Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a4c6bdc5-eb4e-4b6e-95f6-62790e57f3be/0/326131333a656534303a3130303a3a2f34302d3430203d3e20323136303037.roa
File:                     326131333a656534303a3130303a3a2f34302d3430203d3e20323136303037.roa (raw, json)
Hash identifier:          xXF0dddcO4TuWa49/8HzHEbQyNVNf30NXWoAcqehx48=
Subject key identifier:   79:42:17:EB:94:AD:27:C1:F8:68:DC:30:15:7E:35:FE:6F:44:AF:AD
Certificate issuer:       /CN=9da23cc2cf88ae4585cf8aaf9a714a9ad2e6f198
Certificate serial:       106C3AFA3B17288C5E466F90C9E085513BCD4031
Authority key identifier: 9D:A2:3C:C2:CF:88:AE:45:85:CF:8A:AF:9A:71:4A:9A:D2:E6:F1:98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/naI8ws-IrkWFz4qvmnFKmtLm8Zg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a4c6bdc5-eb4e-4b6e-95f6-62790e57f3be/0/326131333a656534303a3130303a3a2f34302d3430203d3e20323136303037.roa
Signing time:             Mon 20 Nov 2023 10:10:23 +0000
ROA not before:           Mon 20 Nov 2023 10:05:23 +0000
ROA not after:            Mon 18 Nov 2024 10:10:23 +0000
asID:                     216007
IP address blocks:        2a13:ee40:100::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:6c:3a:fa:3b:17:28:8c:5e:46:6f:90:c9:e0:85:51:3b:cd:40:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9da23cc2cf88ae4585cf8aaf9a714a9ad2e6f198
        Validity
            Not Before: Nov 20 10:05:23 2023 GMT
            Not After : Nov 18 10:10:23 2024 GMT
        Subject: CN=794217EB94AD27C1F868DC30157E35FE6F44AFAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e3:66:99:4b:0f:74:b0:9b:99:de:45:14:93:
                    ae:ff:5d:db:4d:45:f5:59:ea:34:aa:90:ca:01:f0:
                    10:13:73:d2:24:9b:ec:9a:ba:a0:aa:80:f3:8d:dc:
                    03:bf:02:14:a0:1d:23:fb:9d:c8:55:26:50:e8:ad:
                    e6:af:4f:99:92:10:fd:71:d3:e6:a8:b6:83:ab:07:
                    ba:77:21:6a:03:32:c6:25:bd:84:53:d3:80:7c:11:
                    a1:3c:71:ee:f2:85:d9:65:4e:0c:62:5c:51:9c:f8:
                    f2:95:11:2d:6b:4f:ff:c3:79:24:a5:47:2e:31:54:
                    4f:7d:fd:ed:d4:74:6f:54:58:a9:77:4e:91:e0:46:
                    19:14:c5:a8:90:68:1c:c9:ef:fa:b7:38:9a:37:60:
                    b0:de:62:57:40:f0:e4:45:e0:39:77:8c:d8:5e:2f:
                    e8:20:86:2b:51:92:7a:86:9f:4b:94:10:4d:cd:f6:
                    58:3b:69:47:f6:f8:f3:34:18:e4:01:85:36:21:ee:
                    05:af:66:c1:2e:5f:19:c0:0b:c7:d3:4d:ca:8d:b3:
                    4c:16:66:b0:90:46:08:03:13:28:b7:1a:c3:82:89:
                    e2:ce:8f:33:8e:76:4e:7e:19:8b:e9:1d:69:55:a3:
                    bb:41:2c:f4:d8:7c:51:9f:50:2a:91:e8:d0:b6:5c:
                    a7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:42:17:EB:94:AD:27:C1:F8:68:DC:30:15:7E:35:FE:6F:44:AF:AD
            X509v3 Authority Key Identifier:
                keyid:9D:A2:3C:C2:CF:88:AE:45:85:CF:8A:AF:9A:71:4A:9A:D2:E6:F1:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a4c6bdc5-eb4e-4b6e-95f6-62790e57f3be/0/9DA23CC2CF88AE4585CF8AAF9A714A9AD2E6F198.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naI8ws-IrkWFz4qvmnFKmtLm8Zg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a4c6bdc5-eb4e-4b6e-95f6-62790e57f3be/0/326131333a656534303a3130303a3a2f34302d3430203d3e20323136303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ee40:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         5b:e1:98:76:c9:a8:61:ee:88:54:e2:56:ac:4d:a3:6f:cb:2e:
         ed:aa:aa:63:c6:35:dd:b1:9d:0e:af:6c:51:09:84:a7:d2:40:
         1a:74:fe:f8:2c:66:33:5b:08:bd:80:55:a9:0b:a3:59:89:0b:
         7d:5e:c9:4e:e8:8e:07:f5:f7:c1:3a:47:0c:78:c9:63:14:2b:
         87:85:a7:5a:ee:e2:e2:ce:42:c8:1e:f1:96:b1:79:9d:69:85:
         44:dc:7b:26:f5:bd:58:fe:a7:4f:c8:0c:74:e9:07:24:2d:0b:
         d5:8f:13:eb:c6:83:52:04:32:7d:85:aa:6d:cc:f6:7a:b0:76:
         1c:c0:9c:5d:8c:b7:5a:aa:21:5e:1a:e7:3d:e2:02:19:db:e9:
         74:b8:75:ca:80:fb:8e:b0:de:09:ae:45:7d:2b:76:d8:87:15:
         ac:39:f9:50:5b:29:5c:bd:71:30:60:72:31:88:31:96:5b:a6:
         8c:16:30:cc:ba:2a:8d:fb:e3:c4:d5:1b:37:5c:4d:a0:eb:07:
         45:eb:a2:d4:85:fe:c6:20:45:b0:b5:ec:56:9b:59:5d:9c:19:
         f7:7c:1d:42:e4:c5:70:76:1b:e8:e2:7d:13:e3:ff:95:2e:06:
         c8:93:44:9d:ac:de:a1:9d:30:7e:bd:d5:a8:0a:4f:b0:a8:5f:
         e0:d2:75:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----