Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a84b548c-275a-476e-bfbe-540e73e62383/0/326130643a643734303a3130373a3a2f34382d3438203d3e20323130363137.roa
File:                     326130643a643734303a3130373a3a2f34382d3438203d3e20323130363137.roa (raw, json)
Hash identifier:          LJ4TxqwylUP4O6xsTnx4l7XsNo+DoQtxF6Vm43wdwUY=
Subject key identifier:   67:EC:A2:5C:04:93:6A:82:18:B2:E6:C3:1A:55:E9:E0:3E:A5:92:B4
Certificate issuer:       /CN=87d48146623246673056151f64abb8d1ee6b7727
Certificate serial:       178DD6BFFD197E1BDAE06207CFDC0ECD201E0944
Authority key identifier: 87:D4:81:46:62:32:46:67:30:56:15:1F:64:AB:B8:D1:EE:6B:77:27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h9SBRmIyRmcwVhUfZKu40e5rdyc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a84b548c-275a-476e-bfbe-540e73e62383/0/326130643a643734303a3130373a3a2f34382d3438203d3e20323130363137.roa
Signing time:             Mon 15 Jan 2024 15:37:26 +0000
ROA not before:           Mon 15 Jan 2024 15:32:26 +0000
ROA not after:            Mon 13 Jan 2025 15:37:26 +0000
asID:                     210617
IP address blocks:        2a0d:d740:107::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:8d:d6:bf:fd:19:7e:1b:da:e0:62:07:cf:dc:0e:cd:20:1e:09:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87d48146623246673056151f64abb8d1ee6b7727
        Validity
            Not Before: Jan 15 15:32:26 2024 GMT
            Not After : Jan 13 15:37:26 2025 GMT
        Subject: CN=67ECA25C04936A8218B2E6C31A55E9E03EA592B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fe:2b:c3:cd:8a:92:b3:b8:d4:3c:57:cd:53:
                    c9:7f:a8:21:6c:21:1e:35:6a:c5:99:e1:92:9d:ed:
                    15:13:5c:33:d5:c7:09:3d:d7:4e:1c:78:8d:f9:70:
                    5e:77:45:62:1f:03:ce:23:19:7d:72:30:8c:6f:75:
                    9d:b0:e4:71:46:41:3d:10:49:9e:d9:69:8e:ab:f8:
                    ba:c2:a3:09:e6:64:1c:c0:15:56:65:76:a4:52:1e:
                    3b:1b:26:20:57:bd:78:06:98:a2:22:ad:c3:b8:1c:
                    5e:ae:5e:36:48:ac:88:51:66:1e:fc:4c:ac:05:c5:
                    6a:35:81:b8:27:5c:b3:69:c6:17:72:0b:78:a4:50:
                    a2:e3:93:52:ba:8d:2d:15:be:d0:e8:9f:98:c8:02:
                    56:fc:5c:bd:a8:87:51:8a:85:07:27:1d:ad:b9:bd:
                    0c:83:43:dd:74:2a:43:df:45:0e:3e:00:d0:ba:2d:
                    36:7f:d8:c0:db:7a:1a:9f:2b:d5:55:63:9c:4d:bf:
                    67:6b:7a:4c:fa:de:b0:78:ef:0d:56:2d:98:00:18:
                    9b:64:ca:b3:9c:01:bc:c4:76:00:cc:31:f8:77:91:
                    e6:bb:f4:93:27:91:07:b3:04:3a:48:12:37:3b:81:
                    e7:c4:df:44:33:e5:90:c1:af:7f:a0:96:92:66:4e:
                    61:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:EC:A2:5C:04:93:6A:82:18:B2:E6:C3:1A:55:E9:E0:3E:A5:92:B4
            X509v3 Authority Key Identifier:
                keyid:87:D4:81:46:62:32:46:67:30:56:15:1F:64:AB:B8:D1:EE:6B:77:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a84b548c-275a-476e-bfbe-540e73e62383/0/87D48146623246673056151F64ABB8D1EE6B7727.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9SBRmIyRmcwVhUfZKu40e5rdyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a84b548c-275a-476e-bfbe-540e73e62383/0/326130643a643734303a3130373a3a2f34382d3438203d3e20323130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:d740:107::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:db:a7:af:79:40:10:0e:cd:7a:40:8b:64:a8:78:99:56:99:
         c7:f0:7e:8b:3e:95:1a:b9:2e:b2:92:b0:8e:a5:ff:ba:6f:6b:
         81:7c:78:b6:4e:31:ea:e3:9c:1e:42:4f:cd:58:66:cb:8d:89:
         cb:af:53:29:6f:8d:b4:ba:5d:4a:6f:7e:57:ba:48:7e:11:11:
         f5:a9:59:46:d5:8a:52:60:e5:88:ee:a4:1e:ab:fc:e8:7a:b9:
         1c:7b:2f:c7:84:b9:e1:aa:89:46:30:81:c7:f0:b0:42:5d:63:
         e3:be:d2:3a:f9:5b:68:4a:1d:6c:fd:1e:33:60:16:80:82:a2:
         b1:cf:79:de:23:a1:56:bd:00:dc:35:dc:83:47:bb:3a:cb:f3:
         12:fa:75:5c:fa:e2:5c:38:35:90:a5:00:1d:39:ad:2d:65:a0:
         f8:19:97:35:4e:13:b4:71:9c:ad:7d:9a:5c:3d:cd:76:73:29:
         62:dc:cb:6f:75:f4:9e:9a:4f:65:5b:cf:2a:ea:5e:dd:1d:41:
         90:38:db:27:ef:62:d6:c1:c3:2d:09:c6:af:ac:77:32:04:b6:
         11:88:05:76:09:f7:37:d5:4a:6d:af:15:af:67:af:db:a8:1c:
         4e:e1:b3:57:c0:7a:ce:42:7b:24:93:10:04:c4:28:b8:10:29:
         46:99:55:ac
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUF43Wv/0Zfhva4GIHz9wOzSAeCUQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdkNDgxNDY2MjMyNDY2NzMwNTYxNTFmNjRhYmI4ZDFl
ZTZiNzcyNzAeFw0yNDAxMTUxNTMyMjZaFw0yNTAxMTMxNTM3MjZaMDMxMTAvBgNV
BAMTKDY3RUNBMjVDMDQ5MzZBODIxOEIyRTZDMzFBNTVFOUUwM0VBNTkyQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA/ivDzYqSs7jUPFfNU8l/qCFs
IR41asWZ4ZKd7RUTXDPVxwk9104ceI35cF53RWIfA84jGX1yMIxvdZ2w5HFGQT0Q
SZ7ZaY6r+LrCownmZBzAFVZldqRSHjsbJiBXvXgGmKIircO4HF6uXjZIrIhRZh78
TKwFxWo1gbgnXLNpxhdyC3ikUKLjk1K6jS0VvtDon5jIAlb8XL2oh1GKhQcnHa25
vQyDQ910KkPfRQ4+ANC6LTZ/2MDbehqfK9VVY5xNv2drekz63rB47w1WLZgAGJtk
yrOcAbzEdgDMMfh3kea79JMnkQezBDpIEjc7gefE30Qz5ZDBr3+glpJmTmHRAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUZ+yiXASTaoIYsubDGlXp4D6lkrQwHwYDVR0j
BBgwFoAUh9SBRmIyRmcwVhUfZKu40e5rdycwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTg0YjU0OGMtMjc1YS00NzZlLWJmYmUtNTQwZTczZTYy
MzgzLzAvODdENDgxNDY2MjMyNDY2NzMwNTYxNTFGNjRBQkI4RDFFRTZCNzcyNy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2g5U0JSbUl5Um1jd1ZoVWZaS3U0MGU1
cmR5Yy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTg0YjU0OGMt
Mjc1YS00NzZlLWJmYmUtNTQwZTczZTYyMzgzLzAvMzI2MTMwNjQzYTY0MzczNDMw
M2EzMTMwMzczYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzAzNjMxMzcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqDddAAQcwDQYJKoZIhvcNAQELBQADggEBAHDbp695QBAOzXpAi2So
eJlWmcfwfos+lRq5LrKSsI6l/7pva4F8eLZOMerjnB5CT81YZsuNicuvUylvjbS6
XUpvfle6SH4REfWpWUbVilJg5YjupB6r/Oh6uRx7L8eEueGqiUYwgcfwsEJdY+O+
0jr5W2hKHWz9HjNgFoCCorHPed4joVa9ANw13INHuzrL8xL6dVz64lw4NZClAB05
rS1loPgZlzVOE7RxnK19mlw9zXZzKWLcy2919J6aT2VbzyrqXt0dQZA42yfvYtbB
wy0Jxq+sdzIEthGIBXYJ9zfVSm2vFa9nr9uoHE7hs1fAes5CeySTEATEKLgQKUaZ
Vaw=
-----END CERTIFICATE-----