Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a4c6bdc5-eb4e-4b6e-95f6-62790e57f3be/0/326131333a656534303a3230303a3a2f34302d3430203d3e20323136303036.roa
File:                     326131333a656534303a3230303a3a2f34302d3430203d3e20323136303036.roa (raw, json)
Hash identifier:          0r8CyXXe7vRNmGU5QrNT21GheaMvy4pPzGZI9/DDZ78=
Subject key identifier:   E3:21:3A:EE:DC:C0:BA:05:CA:83:59:DB:59:95:CD:FD:44:B0:9B:5E
Certificate issuer:       /CN=9da23cc2cf88ae4585cf8aaf9a714a9ad2e6f198
Certificate serial:       62143EE166A0669B8C84816F25D519267DF64F4E
Authority key identifier: 9D:A2:3C:C2:CF:88:AE:45:85:CF:8A:AF:9A:71:4A:9A:D2:E6:F1:98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/naI8ws-IrkWFz4qvmnFKmtLm8Zg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a4c6bdc5-eb4e-4b6e-95f6-62790e57f3be/0/326131333a656534303a3230303a3a2f34302d3430203d3e20323136303036.roa
Signing time:             Sat 18 Nov 2023 02:21:03 +0000
ROA not before:           Sat 18 Nov 2023 02:16:03 +0000
ROA not after:            Sat 16 Nov 2024 02:21:03 +0000
asID:                     216006
IP address blocks:        2a13:ee40:200::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:14:3e:e1:66:a0:66:9b:8c:84:81:6f:25:d5:19:26:7d:f6:4f:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9da23cc2cf88ae4585cf8aaf9a714a9ad2e6f198
        Validity
            Not Before: Nov 18 02:16:03 2023 GMT
            Not After : Nov 16 02:21:03 2024 GMT
        Subject: CN=E3213AEEDCC0BA05CA8359DB5995CDFD44B09B5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:96:b5:6c:80:55:24:e3:c4:90:93:5e:ee:f6:
                    1a:09:fd:e5:e8:97:ec:1f:c4:d5:7f:3c:4e:22:92:
                    cc:5f:58:8e:45:f8:ea:7e:a2:cf:70:73:5c:4e:da:
                    58:a4:69:2a:be:b5:84:2d:7e:9e:21:c5:bb:6a:99:
                    06:89:9b:f9:74:3a:d5:61:48:1a:15:3c:e0:cd:61:
                    16:92:66:fb:8e:1f:14:bc:26:0e:67:4c:51:d0:eb:
                    5f:09:b6:10:42:49:1a:c0:10:18:ef:2e:be:89:24:
                    9d:a3:45:c0:fc:12:33:12:57:4b:79:57:09:c4:32:
                    e8:76:07:cc:51:b8:55:d0:98:7e:fd:3d:6c:0d:a5:
                    11:4e:cd:b7:21:10:9f:5c:ba:e6:5a:6d:13:b2:09:
                    05:3f:64:3c:cf:d5:b1:4e:9f:9d:85:34:0a:0c:6b:
                    3d:0a:c2:0b:ef:03:14:3c:5c:9a:0a:4b:9c:41:3d:
                    db:20:ec:00:07:4b:3b:e4:de:57:89:e0:65:52:1c:
                    e9:33:13:2c:39:e0:24:97:9c:71:fa:69:0c:1e:66:
                    2c:65:34:ef:83:c0:e4:a5:16:43:c9:d2:02:a1:0e:
                    1d:79:37:02:00:66:ca:da:41:fc:59:57:f1:e1:b6:
                    cf:d8:11:83:96:b0:6a:5b:c0:bc:86:09:93:7c:a5:
                    79:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:21:3A:EE:DC:C0:BA:05:CA:83:59:DB:59:95:CD:FD:44:B0:9B:5E
            X509v3 Authority Key Identifier:
                keyid:9D:A2:3C:C2:CF:88:AE:45:85:CF:8A:AF:9A:71:4A:9A:D2:E6:F1:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a4c6bdc5-eb4e-4b6e-95f6-62790e57f3be/0/9DA23CC2CF88AE4585CF8AAF9A714A9AD2E6F198.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naI8ws-IrkWFz4qvmnFKmtLm8Zg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a4c6bdc5-eb4e-4b6e-95f6-62790e57f3be/0/326131333a656534303a3230303a3a2f34302d3430203d3e20323136303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ee40:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         78:4f:57:70:94:f8:54:b5:8b:58:7e:ff:86:78:bf:66:e2:4a:
         fc:6c:bb:3d:9b:8c:df:f2:a3:23:52:43:47:ad:3a:77:96:d7:
         7c:bc:b0:39:e9:e2:7d:ad:62:69:94:a9:5b:42:b9:17:30:73:
         17:1d:ad:aa:b9:a3:a6:3a:d5:a9:84:08:91:c0:8a:32:9a:8d:
         4f:4b:d3:78:4a:59:d5:79:9a:53:f0:cd:b0:26:72:0c:e3:6c:
         6a:c8:12:35:22:c8:d9:4a:d1:f0:e3:cb:eb:27:db:31:a3:a6:
         af:20:20:0d:b1:e2:f6:af:c7:dc:10:e4:7c:f7:50:b0:d6:6b:
         89:ff:28:11:50:79:77:55:1f:a8:87:9a:ea:35:c4:77:48:24:
         27:07:91:37:28:d0:2e:89:b0:89:7c:4c:f7:a6:02:e5:48:a1:
         69:50:52:39:79:d1:8f:06:9c:55:2e:30:2f:0a:51:02:5a:8f:
         52:2a:ee:64:6f:27:a9:2e:14:90:67:21:25:b7:f6:26:4b:cc:
         51:5c:df:ff:9a:9b:1f:60:ac:6e:95:5f:87:4e:11:42:c3:34:
         dc:86:43:8d:04:17:b3:0b:ac:f9:76:e8:5f:03:1e:06:84:f3:
         0c:f3:a2:12:8b:5b:a0:97:03:65:60:7b:99:f7:8c:ba:9c:7a:
         79:09:24:c5
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUYhQ+4WagZpuMhIFvJdUZJn32T04wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWRhMjNjYzJjZjg4YWU0NTg1Y2Y4YWFmOWE3MTRhOWFk
MmU2ZjE5ODAeFw0yMzExMTgwMjE2MDNaFw0yNDExMTYwMjIxMDNaMDMxMTAvBgNV
BAMTKEUzMjEzQUVFRENDMEJBMDVDQTgzNTlEQjU5OTVDREZENDRCMDlCNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2lrVsgFUk48SQk17u9hoJ/eXo
l+wfxNV/PE4iksxfWI5F+Op+os9wc1xO2likaSq+tYQtfp4hxbtqmQaJm/l0OtVh
SBoVPODNYRaSZvuOHxS8Jg5nTFHQ618JthBCSRrAEBjvLr6JJJ2jRcD8EjMSV0t5
VwnEMuh2B8xRuFXQmH79PWwNpRFOzbchEJ9cuuZabROyCQU/ZDzP1bFOn52FNAoM
az0KwgvvAxQ8XJoKS5xBPdsg7AAHSzvk3leJ4GVSHOkzEyw54CSXnHH6aQweZixl
NO+DwOSlFkPJ0gKhDh15NwIAZsraQfxZV/Hhts/YEYOWsGpbwLyGCZN8pXmLAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU4yE67tzAugXKg1nbWZXN/USwm14wHwYDVR0j
BBgwFoAUnaI8ws+IrkWFz4qvmnFKmtLm8ZgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTRjNmJkYzUtZWI0ZS00YjZlLTk1ZjYtNjI3OTBlNTdm
M2JlLzAvOURBMjNDQzJDRjg4QUU0NTg1Q0Y4QUFGOUE3MTRBOUFEMkU2RjE5OC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25hSTh3cy1JcmtXRno0cXZtbkZLbXRM
bThaZy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTRjNmJkYzUt
ZWI0ZS00YjZlLTk1ZjYtNjI3OTBlNTdmM2JlLzAvMzI2MTMxMzMzYTY1NjUzNDMw
M2EzMjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjMxMzYzMDMwMzYucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAqE+5AAjANBgkqhkiG9w0BAQsFAAOCAQEAeE9XcJT4VLWLWH7/hni/
ZuJK/Gy7PZuM3/KjI1JDR606d5bXfLywOenifa1iaZSpW0K5FzBzFx2tqrmjpjrV
qYQIkcCKMpqNT0vTeEpZ1XmaU/DNsCZyDONsasgSNSLI2UrR8OPL6yfbMaOmryAg
DbHi9q/H3BDkfPdQsNZrif8oEVB5d1UfqIea6jXEd0gkJweRNyjQLomwiXxM96YC
5UihaVBSOXnRjwacVS4wLwpRAlqPUiruZG8nqS4UkGchJbf2JkvMUVzf/5qbH2Cs
bpVfh04RQsM03IZDjQQXswus+XboXwMeBoTzDPOiEotboJcDZWB7mfeMupx6eQkk
xQ==
-----END CERTIFICATE-----