Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/2/326130373a353463313a633530303a3a2f34302d3438203d3e20323134373537.roa
File:                     326130373a353463313a633530303a3a2f34302d3438203d3e20323134373537.roa (raw, json)
Hash identifier:          rx6IUKhJahLbRAuJ+9gUsNn7bR5o5GyqNdUE075PAPU=
Subject key identifier:   DD:94:85:6B:44:3A:11:AE:D0:C5:D5:CB:2D:65:75:F5:4D:A4:8A:19
Certificate issuer:       /CN=B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA
Certificate serial:       346123CC82EF7BD3F6DEDE4989CAD25E69089248
Authority key identifier: B3:DB:14:53:17:13:D5:39:0D:FD:AD:1D:3B:DC:A5:BB:07:9F:53:DA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/2/326130373a353463313a633530303a3a2f34302d3438203d3e20323134373537.roa
Signing time:             Fri 30 Aug 2024 14:21:20 +0000
ROA not before:           Fri 30 Aug 2024 14:16:20 +0000
ROA not after:            Fri 29 Aug 2025 14:21:20 +0000
asID:                     214757
IP address blocks:        2a07:54c1:c500::/40 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:61:23:cc:82:ef:7b:d3:f6:de:de:49:89:ca:d2:5e:69:08:92:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA
        Validity
            Not Before: Aug 30 14:16:20 2024 GMT
            Not After : Aug 29 14:21:20 2025 GMT
        Subject: CN=DD94856B443A11AED0C5D5CB2D6575F54DA48A19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:96:4c:ab:3c:df:c5:04:2a:08:8e:e9:ea:1f:
                    0c:50:26:be:41:22:64:ff:b6:f4:10:46:68:d0:ad:
                    ee:2c:01:57:db:89:e3:14:69:7d:ae:cd:8c:fa:9c:
                    10:ac:fc:33:cd:24:8c:08:f9:57:63:7d:d6:9e:b2:
                    86:0e:21:78:1e:a8:98:e4:4e:66:38:04:61:d1:d2:
                    06:ee:d3:26:7f:71:43:40:33:6c:e6:7c:d9:5e:70:
                    4a:9c:69:19:91:60:bb:03:98:3d:8d:a9:25:7c:52:
                    b0:b8:94:b4:20:92:e3:04:ee:0a:67:aa:1c:bf:7f:
                    1d:bd:61:f7:db:7f:f6:5c:96:aa:95:ea:8a:8c:9f:
                    11:c8:62:2a:eb:fe:ab:94:84:cf:74:b6:85:de:cf:
                    88:f5:01:da:f6:cb:84:f3:24:1b:49:a6:7e:9d:26:
                    34:03:70:02:86:d7:c5:e8:04:e0:f2:d5:6b:1e:be:
                    11:08:83:3f:f2:ca:01:94:c0:0d:d6:ec:cc:79:86:
                    b4:e3:d2:5d:78:57:6e:53:13:5e:40:08:a5:8e:ca:
                    35:82:0f:35:eb:9f:ed:e4:df:94:68:76:e9:6e:b9:
                    7c:17:4d:8a:68:d1:ae:7a:4b:29:f0:d6:1d:1b:36:
                    27:a9:c6:fa:cf:f4:ea:fa:12:63:33:44:d3:c1:67:
                    4d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:94:85:6B:44:3A:11:AE:D0:C5:D5:CB:2D:65:75:F5:4D:A4:8A:19
            X509v3 Authority Key Identifier:
                keyid:B3:DB:14:53:17:13:D5:39:0D:FD:AD:1D:3B:DC:A5:BB:07:9F:53:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/2/B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/2/326130373a353463313a633530303a3a2f34302d3438203d3e20323134373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:c500::/40

    Signature Algorithm: sha256WithRSAEncryption
         2c:0f:e9:e7:59:80:20:29:fb:7d:c6:03:0f:f6:06:37:fe:07:
         ae:1c:d6:7b:30:7c:8f:35:bf:f7:c2:00:05:49:22:58:6c:2a:
         9b:b8:95:62:a0:e7:90:15:c9:ae:35:ad:fe:c0:a4:4a:54:fc:
         37:9a:ff:53:c1:e0:45:7c:eb:be:5c:ee:36:20:fd:5a:1b:5a:
         a1:fa:ba:e7:7c:c6:c1:e2:c4:cb:1a:f7:39:ba:52:8b:53:e4:
         1d:29:b4:dc:fe:09:22:cc:af:bd:ef:d4:5b:1f:a6:db:64:e2:
         0f:b5:7a:3a:b7:41:b3:49:b1:0b:8c:6a:97:c6:95:33:3e:c4:
         71:d1:e2:39:1e:fd:f9:9a:b2:cd:10:a0:11:28:d4:1d:66:df:
         1b:87:43:00:54:12:57:2b:7b:77:32:de:e1:fc:17:c8:6b:64:
         1e:d2:cc:7a:5d:a7:f1:33:a4:62:c3:90:e9:d5:09:15:35:ac:
         3c:7b:9a:25:74:9f:01:6a:e6:95:4c:a4:68:5d:bb:80:40:41:
         e1:ce:87:ad:c9:bd:fc:64:59:ca:cb:ff:6b:f2:ca:b2:1d:ee:
         78:e3:de:9b:88:3d:a1:09:6a:59:5a:ac:85:36:02:13:e7:70:
         eb:6e:ef:6f:d4:68:69:ef:13:5a:c8:e0:70:aa:d0:84:38:f7:
         f5:00:2f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----