Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/326130613a363034343a623330333a3a2f34382d3438203d3e20323134383039.roa
File:                     326130613a363034343a623330333a3a2f34382d3438203d3e20323134383039.roa (raw, json)
Hash identifier:          y60qRL6YkrXMacrjKgUuW1LtiAHED+5YcFo5rVqqFcI=
Subject key identifier:   E6:A4:1A:D0:C2:1D:F1:CF:D1:E9:22:4D:1F:A1:77:16:41:E3:88:B8
Certificate issuer:       /CN=5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296
Certificate serial:       1D22CB12751B2566080FB2DB38D72CFEE270BCF4
Authority key identifier: 5F:ED:2A:FC:A7:C9:FB:DE:AC:83:52:7A:15:BE:54:7D:7B:63:C2:96
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/326130613a363034343a623330333a3a2f34382d3438203d3e20323134383039.roa
Signing time:             Sun 11 Aug 2024 10:39:28 +0000
ROA not before:           Sun 11 Aug 2024 10:34:28 +0000
ROA not after:            Sun 10 Aug 2025 10:39:28 +0000
asID:                     214809
IP address blocks:        2a0a:6044:b303::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:22:cb:12:75:1b:25:66:08:0f:b2:db:38:d7:2c:fe:e2:70:bc:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296
        Validity
            Not Before: Aug 11 10:34:28 2024 GMT
            Not After : Aug 10 10:39:28 2025 GMT
        Subject: CN=E6A41AD0C21DF1CFD1E9224D1FA1771641E388B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c6:20:e3:e6:17:8a:47:7c:7e:c7:9d:14:1c:
                    4a:d6:b0:91:d7:87:80:16:96:38:60:e5:67:9c:dd:
                    4a:df:f2:be:1f:37:b7:44:89:7d:e1:ad:80:e1:dd:
                    cd:1c:0f:5a:fd:1a:f2:a9:b1:be:1e:9e:66:47:00:
                    ba:7b:20:68:76:4d:9e:06:d3:ee:e9:f0:ec:75:a9:
                    69:f1:e0:02:1a:52:74:2e:f2:45:96:8b:5f:34:40:
                    b5:f8:85:ef:96:09:ba:35:0a:56:44:70:8a:48:4e:
                    b7:74:99:07:fc:5a:69:ea:f3:e8:0b:c9:90:c0:df:
                    53:82:87:1b:7a:44:df:b5:f8:7c:77:46:fd:61:8f:
                    6e:85:25:b0:f6:69:25:1f:1f:f4:d4:b5:43:bc:aa:
                    cc:2b:7c:0f:ab:8f:d8:52:07:f8:9f:9d:06:be:79:
                    25:b2:08:ec:3b:34:88:0e:65:d3:78:6e:00:77:85:
                    18:2c:4b:ff:c4:6b:c6:3a:dd:46:86:13:99:f4:71:
                    5c:95:1e:ef:18:80:02:80:80:88:52:cf:43:5d:90:
                    49:b8:8f:20:bf:1b:cc:ce:77:fc:5a:8a:df:69:60:
                    f5:27:cd:db:6c:8d:47:2f:ad:a6:61:a5:2d:68:db:
                    76:a1:12:7f:e7:ab:cd:69:06:a6:5f:a3:cb:fb:8a:
                    5a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A4:1A:D0:C2:1D:F1:CF:D1:E9:22:4D:1F:A1:77:16:41:E3:88:B8
            X509v3 Authority Key Identifier:
                keyid:5F:ED:2A:FC:A7:C9:FB:DE:AC:83:52:7A:15:BE:54:7D:7B:63:C2:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/326130613a363034343a623330333a3a2f34382d3438203d3e20323134383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b303::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:97:35:86:80:f3:b0:0d:c7:d9:d2:48:79:7d:af:8f:48:72:
         56:cb:91:30:9f:a4:92:2e:21:4e:d1:be:2d:8a:ec:5f:95:f6:
         81:20:47:0d:1e:5f:ef:99:6e:53:db:08:07:ea:39:10:a4:73:
         9b:6d:ce:55:1b:9b:e5:48:7c:37:f4:ac:2c:e8:33:1f:33:83:
         05:d7:df:a1:86:48:37:c8:75:b6:1a:c5:40:0c:ad:b8:62:53:
         35:89:fc:8f:a0:d7:50:fa:b7:56:39:7b:a9:88:44:bf:6c:41:
         00:cf:5b:45:38:78:50:f1:33:5f:2b:d1:ea:9b:7c:f4:e6:32:
         6a:0d:c4:4b:08:a0:a5:32:b4:dc:44:af:8e:a9:7c:73:ed:8f:
         0a:c6:3f:11:60:9c:9e:ce:9b:7a:4f:4f:7e:11:95:99:3d:63:
         b9:e4:ff:04:8e:0d:b5:1b:4b:ab:59:97:4b:27:21:f4:df:d6:
         16:9b:59:75:d0:0d:54:5f:91:1f:09:76:f4:0d:ad:44:0e:c3:
         d0:86:1c:3c:59:3f:01:52:bf:bc:bb:cb:7f:1b:69:0d:57:f0:
         67:07:15:b9:52:ad:c4:bf:3c:cf:a5:77:eb:ff:fd:12:67:94:
         73:2a:b2:1d:9a:5b:d5:8d:2a:60:20:33:eb:87:0d:0c:b1:61:
         7d:47:59:7f
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUHSLLEnUbJWYID7LbONcs/uJwvPQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZFRDJBRkNBN0M5RkJERUFDODM1MjdBMTVCRTU0N0Q3
QjYzQzI5NjAeFw0yNDA4MTExMDM0MjhaFw0yNTA4MTAxMDM5MjhaMDMxMTAvBgNV
BAMTKEU2QTQxQUQwQzIxREYxQ0ZEMUU5MjI0RDFGQTE3NzE2NDFFMzg4QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVxiDj5heKR3x+x50UHErWsJHX
h4AWljhg5Wec3Urf8r4fN7dEiX3hrYDh3c0cD1r9GvKpsb4enmZHALp7IGh2TZ4G
0+7p8Ox1qWnx4AIaUnQu8kWWi180QLX4he+WCbo1ClZEcIpITrd0mQf8Wmnq8+gL
yZDA31OChxt6RN+1+Hx3Rv1hj26FJbD2aSUfH/TUtUO8qswrfA+rj9hSB/ifnQa+
eSWyCOw7NIgOZdN4bgB3hRgsS//Ea8Y63UaGE5n0cVyVHu8YgAKAgIhSz0NdkEm4
jyC/G8zOd/xait9pYPUnzdtsjUcvraZhpS1o23ahEn/nq81pBqZfo8v7ilqVAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQU5qQa0MId8c/R6SJNH6F3FkHjiLgwHwYDVR0j
BBgwFoAUX+0q/KfJ+96sg1J6Fb5UfXtjwpYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjBjNzVkZjktNWI5Mi00OGMwLWJiZGEtYTQzYmQxOWVm
N2QzLzEvNUZFRDJBRkNBN0M5RkJERUFDODM1MjdBMTVCRTU0N0Q3QjYzQzI5Ni5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81RkVEMkFGQ0E3QzlGQkRFQUM4MzUyN0Ex
NUJFNTQ3RDdCNjNDMjk2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9iMGM3NWRmOS01YjkyLTQ4YzAtYmJkYS1hNDNiZDE5ZWY3ZDMvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTYyMzMzMDMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM0MzgzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRLMDMA0GCSqGSIb3DQEBCwUAA4IBAQBt
lzWGgPOwDcfZ0kh5fa+PSHJWy5Ewn6SSLiFO0b4tiuxflfaBIEcNHl/vmW5T2wgH
6jkQpHObbc5VG5vlSHw39Kws6DMfM4MF19+hhkg3yHW2GsVADK24YlM1ifyPoNdQ
+rdWOXupiES/bEEAz1tFOHhQ8TNfK9Hqm3z05jJqDcRLCKClMrTcRK+OqXxz7Y8K
xj8RYJyezpt6T09+EZWZPWO55P8Ejg21G0urWZdLJyH039YWm1l10A1UX5EfCXb0
Da1EDsPQhhw8WT8BUr+8u8t/G2kNV/BnBxW5Uq3EvzzPpXfr//0SZ5RzKrIdmlvV
jSpgIDPrhw0MsWF9R1l/
-----END CERTIFICATE-----