Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/2/326130353a646663313a316665303a3a2f34342d3434203d3e20323132363138.roa
File:                     326130353a646663313a316665303a3a2f34342d3434203d3e20323132363138.roa (raw, json)
Hash identifier:          MrJ6OqejbhiP6D3yHIMEWhUwVGHrwij9lFFx+nqjrbM=
Subject key identifier:   2D:9F:A6:02:3E:DB:ED:D7:8B:10:D0:9D:89:F2:06:19:2F:08:56:2A
Certificate issuer:       /CN=A5B9564158D3F545D38A5134082DABBC4CE4BBC0
Certificate serial:       698780EEBED8F74628C018ED5D2FB6349D527182
Authority key identifier: A5:B9:56:41:58:D3:F5:45:D3:8A:51:34:08:2D:AB:BC:4C:E4:BB:C0
Authority info access:    rsync://rpki.cc/repo/MythicalKitten/1/A5B9564158D3F545D38A5134082DABBC4CE4BBC0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/2/326130353a646663313a316665303a3a2f34342d3434203d3e20323132363138.roa
Signing time:             Fri 07 Jul 2023 15:18:34 +0000
ROA not before:           Fri 07 Jul 2023 15:13:34 +0000
ROA not after:            Fri 05 Jul 2024 15:18:34 +0000
asID:                     212618
IP address blocks:        2a05:dfc1:1fe0::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:87:80:ee:be:d8:f7:46:28:c0:18:ed:5d:2f:b6:34:9d:52:71:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B9564158D3F545D38A5134082DABBC4CE4BBC0
        Validity
            Not Before: Jul  7 15:13:34 2023 GMT
            Not After : Jul  5 15:18:34 2024 GMT
        Subject: CN=2D9FA6023EDBEDD78B10D09D89F206192F08562A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:be:cd:06:26:ac:8c:10:2a:5e:e7:c1:8f:68:
                    5c:42:36:69:9f:93:17:26:df:4a:8c:8a:6e:c6:32:
                    ca:cc:68:1d:3f:8e:96:91:cf:72:d4:87:dc:fa:64:
                    4e:c0:d8:97:5a:10:a6:00:41:3e:4e:3a:57:a4:d0:
                    1b:a4:36:e8:9e:d4:1e:8a:2e:b0:9c:69:86:23:6c:
                    4f:a7:04:e5:ad:db:0d:ce:dd:6a:53:52:7e:58:f4:
                    0e:21:d4:8e:ad:7b:ec:c6:b7:c5:c4:34:1e:e7:5d:
                    d0:80:75:79:0b:f8:46:c7:87:30:5d:0f:2a:06:2b:
                    ba:29:ca:7e:8b:19:62:57:b2:bc:9a:a9:35:48:96:
                    b6:0a:94:d8:53:6c:f4:31:79:62:1e:5f:5c:35:8b:
                    b5:72:51:dd:df:b9:b7:b4:a1:bb:7f:bf:45:b8:64:
                    77:bb:2c:84:dd:8d:1f:10:d9:dd:dc:7b:00:ce:59:
                    c6:c8:81:82:45:e5:fd:d0:82:43:29:24:8e:96:92:
                    c3:b1:9e:8b:5a:e9:84:9a:5f:7e:e2:17:5e:f9:13:
                    50:4b:74:ea:38:85:19:2c:89:e8:e1:7c:0c:d0:21:
                    73:a2:d2:85:49:59:48:3e:6c:d2:bc:af:f5:9d:a9:
                    fa:32:70:a7:24:af:02:ae:12:d3:9d:92:fa:a9:ac:
                    48:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9F:A6:02:3E:DB:ED:D7:8B:10:D0:9D:89:F2:06:19:2F:08:56:2A
            X509v3 Authority Key Identifier:
                keyid:A5:B9:56:41:58:D3:F5:45:D3:8A:51:34:08:2D:AB:BC:4C:E4:BB:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/2/A5B9564158D3F545D38A5134082DABBC4CE4BBC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cc/repo/MythicalKitten/1/A5B9564158D3F545D38A5134082DABBC4CE4BBC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/2/326130353a646663313a316665303a3a2f34342d3434203d3e20323132363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1fe0::/44

    Signature Algorithm: sha256WithRSAEncryption
         4a:a6:c9:fd:0c:aa:c8:cd:81:7e:e2:5c:d6:d7:fa:72:b7:96:
         61:61:1a:35:3b:82:39:f2:db:32:b1:2d:e9:46:2f:f1:52:55:
         d1:e3:5a:4b:25:96:cf:db:c5:42:2f:48:20:ab:bc:fd:ce:05:
         e7:12:25:27:0f:14:77:d5:bd:cc:ca:e5:fd:2e:06:82:de:8c:
         67:c2:a7:43:94:7a:a2:44:85:16:bc:e3:1a:16:f3:5e:39:57:
         52:32:66:01:05:c4:2a:03:fc:6a:5f:f9:1a:87:c7:eb:de:c1:
         6f:09:75:31:3f:94:39:d2:1d:95:45:31:7a:96:f6:08:87:63:
         09:db:5e:1c:0e:1d:dc:45:36:10:4c:e4:70:24:63:a5:02:84:
         65:ac:1d:56:bb:68:3b:74:eb:7a:d3:c3:00:30:8f:e8:85:f4:
         33:8d:3c:ce:5c:2c:d4:2a:91:15:9f:c9:c5:3d:8c:cd:cb:6a:
         8e:5f:13:79:c3:b0:86:2a:15:e9:86:da:e6:bc:8e:aa:02:e5:
         28:63:13:39:bd:a8:76:d3:01:9b:46:5b:2a:00:53:8d:0e:13:
         00:89:93:b6:48:ec:f3:ba:af:df:c9:0f:20:bb:0b:f4:99:6b:
         c6:ee:85:04:b4:d6:29:9f:2e:8a:8a:fa:66:d4:20:6b:db:5a:
         5c:42:6c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:06 2024 by rpki-client on console-ams.rpki-client.org