Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/79a5b9dc-f78c-40a9-beb9-0d35b8347854/1/326130373a323438333a3a2f33322d3332203d3e20323135363439.roa
File:                     326130373a323438333a3a2f33322d3332203d3e20323135363439.roa (raw, json)
Hash identifier:          pOzVd2eHAgFLWwlREY3tsob3qnIsOPP0Ozsw7JCfcn8=
Subject key identifier:   05:81:24:FD:0E:21:A1:AE:19:7D:1E:06:2D:08:33:EC:98:B5:E4:9D
Certificate issuer:       /CN=AB988C63F14514C64BA41F5464D70E7BB3EA8764
Certificate serial:       5171AACFFEA074F12129B960E4331277A459DF7B
Authority key identifier: AB:98:8C:63:F1:45:14:C6:4B:A4:1F:54:64:D7:0E:7B:B3:EA:87:64
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AB988C63F14514C64BA41F5464D70E7BB3EA8764.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/79a5b9dc-f78c-40a9-beb9-0d35b8347854/1/326130373a323438333a3a2f33322d3332203d3e20323135363439.roa
Signing time:             Fri 29 Mar 2024 23:02:35 +0000
ROA not before:           Fri 29 Mar 2024 22:57:35 +0000
ROA not after:            Fri 28 Mar 2025 23:02:35 +0000
asID:                     215649
IP address blocks:        2a07:2483::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:71:aa:cf:fe:a0:74:f1:21:29:b9:60:e4:33:12:77:a4:59:df:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB988C63F14514C64BA41F5464D70E7BB3EA8764
        Validity
            Not Before: Mar 29 22:57:35 2024 GMT
            Not After : Mar 28 23:02:35 2025 GMT
        Subject: CN=058124FD0E21A1AE197D1E062D0833EC98B5E49D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e0:89:bc:08:21:c4:4f:71:9a:0b:94:cb:9e:
                    2f:35:87:37:ce:77:56:dd:03:4a:07:5b:42:aa:bb:
                    4c:62:3a:d0:2a:29:e9:8b:5a:c1:f2:9e:bc:fb:cf:
                    fe:03:2a:08:1c:45:ff:9c:3f:40:8f:35:05:fb:78:
                    86:5b:6c:1d:7b:c3:3e:8d:ae:ec:84:db:5d:26:94:
                    8b:b5:6d:f5:ef:10:5b:9b:e3:ea:cf:8c:82:b6:b1:
                    c9:1e:7a:3f:c4:a6:51:60:53:c7:6a:b0:07:4c:ec:
                    83:fe:15:b5:49:b2:3b:95:76:45:e1:92:26:fb:36:
                    6c:4e:63:46:4e:76:35:31:8d:ef:fa:9b:a8:f8:a7:
                    be:85:4d:cf:36:81:64:9b:b2:de:cd:20:eb:ac:b0:
                    95:3a:e7:9c:81:03:68:37:66:15:ed:50:aa:59:70:
                    a9:49:0f:f3:b5:42:76:3b:88:55:af:94:c3:e8:02:
                    b3:2f:76:64:a3:fb:e8:41:d1:d8:47:3c:41:b8:92:
                    a3:f2:a7:43:61:42:3d:01:d6:f0:ee:53:51:be:15:
                    73:f1:f2:b4:aa:8f:46:d2:1b:e2:81:24:71:41:7b:
                    86:0d:69:52:e8:42:f8:53:cf:b6:5d:38:b7:fe:52:
                    ba:41:42:9f:b1:a7:4c:02:f3:89:98:d5:bd:03:21:
                    6b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:81:24:FD:0E:21:A1:AE:19:7D:1E:06:2D:08:33:EC:98:B5:E4:9D
            X509v3 Authority Key Identifier:
                keyid:AB:98:8C:63:F1:45:14:C6:4B:A4:1F:54:64:D7:0E:7B:B3:EA:87:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/79a5b9dc-f78c-40a9-beb9-0d35b8347854/1/AB988C63F14514C64BA41F5464D70E7BB3EA8764.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AB988C63F14514C64BA41F5464D70E7BB3EA8764.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/79a5b9dc-f78c-40a9-beb9-0d35b8347854/1/326130373a323438333a3a2f33322d3332203d3e20323135363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:2483::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:2a:d3:0f:c0:fb:96:a2:13:4c:d7:7d:e0:2b:cc:60:cc:c8:
         61:bb:2e:9b:f1:1f:ff:88:69:49:fe:c7:9d:97:10:a4:13:58:
         48:80:27:07:78:55:5c:1f:54:de:d5:ad:a6:60:aa:5d:29:6f:
         76:50:59:60:84:2c:d6:d6:7a:c8:26:d5:b6:1d:0d:f4:48:5f:
         3e:ae:f9:7b:c7:05:9f:00:cb:aa:04:23:af:f4:01:87:fb:3a:
         05:ea:77:5a:4d:c9:6a:6b:ea:1f:ea:cc:51:78:bd:5e:90:6f:
         54:9b:e0:ae:70:ca:4a:e9:1a:59:63:24:20:81:5b:9d:8e:0e:
         21:ab:a1:d5:47:07:7e:bc:31:fb:d8:b5:ec:ba:95:20:d2:c7:
         37:1a:87:84:c5:6c:39:24:74:8a:23:e2:6b:d7:fd:db:6a:aa:
         df:b6:b4:ca:e4:77:99:4a:ed:5c:ed:c4:fd:5d:75:f1:59:03:
         fc:f9:c9:7b:dd:27:28:8a:ab:e0:34:e0:32:7f:2a:3e:74:6b:
         e9:ec:94:9e:1b:72:fa:a1:7d:48:87:88:db:ad:05:b1:31:13:
         70:94:58:24:f3:8f:02:76:19:ce:91:6c:10:af:0a:e0:58:2e:
         49:b9:de:26:dd:5f:00:6b:6a:ff:9e:db:d6:f1:ec:6e:1b:83:
         39:ba:87:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----