Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/326130613a363034343a623330363a3a2f34382d3438203d3e20323134383039.roa
File:                     326130613a363034343a623330363a3a2f34382d3438203d3e20323134383039.roa (raw, json)
Hash identifier:          TzJN1X2FOCce+SkkexRDtfFG7ADcyyQDWuCuzB6f8Qs=
Subject key identifier:   38:73:3E:B5:76:16:A3:91:2D:F6:09:62:7A:35:6B:7F:62:FD:C8:8B
Certificate issuer:       /CN=5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296
Certificate serial:       67DFD2F201BAB3B3D10A1F47AFD1484A653B0CCC
Authority key identifier: 5F:ED:2A:FC:A7:C9:FB:DE:AC:83:52:7A:15:BE:54:7D:7B:63:C2:96
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/326130613a363034343a623330363a3a2f34382d3438203d3e20323134383039.roa
Signing time:             Sun 11 Aug 2024 10:39:34 +0000
ROA not before:           Sun 11 Aug 2024 10:34:34 +0000
ROA not after:            Sun 10 Aug 2025 10:39:34 +0000
asID:                     214809
IP address blocks:        2a0a:6044:b306::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:df:d2:f2:01:ba:b3:b3:d1:0a:1f:47:af:d1:48:4a:65:3b:0c:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296
        Validity
            Not Before: Aug 11 10:34:34 2024 GMT
            Not After : Aug 10 10:39:34 2025 GMT
        Subject: CN=38733EB57616A3912DF609627A356B7F62FDC88B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:59:74:d2:e5:98:23:3d:74:6a:bd:58:69:b5:
                    a1:60:f8:db:a9:b1:30:10:29:4f:11:67:76:e6:af:
                    56:d7:8c:3e:62:f9:14:57:d6:9c:5c:d8:45:2c:00:
                    ed:ed:da:52:1d:01:20:a9:36:a7:aa:84:8f:87:f5:
                    98:3f:6a:a4:b6:52:e6:c3:d1:69:b6:42:99:a0:2a:
                    86:d5:42:ea:1a:64:2f:2b:c4:78:1a:84:27:90:2c:
                    b6:ec:05:88:8a:34:80:17:6d:63:a2:3a:61:4c:b8:
                    45:ca:17:13:07:09:39:cb:80:d9:15:ec:ba:05:5a:
                    64:2e:b6:18:62:d1:de:ef:59:cf:78:61:02:4b:8d:
                    2e:48:74:ec:1e:6d:3e:05:56:2d:55:aa:15:02:c0:
                    8d:37:e3:22:35:8a:f4:7c:e4:fc:f4:2c:e3:e3:4a:
                    86:51:59:aa:e2:2b:cf:a9:c5:aa:b3:a3:97:3c:8a:
                    44:4f:e0:be:0f:8e:d5:49:cc:66:60:24:29:40:7b:
                    b3:a9:c9:51:13:ed:79:7e:c4:c2:ab:11:41:68:84:
                    8f:51:c0:a3:1f:25:66:de:58:ee:7d:96:cd:da:4c:
                    a9:75:6c:e7:32:22:e1:93:d9:89:5d:e1:4e:6f:b4:
                    f2:86:a9:fe:b3:30:b1:f1:18:e4:04:3d:5e:9a:57:
                    7c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:73:3E:B5:76:16:A3:91:2D:F6:09:62:7A:35:6B:7F:62:FD:C8:8B
            X509v3 Authority Key Identifier:
                keyid:5F:ED:2A:FC:A7:C9:FB:DE:AC:83:52:7A:15:BE:54:7D:7B:63:C2:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/326130613a363034343a623330363a3a2f34382d3438203d3e20323134383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b306::/48

    Signature Algorithm: sha256WithRSAEncryption
         db:a8:66:16:bc:0f:1e:5e:b9:9d:81:2e:50:17:14:62:ef:32:
         12:8e:33:73:ea:4a:ba:2c:6f:18:96:4c:e2:a0:e6:16:41:73:
         7c:5b:a1:66:64:bf:cb:6f:c5:91:9a:60:f9:90:9e:9a:9c:ca:
         53:22:ab:b6:55:d3:1d:74:4a:05:a9:d7:f3:37:84:bf:c6:d2:
         53:1c:6d:76:03:bb:af:b0:79:5d:13:21:87:50:ab:ac:f4:8a:
         44:5f:d2:fa:1a:1e:61:f6:1c:9c:11:c2:32:2a:6d:dc:ad:41:
         a4:d5:33:1a:3d:cb:24:07:8a:15:c8:0e:3a:2c:1e:61:65:bc:
         0b:55:61:f7:40:53:2e:a9:6c:da:d1:1a:f0:22:e6:89:96:f4:
         96:87:8f:bc:3a:4c:09:5d:e9:d5:b5:1e:c5:0f:30:ac:fa:56:
         40:64:c8:eb:4c:53:c4:6a:dd:97:ad:c0:db:b3:42:d2:1b:91:
         d0:57:70:37:89:4a:03:da:af:2a:a0:4a:fb:c6:5b:25:f3:9f:
         5e:66:3a:4c:75:21:e0:48:d8:59:7e:cf:c5:b0:9a:17:d2:6e:
         a2:2a:cb:a9:c2:77:22:48:1f:9d:e9:d6:33:a6:a2:19:09:07:
         33:6e:56:8a:4a:4c:b7:c9:8c:ea:58:a6:59:5e:47:57:0c:f2:
         ac:25:a3:62
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUZ9/S8gG6s7PRCh9Hr9FISmU7DMwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZFRDJBRkNBN0M5RkJERUFDODM1MjdBMTVCRTU0N0Q3
QjYzQzI5NjAeFw0yNDA4MTExMDM0MzRaFw0yNTA4MTAxMDM5MzRaMDMxMTAvBgNV
BAMTKDM4NzMzRUI1NzYxNkEzOTEyREY2MDk2MjdBMzU2QjdGNjJGREM4OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChWXTS5ZgjPXRqvVhptaFg+Nup
sTAQKU8RZ3bmr1bXjD5i+RRX1pxc2EUsAO3t2lIdASCpNqeqhI+H9Zg/aqS2UubD
0Wm2QpmgKobVQuoaZC8rxHgahCeQLLbsBYiKNIAXbWOiOmFMuEXKFxMHCTnLgNkV
7LoFWmQuthhi0d7vWc94YQJLjS5IdOwebT4FVi1VqhUCwI034yI1ivR85Pz0LOPj
SoZRWariK8+pxaqzo5c8ikRP4L4PjtVJzGZgJClAe7OpyVET7Xl+xMKrEUFohI9R
wKMfJWbeWO59ls3aTKl1bOcyIuGT2Yld4U5vtPKGqf6zMLHxGOQEPV6aV3zdAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUOHM+tXYWo5Et9gliejVrf2L9yIswHwYDVR0j
BBgwFoAUX+0q/KfJ+96sg1J6Fb5UfXtjwpYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjBjNzVkZjktNWI5Mi00OGMwLWJiZGEtYTQzYmQxOWVm
N2QzLzEvNUZFRDJBRkNBN0M5RkJERUFDODM1MjdBMTVCRTU0N0Q3QjYzQzI5Ni5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81RkVEMkFGQ0E3QzlGQkRFQUM4MzUyN0Ex
NUJFNTQ3RDdCNjNDMjk2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9iMGM3NWRmOS01YjkyLTQ4YzAtYmJkYS1hNDNiZDE5ZWY3ZDMvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTYyMzMzMDM2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM0MzgzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRLMGMA0GCSqGSIb3DQEBCwUAA4IBAQDb
qGYWvA8eXrmdgS5QFxRi7zISjjNz6kq6LG8YlkzioOYWQXN8W6FmZL/Lb8WRmmD5
kJ6anMpTIqu2VdMddEoFqdfzN4S/xtJTHG12A7uvsHldEyGHUKus9IpEX9L6Gh5h
9hycEcIyKm3crUGk1TMaPcskB4oVyA46LB5hZbwLVWH3QFMuqWza0RrwIuaJlvSW
h4+8OkwJXenVtR7FDzCs+lZAZMjrTFPEat2XrcDbs0LSG5HQV3A3iUoD2q8qoEr7
xlsl859eZjpMdSHgSNhZfs/FsJoX0m6iKsupwnciSB+d6dYzpqIZCQczblaKSky3
yYzqWKZZXkdXDPKsJaNi
-----END CERTIFICATE-----