Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6dce58ca-52cf-41ec-b3eb-784a6d66cb05/0/326130613a363034343a633131303a3a2f34342d3434203d3e20323135323431.roa
File:                     326130613a363034343a633131303a3a2f34342d3434203d3e20323135323431.roa (raw, json)
Hash identifier:          9pw5dDiIk9PSY7QYWCMqwsBBRSvEn1H+kBpyFLs7pBg=
Subject key identifier:   03:88:11:2A:36:35:EB:42:28:19:ED:A3:59:41:39:46:FC:1C:C8:E5
Certificate issuer:       /CN=B49B4BDB8E9A70A93999CE2B38ACC7CA29AF5849
Certificate serial:       5D9E5BD28C7B7731FAFB472E0B5AD863B7E5BD13
Authority key identifier: B4:9B:4B:DB:8E:9A:70:A9:39:99:CE:2B:38:AC:C7:CA:29:AF:58:49
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B49B4BDB8E9A70A93999CE2B38ACC7CA29AF5849.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6dce58ca-52cf-41ec-b3eb-784a6d66cb05/0/326130613a363034343a633131303a3a2f34342d3434203d3e20323135323431.roa
Signing time:             Sat 24 Aug 2024 02:51:00 +0000
ROA not before:           Sat 24 Aug 2024 02:46:00 +0000
ROA not after:            Sat 23 Aug 2025 02:51:00 +0000
asID:                     215241
IP address blocks:        2a0a:6044:c110::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:9e:5b:d2:8c:7b:77:31:fa:fb:47:2e:0b:5a:d8:63:b7:e5:bd:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B49B4BDB8E9A70A93999CE2B38ACC7CA29AF5849
        Validity
            Not Before: Aug 24 02:46:00 2024 GMT
            Not After : Aug 23 02:51:00 2025 GMT
        Subject: CN=0388112A3635EB422819EDA359413946FC1CC8E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e1:e5:1d:40:2f:54:9a:38:b9:32:c4:92:51:
                    ca:b7:ed:0e:7f:f7:b1:eb:15:7d:8c:e6:e1:31:bb:
                    48:d6:cf:f0:25:5d:a9:63:06:ee:8d:af:7e:67:77:
                    97:27:5b:92:34:ea:5c:5e:13:57:b2:17:12:80:cc:
                    c9:22:6c:bd:9d:ce:cc:d3:8c:50:03:8c:92:a7:20:
                    a3:f3:4c:9e:1e:df:c8:e2:25:f6:a7:d3:53:33:bc:
                    5c:c6:f5:9d:7f:83:2a:9a:d6:a6:6b:fd:3b:2e:29:
                    db:d9:f5:37:a2:b0:78:3f:6a:37:32:c4:ab:3b:94:
                    a1:4f:e1:02:49:0f:d7:3b:53:d6:3e:2a:9a:a3:11:
                    b7:2b:d2:df:2e:99:c7:54:d8:7d:55:1d:b3:b7:dd:
                    a6:85:6b:0d:25:20:7f:ff:69:81:71:3e:b8:77:4d:
                    38:c9:67:6a:02:71:98:e5:bd:d3:ec:7d:de:50:46:
                    8d:34:33:ec:99:9e:83:92:bd:9b:96:0b:41:51:b7:
                    1c:fa:c2:e8:e1:62:82:01:98:96:9b:01:c6:02:8f:
                    c5:4c:1b:21:56:31:16:fe:d6:8f:9a:cb:04:7a:b4:
                    5a:f9:67:28:69:29:e6:22:2c:eb:d4:10:38:a2:18:
                    be:f2:16:f5:ff:c4:00:7b:25:fa:b2:1c:a4:98:22:
                    49:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:88:11:2A:36:35:EB:42:28:19:ED:A3:59:41:39:46:FC:1C:C8:E5
            X509v3 Authority Key Identifier:
                keyid:B4:9B:4B:DB:8E:9A:70:A9:39:99:CE:2B:38:AC:C7:CA:29:AF:58:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6dce58ca-52cf-41ec-b3eb-784a6d66cb05/0/B49B4BDB8E9A70A93999CE2B38ACC7CA29AF5849.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B49B4BDB8E9A70A93999CE2B38ACC7CA29AF5849.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6dce58ca-52cf-41ec-b3eb-784a6d66cb05/0/326130613a363034343a633131303a3a2f34342d3434203d3e20323135323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:c110::/44

    Signature Algorithm: sha256WithRSAEncryption
         41:3f:3b:a6:32:57:1d:06:62:b3:3d:ce:fd:9d:11:0c:e1:69:
         c2:72:56:66:8e:18:cc:d5:cf:b1:a3:dc:b1:68:91:b4:2a:c2:
         cb:08:1a:b3:78:2d:6f:88:71:de:a8:9c:59:50:86:c5:e0:0c:
         cb:ae:b3:bf:cf:da:9e:df:98:75:ce:83:45:5b:f3:5a:fc:be:
         d6:f3:42:39:a4:dd:6a:01:67:29:34:f4:22:f0:e8:b9:af:61:
         d4:67:59:d3:42:86:a8:32:93:d3:ef:4a:e4:60:d4:fa:5d:83:
         52:f4:52:fe:3e:47:15:bc:30:f1:22:7f:8d:2b:fe:57:99:06:
         7a:80:15:c4:54:1e:2f:f1:23:31:20:59:f0:5c:ef:8d:e5:21:
         bc:2e:26:76:f0:64:47:71:fa:b4:02:75:0a:b6:d9:6f:d5:83:
         83:28:4a:51:91:6f:06:13:f3:5b:6d:74:2d:8e:0e:ca:e6:28:
         7b:b5:b7:50:7d:a4:fe:a4:ae:16:14:d7:e1:da:45:48:5c:51:
         14:b0:95:a8:f1:d0:d9:5b:62:d2:8c:31:82:96:7a:17:ae:33:
         35:75:68:ce:66:5d:9b:d4:b1:03:91:e3:64:ac:2d:64:c3:c5:
         a4:0f:6a:7f:15:b0:6d:65:64:9a:e9:01:bc:25:7b:fb:44:03:
         fa:2c:d7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----