Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/2/3132382e3235342e3230342e302f32342d3234203d3e20313939373531.roa
File:                     3132382e3235342e3230342e302f32342d3234203d3e20313939373531.roa (raw, json)
Hash identifier:          WE+mDoGyePTkCR4N2Ipxf8U3gYDQpmeIfXQzUaPR9D4=
Subject key identifier:   D1:33:37:52:01:A5:C2:D2:3B:C6:A0:D6:38:8D:44:B6:BD:1E:33:F3
Certificate issuer:       /CN=67DAC6BFE8CF4F99CC7DE476F2D7C11DD253702A
Certificate serial:       3170D85C63548BE1750B4D83A0CF5ED55DF7F7CB
Authority key identifier: 67:DA:C6:BF:E8:CF:4F:99:CC:7D:E4:76:F2:D7:C1:1D:D2:53:70:2A
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/67DAC6BFE8CF4F99CC7DE476F2D7C11DD253702A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/2/3132382e3235342e3230342e302f32342d3234203d3e20313939373531.roa
Signing time:             Tue 18 Jul 2023 19:17:53 +0000
ROA not before:           Tue 18 Jul 2023 19:12:53 +0000
ROA not after:            Tue 16 Jul 2024 19:17:53 +0000
asID:                     199751
IP address blocks:        128.254.204.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:70:d8:5c:63:54:8b:e1:75:0b:4d:83:a0:cf:5e:d5:5d:f7:f7:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67DAC6BFE8CF4F99CC7DE476F2D7C11DD253702A
        Validity
            Not Before: Jul 18 19:12:53 2023 GMT
            Not After : Jul 16 19:17:53 2024 GMT
        Subject: CN=D133375201A5C2D23BC6A0D6388D44B6BD1E33F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:92:ed:de:96:b4:8a:55:aa:6a:25:98:b5:8f:
                    02:51:5a:e1:94:02:3c:d2:27:08:af:94:8c:dc:fb:
                    3d:61:dc:e4:c5:12:c2:58:bd:19:1f:e1:f2:58:9f:
                    86:27:78:bb:0a:c7:bc:13:2a:69:c1:f4:a1:10:b6:
                    0c:16:0c:90:18:de:86:9a:3f:c5:d3:cb:37:8d:99:
                    d2:ff:fe:80:23:96:b7:cc:3d:e5:c9:3b:06:b1:40:
                    32:68:c1:3e:06:f1:9f:c1:bf:ae:26:18:db:71:85:
                    bc:d0:4c:51:dd:55:23:2e:57:cc:ca:1a:97:5d:d1:
                    c4:65:9f:b3:ef:b0:5e:4d:44:86:97:21:3e:1d:f0:
                    aa:ab:32:23:d5:63:69:59:4a:f5:17:0a:58:40:fe:
                    f2:0a:fb:e5:d9:3d:31:5a:61:4b:25:a3:52:4c:8f:
                    74:01:73:d1:73:61:16:3f:05:c1:42:eb:12:0e:32:
                    31:96:0b:ec:ab:95:10:37:a7:51:6c:2d:bb:49:b9:
                    18:3c:82:f0:73:3e:d4:14:6b:7a:29:89:d5:0e:28:
                    a5:15:76:3c:9d:e7:89:7f:71:54:3d:cd:4b:ac:72:
                    dc:9e:16:a7:19:5b:0f:52:7d:7d:ff:00:14:c1:8c:
                    1e:d6:56:0c:2f:ee:75:51:c7:ba:31:3e:89:e9:bf:
                    5a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:33:37:52:01:A5:C2:D2:3B:C6:A0:D6:38:8D:44:B6:BD:1E:33:F3
            X509v3 Authority Key Identifier:
                keyid:67:DA:C6:BF:E8:CF:4F:99:CC:7D:E4:76:F2:D7:C1:1D:D2:53:70:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/2/67DAC6BFE8CF4F99CC7DE476F2D7C11DD253702A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/67DAC6BFE8CF4F99CC7DE476F2D7C11DD253702A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/2/3132382e3235342e3230342e302f32342d3234203d3e20313939373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:86:94:3f:5d:11:d3:63:08:7c:80:1b:ab:e0:e8:d2:2d:82:
         41:84:75:fa:3e:79:71:1b:33:f6:88:99:46:0f:3b:8b:ea:e1:
         16:74:b8:a3:7f:95:07:0f:aa:55:76:39:a6:5a:e4:7e:40:d4:
         4b:a5:21:c8:74:a1:d1:a5:50:6e:94:8f:bd:bc:5b:61:33:7f:
         83:95:34:cd:2c:11:35:93:84:65:99:4e:04:1a:99:fd:ca:fb:
         77:91:09:27:7e:5f:d3:a1:37:2f:10:d8:a9:c4:24:c7:be:41:
         f3:15:c7:bd:a4:6d:a9:26:a7:ae:52:11:02:ee:7b:d6:d1:93:
         a6:78:9f:7e:3e:8d:ef:48:f4:3e:4a:58:57:bf:d8:fa:6b:1e:
         7a:a2:af:7e:49:28:33:44:9d:81:44:5e:80:b4:40:df:2e:64:
         16:a2:ce:be:78:74:29:3f:44:23:e5:5a:62:90:84:fe:18:ea:
         29:8c:73:74:be:30:36:46:ef:46:0f:8c:18:a5:f6:42:9a:64:
         28:22:12:ac:83:0f:50:90:cd:69:07:de:43:91:1b:78:83:ec:
         04:e5:00:63:f4:71:fe:67:f4:18:04:50:7b:88:d0:7a:be:68:
         68:6e:a9:50:32:3c:4a:67:b5:ff:71:55:73:b7:93:7f:8f:35:
         56:75:7b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----