70:16:0e:ac:65:08:40:b4:9c:c9:
         0c:d1:78:80:19:6f:fc:6b:7d:32:04:3c:4b:69:be:84:7c:09:
         82:88:98:99:18:e2:5d:7f:41:78:66:b6:72:21:6a:ca:38:2c:
         8c:ba:59:d8:03:29:1e:0a:78:b0:02:4b:ef:5e:c7:fa:7b:89:
         ac:72:75:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----