Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/326130613a363034343a623330303a3a2f34382d3438203d3e20323134383039.roa
File:                     326130613a363034343a623330303a3a2f34382d3438203d3e20323134383039.roa (raw, json)
Hash identifier:          PUTXxJtRU+hybLnCWsHv8E8IK7M/jFaRwmwBSLQQ27Q=
Subject key identifier:   35:14:34:A4:A7:0E:74:C8:F8:21:F6:7A:80:95:68:C8:E4:94:AC:D5
Certificate issuer:       /CN=5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296
Certificate serial:       1D690996E6BF6EC851CACD6E6EF6E046DC6B4671
Authority key identifier: 5F:ED:2A:FC:A7:C9:FB:DE:AC:83:52:7A:15:BE:54:7D:7B:63:C2:96
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/326130613a363034343a623330303a3a2f34382d3438203d3e20323134383039.roa
Signing time:             Sun 11 Aug 2024 10:38:59 +0000
ROA not before:           Sun 11 Aug 2024 10:33:59 +0000
ROA not after:            Sun 10 Aug 2025 10:38:59 +0000
asID:                     214809
IP address blocks:        2a0a:6044:b300::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:69:09:96:e6:bf:6e:c8:51:ca:cd:6e:6e:f6:e0:46:dc:6b:46:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296
        Validity
            Not Before: Aug 11 10:33:59 2024 GMT
            Not After : Aug 10 10:38:59 2025 GMT
        Subject: CN=351434A4A70E74C8F821F67A809568C8E494ACD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:82:b0:32:9f:ea:f3:4b:6a:32:c7:ad:3e:37:
                    b9:f8:52:2f:3c:7a:2c:dc:d3:00:88:d6:a8:94:20:
                    93:3f:f2:29:db:69:62:32:46:97:be:63:e8:e6:61:
                    cd:af:ef:5c:f4:e1:17:da:cc:df:2f:85:c7:30:9f:
                    62:68:04:08:62:fb:6d:50:90:17:d0:b0:56:88:39:
                    6b:35:8f:dc:40:c3:8e:87:aa:5f:70:99:65:7f:94:
                    ae:bd:de:a0:18:88:d6:2f:a7:e3:01:d3:7f:4a:91:
                    b5:69:19:88:a8:97:84:06:a1:31:c1:91:01:bf:5a:
                    70:fa:62:23:0a:44:74:bd:fa:c4:0c:e0:d5:ec:e6:
                    4d:31:a4:5f:90:02:4a:24:ca:58:e3:97:3c:54:7b:
                    3e:00:8d:bb:ec:51:4d:11:bf:8a:cb:5d:99:cd:8e:
                    81:fa:0e:9f:00:37:19:34:ff:a1:d7:20:c7:13:81:
                    eb:f7:fd:ee:51:33:a6:82:84:db:f7:c2:02:a9:4b:
                    29:cc:03:0a:9b:ce:89:0f:d7:70:be:39:6f:11:2d:
                    2a:b4:1d:41:fd:a9:11:93:c7:69:e8:62:0d:11:08:
                    d8:13:c9:ff:53:0d:b4:a0:2c:7d:36:43:e2:1d:c9:
                    0b:19:73:75:0d:34:4e:a5:af:d0:96:ec:39:e5:27:
                    83:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:14:34:A4:A7:0E:74:C8:F8:21:F6:7A:80:95:68:C8:E4:94:AC:D5
            X509v3 Authority Key Identifier:
                keyid:5F:ED:2A:FC:A7:C9:FB:DE:AC:83:52:7A:15:BE:54:7D:7B:63:C2:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/326130613a363034343a623330303a3a2f34382d3438203d3e20323134383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b300::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:4c:d2:b8:39:a7:5a:f6:35:9b:7f:68:09:7d:c2:92:4f:ab:
         26:e2:82:42:26:13:50:df:64:c1:91:ed:57:e9:5a:03:3d:9b:
         b3:cf:95:0d:2e:21:8d:90:f8:69:5f:44:b3:56:18:2d:8a:b8:
         9d:ea:87:c3:9f:dd:34:66:c8:d1:be:47:3a:f5:04:af:0b:62:
         54:e4:04:a6:c6:f5:2a:bf:10:13:bd:56:17:7a:38:41:52:b3:
         94:85:f2:04:22:0a:89:35:97:bd:6e:51:47:95:17:16:35:0f:
         47:6a:c8:31:95:6a:bd:67:59:23:33:b1:97:4d:de:42:73:d7:
         97:99:e9:c1:17:8e:70:b4:0f:7d:b8:84:b1:52:e3:ef:da:60:
         f0:10:e4:c8:d0:e3:65:ae:bc:6d:3e:e5:0a:be:27:34:de:33:
         4e:94:4c:f6:ff:bc:15:3c:34:12:f9:77:05:28:bd:9d:e2:0e:
         5f:d4:21:77:84:48:24:26:81:f8:0b:ee:b2:09:f4:d3:68:66:
         83:e0:1f:b8:cc:c2:cb:9b:f2:b4:68:40:f9:e7:a9:d5:9e:91:
         89:d6:b5:2b:4c:50:9d:e1:f1:13:ac:8e:b6:8b:74:be:20:33:
         c1:50:6b:8f:dc:89:8f:3e:83:de:23:0b:e3:03:94:80:de:33:
         41:5d:33:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----