Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393066663a3a2f34382d3438203d3e20323135333634.roa
File:                     326131343a373538313a393066663a3a2f34382d3438203d3e20323135333634.roa (raw, json)
Hash identifier:          sR+9Y8oEj6MqzGtRkFzAYPAw7rPUdb2HcOFNynPsY40=
Subject key identifier:   00:B7:65:42:0B:C9:43:27:CD:BF:10:71:89:9E:8D:7E:44:A9:AF:1E
Certificate issuer:       /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Certificate serial:       2E9780F4CAD7B3CE0B53E631139F176E026AE71F
Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393066663a3a2f34382d3438203d3e20323135333634.roa
Signing time:             Wed 10 Jul 2024 16:01:41 +0000
ROA not before:           Wed 10 Jul 2024 15:56:41 +0000
ROA not after:            Wed 09 Jul 2025 16:01:41 +0000
asID:                     215364
IP address blocks:        2a14:7581:90ff::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:97:80:f4:ca:d7:b3:ce:0b:53:e6:31:13:9f:17:6e:02:6a:e7:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
        Validity
            Not Before: Jul 10 15:56:41 2024 GMT
            Not After : Jul  9 16:01:41 2025 GMT
        Subject: CN=00B765420BC94327CDBF1071899E8D7E44A9AF1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1a:c7:af:51:33:ee:dc:1f:a3:f0:c6:6c:06:
                    c5:a2:b1:22:5e:ff:1a:59:14:06:c9:26:e2:ac:cb:
                    b8:27:12:14:09:6b:22:c9:e4:ed:9f:ca:51:d5:2f:
                    2f:14:b7:9c:5d:a8:d8:e7:df:2b:f8:e5:3f:e1:8f:
                    18:7d:8e:b5:10:48:34:da:22:4c:19:28:a5:22:fd:
                    17:3c:92:63:6a:45:a0:1b:fe:98:3f:0e:79:f2:d4:
                    71:eb:b9:c8:f2:b3:44:83:de:7e:71:07:3d:6b:de:
                    0e:fe:53:98:73:3d:fc:34:51:8b:e8:81:bd:32:78:
                    85:e3:ae:34:64:87:64:c0:d0:f8:f1:39:02:3a:a1:
                    c4:ee:46:25:da:25:36:62:84:34:29:fa:fa:c8:f4:
                    6e:29:4b:f2:c6:0b:03:e9:31:f4:fe:e8:e3:1e:91:
                    94:c1:61:d2:58:8b:f3:60:5e:e8:73:4a:77:89:42:
                    e9:1b:94:c5:4a:1b:b3:ca:f2:ec:6d:58:46:64:ad:
                    82:ae:1b:fa:a3:00:d6:f5:91:6f:14:65:62:a2:59:
                    0e:49:2e:ba:9c:99:e1:31:50:e4:ec:09:fb:14:b5:
                    86:e6:ae:70:ef:c8:17:7f:37:e0:8d:91:09:0f:32:
                    22:39:07:c7:30:e8:10:85:71:b2:e6:2b:3c:7f:bb:
                    fb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B7:65:42:0B:C9:43:27:CD:BF:10:71:89:9E:8D:7E:44:A9:AF:1E
            X509v3 Authority Key Identifier:
                keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393066663a3a2f34382d3438203d3e20323135333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:90ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:83:53:c1:e5:7e:ff:e0:e5:35:ce:71:fe:e7:1d:a1:e8:d7:
         17:f5:a0:90:69:62:45:30:c5:bd:30:1b:4b:92:a8:23:ae:b8:
         38:63:b2:59:92:2a:14:b5:00:85:cb:4a:ea:63:cf:be:a0:df:
         92:6a:8c:a7:e8:f3:3b:25:d0:80:be:b0:9c:76:3b:59:44:d5:
         f3:d8:c6:6b:a0:cd:c4:b8:de:72:57:fb:17:94:6d:d8:1e:f4:
         c9:70:48:f4:52:dc:0d:17:70:54:ef:a6:2f:9c:c5:01:41:31:
         4f:34:7e:12:44:ae:74:18:16:02:b0:26:68:41:4c:47:27:12:
         77:07:4b:b2:f4:06:3c:6d:6d:79:d7:9e:4f:4c:de:bf:00:51:
         3a:ca:9d:8a:c3:68:03:fa:cf:00:30:a0:b5:da:3b:8d:10:c7:
         02:72:22:a6:98:c2:3e:d0:6c:76:0a:4d:7f:c2:51:64:04:3f:
         b9:53:4c:2f:9b:1c:a6:ea:8b:f1:61:85:89:e1:8c:ea:e6:36:
         7b:1e:d7:c2:76:1d:41:cf:17:4b:e5:97:bd:63:bd:ac:65:fb:
         c6:2b:7f:2b:a2:94:e5:16:09:79:a9:d4:09:06:fd:37:11:5e:
         07:de:3b:c3:58:2d:73:cf:68:7b:f3:a5:87:ee:a6:11:39:22:
         c7:2a:ed:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----