Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/1/326130353a646663353a3a2f34372d3437203d3e20323033303639.roa
File:                     326130353a646663353a3a2f34372d3437203d3e20323033303639.roa (raw, json)
Hash identifier:          ks9PAyAkU0g+iVOrfNwpF6jLe/OqvCyGeO4dUDQ7PgI=
Subject key identifier:   92:54:8C:AF:FF:2F:AE:61:B4:B3:68:F5:BB:53:E3:FB:B1:47:2A:05
Certificate issuer:       /CN=BE8A7AC02556C14368364036D5427F53187B6D9D
Certificate serial:       27200505815F4D83D742E1D94735AA68E955C8BD
Authority key identifier: BE:8A:7A:C0:25:56:C1:43:68:36:40:36:D5:42:7F:53:18:7B:6D:9D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/BE8A7AC02556C14368364036D5427F53187B6D9D.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/1/326130353a646663353a3a2f34372d3437203d3e20323033303639.roa
Signing time:             Sat 22 Jun 2024 17:15:59 +0000
ROA not before:           Sat 22 Jun 2024 17:10:59 +0000
ROA not after:            Sat 21 Jun 2025 17:15:59 +0000
asID:                     203069
IP address blocks:        2a05:dfc5::/47 maxlen: 47

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:20:05:05:81:5f:4d:83:d7:42:e1:d9:47:35:aa:68:e9:55:c8:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE8A7AC02556C14368364036D5427F53187B6D9D
        Validity
            Not Before: Jun 22 17:10:59 2024 GMT
            Not After : Jun 21 17:15:59 2025 GMT
        Subject: CN=92548CAFFF2FAE61B4B368F5BB53E3FBB1472A05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ec:bc:0d:07:b8:7b:aa:4b:e5:0c:7b:6f:69:
                    a9:2a:9c:e9:4b:47:2a:70:5f:48:45:38:d1:56:8e:
                    12:3d:35:d1:7f:a7:39:ef:29:10:1c:d0:1b:58:d2:
                    03:c0:7a:08:1a:83:61:36:5e:0f:67:22:46:26:8f:
                    83:6a:c0:dc:11:88:dd:37:4f:75:e2:7f:5f:4f:bd:
                    50:fb:98:e6:a4:9a:1d:01:52:1c:bd:db:19:92:62:
                    90:98:7b:f7:99:ae:4c:24:40:7b:81:36:5a:6b:b8:
                    95:10:7c:e3:65:bb:b2:e4:43:2f:3f:a6:26:eb:16:
                    ee:60:a1:33:f6:74:5c:00:d6:0f:36:5e:27:38:8b:
                    2e:c8:a5:e4:a2:6e:5e:75:66:52:11:c9:68:27:74:
                    cb:a2:79:b5:66:fc:82:18:9c:f1:9a:b6:99:bd:a4:
                    7e:35:97:0f:15:89:59:60:17:c5:f2:af:84:58:5c:
                    bb:09:fd:e2:27:46:bb:a7:ec:00:45:89:38:64:00:
                    37:44:32:15:4c:b1:06:d9:2e:b8:9e:32:34:6d:cd:
                    19:96:a7:f8:99:6c:1a:ea:7a:cb:8f:6e:63:0e:70:
                    fb:c3:e5:76:7b:0c:ab:37:44:15:28:4f:2a:ee:74:
                    e6:80:1e:57:d0:9e:30:4b:99:0d:68:b4:4b:be:4d:
                    d0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:54:8C:AF:FF:2F:AE:61:B4:B3:68:F5:BB:53:E3:FB:B1:47:2A:05
            X509v3 Authority Key Identifier:
                keyid:BE:8A:7A:C0:25:56:C1:43:68:36:40:36:D5:42:7F:53:18:7B:6D:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/1/BE8A7AC02556C14368364036D5427F53187B6D9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/BE8A7AC02556C14368364036D5427F53187B6D9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/1/326130353a646663353a3a2f34372d3437203d3e20323033303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc5::/47

    Signature Algorithm: sha256WithRSAEncryption
         22:4a:cb:89:65:35:30:29:9f:03:4e:81:17:93:fd:27:e0:f7:
         ee:fa:28:59:84:4d:3f:d2:90:d8:87:06:6d:88:23:49:f8:b5:
         f5:80:07:81:45:90:87:79:95:46:dd:ca:67:c5:d1:e5:8a:fd:
         4d:ce:fb:d0:09:f6:da:f0:e5:6f:4c:e5:d9:54:89:39:9e:7e:
         93:8a:38:86:0f:5e:8b:7c:a4:13:05:e9:e3:5f:da:5c:69:68:
         df:28:f2:9a:4e:6d:0e:d7:0d:8a:95:12:e8:68:d0:65:47:0a:
         d8:0e:7d:c4:29:9d:69:e5:c4:e7:91:26:09:f3:89:96:46:36:
         6f:f2:ba:eb:19:e7:31:80:c6:8a:c9:93:d8:55:ea:4a:74:3e:
         13:32:44:72:6d:20:5a:68:f5:75:e8:08:b0:d0:21:ef:37:68:
         46:86:77:62:87:91:9a:91:ba:20:38:c6:b6:c2:d3:46:0e:ff:
         44:ef:87:55:5e:4b:c1:f8:40:62:f1:22:43:07:2e:12:ee:ae:
         d1:39:fc:8a:1a:b3:5e:33:15:61:99:ee:5f:18:ad:a7:c1:1b:
         18:54:dd:e3:dd:70:b4:0a:d9:4f:e6:79:e3:1e:09:33:d1:b2:
         dc:77:b7:d6:5f:cb:31:a6:81:7e:3a:3f:22:49:da:80:de:e4:
         93:02:b6:62
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgIUJyAFBYFfTYPXQuHZRzWqaOlVyL0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU4QTdBQzAyNTU2QzE0MzY4MzY0MDM2RDU0MjdGNTMx
ODdCNkQ5RDAeFw0yNDA2MjIxNzEwNTlaFw0yNTA2MjExNzE1NTlaMDMxMTAvBgNV
BAMTKDkyNTQ4Q0FGRkYyRkFFNjFCNEIzNjhGNUJCNTNFM0ZCQjE0NzJBMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC97LwNB7h7qkvlDHtvaakqnOlL
RypwX0hFONFWjhI9NdF/pznvKRAc0BtY0gPAeggag2E2Xg9nIkYmj4NqwNwRiN03
T3Xif19PvVD7mOakmh0BUhy92xmSYpCYe/eZrkwkQHuBNlpruJUQfONlu7LkQy8/
pibrFu5goTP2dFwA1g82Xic4iy7IpeSibl51ZlIRyWgndMuiebVm/IIYnPGatpm9
pH41lw8ViVlgF8Xyr4RYXLsJ/eInRrun7ABFiThkADdEMhVMsQbZLrieMjRtzRmW
p/iZbBrqesuPbmMOcPvD5XZ7DKs3RBUoTyrudOaAHlfQnjBLmQ1otEu+TdBvAgMB
AAGjggJ7MIICdzAdBgNVHQ4EFgQUklSMr/8vrmG0s2j1u1Pj+7FHKgUwHwYDVR0j
BBgwFoAUvop6wCVWwUNoNkA21UJ/Uxh7bZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjBiZThmN2ItZDQ0Yy00Y2EyLWJlYjMtMmRkNDFiYWVl
ODM3LzEvQkU4QTdBQzAyNTU2QzE0MzY4MzY0MDM2RDU0MjdGNTMxODdCNkQ5RC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03Mjc4LTQ2
Y2YtYWJkMS05OWNkMWZkMmJlNGUvNC9CRThBN0FDMDI1NTZDMTQzNjgzNjQwMzZE
NTQyN0Y1MzE4N0I2RDlELmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUF
BzALhoGNcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS82MGJlOGY3Yi1kNDRjLTRjYTItYmViMy0yZGQ0MWJhZWU4MzcvMS8zMjYxMzAz
NTNhNjQ2NjYzMzUzYTNhMmYzNDM3MmQzNDM3MjAzZDNlMjAzMjMwMzMzMDM2Mzku
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwEqBd/FAAAwDQYJKoZIhvcNAQELBQADggEBACJKy4llNTApnwNO
gReT/Sfg9+76KFmETT/SkNiHBm2II0n4tfWAB4FFkId5lUbdymfF0eWK/U3O+9AJ
9trw5W9M5dlUiTmefpOKOIYPXot8pBMF6eNf2lxpaN8o8ppObQ7XDYqVEuho0GVH
CtgOfcQpnWnlxOeRJgnziZZGNm/yuusZ5zGAxorJk9hV6kp0PhMyRHJtIFpo9XXo
CLDQIe83aEaGd2KHkZqRuiA4xrbC00YO/0Tvh1VeS8H4QGLxIkMHLhLurtE5/Ioa
s14zFWGZ7l8YrafBGxhU3ePdcLQK2U/meeMeCTPRstx3t9ZfyzGmgX46PyJJ2oDe
5JMCtmI=
-----END CERTIFICATE-----