Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/326130613a363034343a623334313a3a2f34382d3438203d3e20323134313239.roa
File:                     326130613a363034343a623334313a3a2f34382d3438203d3e20323134313239.roa (raw, json)
Hash identifier:          B/LUVjHL/JlcqY3EadX5YBAv+WpRC18n92ryfWvzfQw=
Subject key identifier:   CD:ED:0A:14:AB:A8:0B:6B:9E:D9:E0:14:38:3C:78:EF:20:C5:69:D2
Certificate issuer:       /CN=5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296
Certificate serial:       7C81BF1F75DC6EB91744B61FE0E5E8796391A24F
Authority key identifier: 5F:ED:2A:FC:A7:C9:FB:DE:AC:83:52:7A:15:BE:54:7D:7B:63:C2:96
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/326130613a363034343a623334313a3a2f34382d3438203d3e20323134313239.roa
Signing time:             Sat 28 Sep 2024 10:09:05 +0000
ROA not before:           Sat 28 Sep 2024 10:04:05 +0000
ROA not after:            Sat 27 Sep 2025 10:09:05 +0000
asID:                     214129
IP address blocks:        2a0a:6044:b341::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:81:bf:1f:75:dc:6e:b9:17:44:b6:1f:e0:e5:e8:79:63:91:a2:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296
        Validity
            Not Before: Sep 28 10:04:05 2024 GMT
            Not After : Sep 27 10:09:05 2025 GMT
        Subject: CN=CDED0A14ABA80B6B9ED9E014383C78EF20C569D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d2:ca:31:c6:d4:6e:ad:a0:e8:ab:47:03:66:
                    a6:87:f1:fe:f4:4d:0b:ba:e3:3e:a3:a4:d9:ad:89:
                    66:19:36:3b:43:89:e9:12:08:a5:ab:57:a1:5a:30:
                    31:b5:b0:1c:66:c4:0a:06:3d:e1:ac:e9:d4:19:b9:
                    fc:ab:32:34:82:df:1d:ec:2e:88:71:41:88:a2:f1:
                    7e:46:5c:69:e2:d3:82:b4:44:50:9f:c2:84:35:82:
                    e9:0b:1e:b0:bc:77:c9:f8:d3:a1:9f:80:93:07:48:
                    ef:20:4f:59:15:76:a3:67:4e:bd:6e:71:e9:69:54:
                    8c:a1:23:35:90:90:f0:9f:83:d7:89:ab:46:ee:c8:
                    30:d6:ed:02:8d:08:3f:b3:1f:05:65:4f:41:e2:1a:
                    18:32:2e:a5:14:e5:eb:98:37:62:3e:8a:9a:c7:89:
                    64:86:b0:60:62:67:24:10:fb:83:8c:65:dd:11:e7:
                    ea:d9:d7:c4:87:0f:38:2f:3b:67:d4:d2:a9:02:5d:
                    b9:0f:47:a2:11:9c:4e:86:b7:72:57:16:c0:21:a8:
                    68:37:e9:bb:4f:64:38:dd:22:42:fb:ee:f2:73:a7:
                    c7:7c:a3:1d:ee:b2:09:72:e2:a5:3d:4a:17:71:9c:
                    57:b1:94:bf:c1:78:e5:f9:95:75:9a:d3:ad:52:ed:
                    89:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:ED:0A:14:AB:A8:0B:6B:9E:D9:E0:14:38:3C:78:EF:20:C5:69:D2
            X509v3 Authority Key Identifier:
                keyid:5F:ED:2A:FC:A7:C9:FB:DE:AC:83:52:7A:15:BE:54:7D:7B:63:C2:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/326130613a363034343a623334313a3a2f34382d3438203d3e20323134313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b341::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:0a:dd:c0:6a:1a:3b:83:fc:8d:5b:6a:00:35:dc:b1:1f:e4:
         70:06:90:fd:53:a1:4c:d4:ef:15:5d:7c:f4:d3:b2:99:fb:5c:
         79:33:5b:2b:fe:02:e7:c6:87:73:f9:42:6d:7c:3c:8c:ce:af:
         0a:eb:60:ef:a1:00:f1:10:94:fb:b2:67:64:5a:82:d5:ee:4f:
         cf:c1:d3:43:6a:cc:12:02:07:74:9f:c6:1e:73:b9:d5:07:bd:
         bf:0c:d2:b5:52:89:a9:47:41:09:5c:83:b7:ba:fb:9a:31:d5:
         34:3c:d1:8a:39:fb:41:bc:f6:6e:f2:b4:05:72:e1:85:65:7f:
         97:63:a1:15:97:e5:f5:d1:4f:51:42:b6:6e:52:23:12:f9:8d:
         9d:b7:bd:b0:6e:a6:93:f9:76:ef:1a:a3:7d:cf:88:9a:0a:37:
         90:b4:b5:1b:a2:35:f2:60:e2:32:9f:33:22:55:f5:76:6a:fc:
         47:26:e2:f6:21:bc:b1:ae:76:2a:b6:5e:13:c2:b9:fe:b8:d3:
         f0:68:3b:89:f4:28:12:16:c1:10:3b:89:52:26:07:92:ea:a8:
         26:75:51:e4:09:39:35:41:d4:19:ca:ef:0e:6e:ad:e9:d3:2b:
         64:98:92:71:1a:64:dc:0d:73:9b:1e:39:65:16:0b:3d:f2:f1:
         6b:58:63:18
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUfIG/H3XcbrkXRLYf4OXoeWORok8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZFRDJBRkNBN0M5RkJERUFDODM1MjdBMTVCRTU0N0Q3
QjYzQzI5NjAeFw0yNDA5MjgxMDA0MDVaFw0yNTA5MjcxMDA5MDVaMDMxMTAvBgNV
BAMTKENERUQwQTE0QUJBODBCNkI5RUQ5RTAxNDM4M0M3OEVGMjBDNTY5RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU0soxxtRuraDoq0cDZqaH8f70
TQu64z6jpNmtiWYZNjtDiekSCKWrV6FaMDG1sBxmxAoGPeGs6dQZufyrMjSC3x3s
LohxQYii8X5GXGni04K0RFCfwoQ1gukLHrC8d8n406GfgJMHSO8gT1kVdqNnTr1u
celpVIyhIzWQkPCfg9eJq0buyDDW7QKNCD+zHwVlT0HiGhgyLqUU5euYN2I+iprH
iWSGsGBiZyQQ+4OMZd0R5+rZ18SHDzgvO2fU0qkCXbkPR6IRnE6Gt3JXFsAhqGg3
6btPZDjdIkL77vJzp8d8ox3usgly4qU9ShdxnFexlL/BeOX5lXWa061S7YkpAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUze0KFKuoC2ue2eAUODx47yDFadIwHwYDVR0j
BBgwFoAUX+0q/KfJ+96sg1J6Fb5UfXtjwpYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjBjNzVkZjktNWI5Mi00OGMwLWJiZGEtYTQzYmQxOWVm
N2QzLzEvNUZFRDJBRkNBN0M5RkJERUFDODM1MjdBMTVCRTU0N0Q3QjYzQzI5Ni5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81RkVEMkFGQ0E3QzlGQkRFQUM4MzUyN0Ex
NUJFNTQ3RDdCNjNDMjk2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9iMGM3NWRmOS01YjkyLTQ4YzAtYmJkYS1hNDNiZDE5ZWY3ZDMvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTYyMzMzNDMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM0MzEzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRLNBMA0GCSqGSIb3DQEBCwUAA4IBAQAX
Ct3Aaho7g/yNW2oANdyxH+RwBpD9U6FM1O8VXXz007KZ+1x5M1sr/gLnxodz+UJt
fDyMzq8K62DvoQDxEJT7smdkWoLV7k/PwdNDaswSAgd0n8Yec7nVB72/DNK1Uomp
R0EJXIO3uvuaMdU0PNGKOftBvPZu8rQFcuGFZX+XY6EVl+X10U9RQrZuUiMS+Y2d
t72wbqaT+XbvGqN9z4iaCjeQtLUbojXyYOIynzMiVfV2avxHJuL2IbyxrnYqtl4T
wrn+uNPwaDuJ9CgSFsEQO4lSJgeS6qgmdVHkCTk1QdQZyu8Obq3p0ytkmJJxGmTc
DXObHjllFgs98vFrWGMY
-----END CERTIFICATE-----