Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/326130613a363034343a623330343a3a2f34382d3438203d3e20323134383039.roa
File:                     326130613a363034343a623330343a3a2f34382d3438203d3e20323134383039.roa (raw, json)
Hash identifier:          36sFTkHA7iYCuBujvT4EZGahnPirfRDG2zC9r0+Wbkg=
Subject key identifier:   83:52:6F:2F:AC:4D:FC:5B:C5:B6:A0:E1:3A:C3:79:0E:B8:88:6D:3B
Certificate issuer:       /CN=5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296
Certificate serial:       6A1058BD207F1703BC089500E96DF2270D0C57DE
Authority key identifier: 5F:ED:2A:FC:A7:C9:FB:DE:AC:83:52:7A:15:BE:54:7D:7B:63:C2:96
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/326130613a363034343a623330343a3a2f34382d3438203d3e20323134383039.roa
Signing time:             Sun 11 Aug 2024 10:39:30 +0000
ROA not before:           Sun 11 Aug 2024 10:34:30 +0000
ROA not after:            Sun 10 Aug 2025 10:39:30 +0000
asID:                     214809
IP address blocks:        2a0a:6044:b304::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:10:58:bd:20:7f:17:03:bc:08:95:00:e9:6d:f2:27:0d:0c:57:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296
        Validity
            Not Before: Aug 11 10:34:30 2024 GMT
            Not After : Aug 10 10:39:30 2025 GMT
        Subject: CN=83526F2FAC4DFC5BC5B6A0E13AC3790EB8886D3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cb:32:e5:6b:ee:d8:1c:f1:da:f2:95:70:7d:
                    b1:fd:92:64:b4:c1:56:fb:27:05:00:bf:45:8a:49:
                    0a:89:b1:9f:ff:e6:eb:41:38:18:0b:fb:08:78:4e:
                    75:4c:53:f6:92:8d:54:53:01:aa:f4:63:28:09:6b:
                    9f:2e:ca:68:9e:4c:cf:cf:3a:4c:0a:18:57:8b:a0:
                    2e:db:7d:c5:87:6d:4a:25:cb:72:ec:59:a2:d7:ea:
                    05:45:a7:04:b0:fb:db:fc:f9:f8:ce:82:fe:7c:5c:
                    df:51:6e:17:b5:54:b2:f7:63:b5:44:c8:93:36:5b:
                    8b:55:d4:e1:4e:63:f4:6e:d5:7c:0a:67:f9:88:b1:
                    88:27:28:e1:2c:99:56:88:f0:57:22:a6:92:61:1a:
                    bb:08:cc:04:1f:f0:87:72:7c:ed:bb:c5:0b:ba:0c:
                    0b:68:1b:70:d6:1a:89:8d:79:44:d0:62:25:0e:46:
                    7a:e8:ce:d1:f4:ae:86:8d:9b:25:f6:af:a0:1b:39:
                    08:bf:5a:34:e2:f7:b9:82:39:c5:dc:b6:80:62:fc:
                    d4:db:f3:c5:3d:18:62:46:b9:f6:aa:53:6f:f0:ef:
                    cd:cf:b5:e1:11:f5:4c:fa:70:89:4c:36:01:ae:60:
                    79:77:96:58:b4:c4:16:c1:0f:5d:25:53:88:08:6b:
                    cf:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:52:6F:2F:AC:4D:FC:5B:C5:B6:A0:E1:3A:C3:79:0E:B8:88:6D:3B
            X509v3 Authority Key Identifier:
                keyid:5F:ED:2A:FC:A7:C9:FB:DE:AC:83:52:7A:15:BE:54:7D:7B:63:C2:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/326130613a363034343a623330343a3a2f34382d3438203d3e20323134383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b304::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:41:13:5d:8c:fc:6a:fd:a2:37:a9:f1:11:a3:0a:2b:9b:ab:
         83:26:bf:8a:b8:aa:d3:7f:53:73:9f:e3:49:12:c1:89:df:20:
         62:e9:62:72:37:c4:42:fc:c0:45:4c:1e:f1:8b:ac:a1:6f:0e:
         9b:b4:8e:29:4f:8f:f5:86:7b:16:33:97:f0:73:48:64:bf:32:
         71:8d:5f:fd:78:29:6e:cb:11:24:04:c7:82:0a:68:45:35:2a:
         e1:05:d3:83:2b:44:d0:32:bd:e2:e9:05:5c:98:bc:6c:05:8e:
         7c:94:b9:89:e5:95:d0:7f:08:82:f8:88:9e:8e:e2:ee:71:97:
         bc:f8:2f:e6:3d:73:5e:23:1e:b7:31:21:d6:95:88:2c:01:a9:
         40:ff:b7:f1:57:2c:e5:13:a1:49:f3:85:65:dc:8c:6c:55:ee:
         22:15:ca:6d:6d:32:46:35:09:e5:6d:cd:14:b2:36:5a:3f:8d:
         67:ca:e4:59:25:98:dd:8d:b5:9e:2c:5d:68:3f:b7:46:97:e6:
         62:2d:4e:13:03:e6:8d:a6:b4:8a:58:8e:13:20:ae:5b:5b:18:
         be:e0:fa:64:10:54:f4:4c:f5:21:93:91:c4:b1:10:14:1e:24:
         11:a7:09:4a:bc:0f:ce:68:a8:04:5d:8e:d2:3c:68:d4:cc:d3:
         62:a1:71:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----