Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/1/326130613a363034303a336430303a3a2f34302d3430203d3e20313939373531.roa
File:                     326130613a363034303a336430303a3a2f34302d3430203d3e20313939373531.roa (raw, json)
Hash identifier:          uDepEkVBGx4lLyxYJXo98G2Slo8LVVEGZa6ACgPRKv4=
Subject key identifier:   CF:91:4F:B0:8A:C3:B9:EC:89:5E:27:D0:D6:97:61:CD:C7:6A:77:F2
Certificate issuer:       /CN=E55F89CA4727B70FE77FA01C4CFA771550E58430
Certificate serial:       6354F556F932A81F9170C5CEA6476D7AC15132BB
Authority key identifier: E5:5F:89:CA:47:27:B7:0F:E7:7F:A0:1C:4C:FA:77:15:50:E5:84:30
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/E55F89CA4727B70FE77FA01C4CFA771550E58430.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/1/326130613a363034303a336430303a3a2f34302d3430203d3e20313939373531.roa
Signing time:             Tue 18 Jul 2023 19:17:53 +0000
ROA not before:           Tue 18 Jul 2023 19:12:53 +0000
ROA not after:            Tue 16 Jul 2024 19:17:53 +0000
asID:                     199751
IP address blocks:        2a0a:6040:3d00::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:54:f5:56:f9:32:a8:1f:91:70:c5:ce:a6:47:6d:7a:c1:51:32:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E55F89CA4727B70FE77FA01C4CFA771550E58430
        Validity
            Not Before: Jul 18 19:12:53 2023 GMT
            Not After : Jul 16 19:17:53 2024 GMT
        Subject: CN=CF914FB08AC3B9EC895E27D0D69761CDC76A77F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fe:af:10:18:71:b2:39:5b:6b:21:71:00:6d:
                    e9:1c:8d:b2:6a:56:0a:45:de:55:3f:d7:b1:4c:81:
                    c4:57:dc:59:bb:85:14:fe:2c:25:ee:7b:f7:c4:ed:
                    a5:80:61:41:b8:d4:3c:87:28:f9:46:71:a4:f5:3e:
                    52:dc:22:66:69:a6:83:3b:89:70:bb:b2:ae:c9:04:
                    71:b3:3f:2e:33:eb:51:db:b3:7d:6c:88:7a:51:d4:
                    60:37:34:7d:fc:53:46:99:4d:c8:07:0f:7c:42:62:
                    6c:00:29:59:99:5e:6f:00:54:8a:53:e8:6e:dd:64:
                    e9:fe:86:b3:1e:bc:bf:f5:df:68:18:94:7b:fa:a1:
                    08:af:9d:bc:ec:d3:19:96:93:92:39:cc:06:85:3c:
                    ad:3e:ae:bc:62:fe:b8:ce:d4:cd:43:51:63:0d:c3:
                    1b:de:eb:b0:83:a5:bf:82:e5:98:dc:60:d8:32:a5:
                    59:cc:0a:53:46:a5:0a:53:e4:fb:46:a9:04:26:b9:
                    39:5c:48:4e:f3:6a:61:ec:43:86:8d:1a:b4:04:95:
                    b2:2e:9e:a4:e8:13:33:17:6a:4d:8e:66:31:c3:f2:
                    76:0b:9a:93:f9:ec:7c:8c:28:d2:c8:ae:e5:73:d3:
                    ae:8e:d8:69:b6:4d:2c:7e:f8:23:e4:01:18:75:aa:
                    29:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:91:4F:B0:8A:C3:B9:EC:89:5E:27:D0:D6:97:61:CD:C7:6A:77:F2
            X509v3 Authority Key Identifier:
                keyid:E5:5F:89:CA:47:27:B7:0F:E7:7F:A0:1C:4C:FA:77:15:50:E5:84:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/1/E55F89CA4727B70FE77FA01C4CFA771550E58430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/E55F89CA4727B70FE77FA01C4CFA771550E58430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/1/326130613a363034303a336430303a3a2f34302d3430203d3e20313939373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:3d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         75:d9:23:89:b6:c9:a2:8f:42:8d:5f:66:ea:3d:b0:7a:7d:74:
         f9:4f:bb:42:be:0d:f1:a8:6e:d5:fe:2e:a5:45:bf:70:56:57:
         fc:b4:cd:30:48:bc:40:45:c1:65:22:39:78:44:b7:1d:81:31:
         e3:bd:d3:ef:82:77:bc:33:6d:26:18:55:96:9d:89:17:93:f3:
         1d:ce:87:16:7c:4d:77:95:06:e8:ee:70:9d:ab:a8:7e:34:29:
         fc:ee:f7:c0:f5:29:8c:ca:8e:9c:45:de:5d:a6:c3:ee:69:31:
         d2:a3:79:fc:26:14:95:61:9b:ff:de:26:46:13:59:c7:b4:18:
         43:2b:f9:77:b2:04:73:7f:75:ab:c8:70:7c:94:ea:38:bb:23:
         ef:d9:90:44:15:fb:f3:15:92:75:14:ac:75:eb:9e:87:72:20:
         c1:d9:85:94:39:e3:a4:98:4c:15:77:1f:42:6c:c5:06:7d:b3:
         e3:5c:be:49:02:55:e1:6d:91:a5:55:d7:15:d0:88:26:f5:96:
         c0:eb:4c:4c:37:44:44:c0:29:0b:f4:24:04:74:d9:04:dc:dc:
         17:05:19:a9:dd:5e:b2:e6:1a:5e:9e:74:de:4e:fd:05:bd:fc:
         e5:4c:a1:3f:6b:13:c1:26:ea:ac:ef:80:b6:11:93:c5:97:08:
         66:c7:2c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----