Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/326130613a363034343a623366303a3a2f34342d3434203d3e20323134383039.roa
File:                     326130613a363034343a623366303a3a2f34342d3434203d3e20323134383039.roa (raw, json)
Hash identifier:          V/+56rCcPc3A99laM38cKVYDDfkDSP/xQZhiWBiz8fQ=
Subject key identifier:   08:52:AC:FD:69:E8:18:3D:74:BE:9D:FF:F3:2E:20:E6:43:25:1D:79
Certificate issuer:       /CN=5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296
Certificate serial:       4E5F1D638135D426A1A693A33E89BC3F1527D9B7
Authority key identifier: 5F:ED:2A:FC:A7:C9:FB:DE:AC:83:52:7A:15:BE:54:7D:7B:63:C2:96
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/326130613a363034343a623366303a3a2f34342d3434203d3e20323134383039.roa
Signing time:             Sun 11 Aug 2024 10:39:37 +0000
ROA not before:           Sun 11 Aug 2024 10:34:37 +0000
ROA not after:            Sun 10 Aug 2025 10:39:37 +0000
asID:                     214809
IP address blocks:        2a0a:6044:b3f0::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:5f:1d:63:81:35:d4:26:a1:a6:93:a3:3e:89:bc:3f:15:27:d9:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296
        Validity
            Not Before: Aug 11 10:34:37 2024 GMT
            Not After : Aug 10 10:39:37 2025 GMT
        Subject: CN=0852ACFD69E8183D74BE9DFFF32E20E643251D79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d3:2b:8d:a7:8a:d7:94:c6:4f:23:c9:0d:99:
                    f2:89:56:2f:b1:19:0f:66:d4:e6:96:c5:7b:77:ad:
                    90:53:69:f0:9f:b5:c0:88:29:f4:9f:1d:cd:e3:76:
                    a8:b1:ec:e4:51:2f:ec:16:c0:f9:11:2d:a0:2b:66:
                    ba:1a:a4:18:79:b9:0b:68:45:cf:89:f8:f0:0c:a0:
                    2b:e1:75:36:13:e9:28:e1:e0:ea:d8:ff:51:97:b7:
                    c1:bc:0e:9b:dc:fd:a8:34:bc:5f:43:29:b0:7e:c9:
                    3c:d5:32:ef:d9:6f:dc:e4:04:ba:a9:6c:fd:6b:63:
                    a0:e6:6c:e7:f6:d8:b8:3f:04:2a:1f:9a:55:6f:5e:
                    44:43:12:68:7a:0c:73:34:55:77:f5:1a:ca:9d:e9:
                    9c:bf:a4:fb:c6:b9:6b:27:c0:28:c6:a9:55:ee:f2:
                    80:eb:23:ca:28:3d:54:18:55:de:a7:0b:0e:b3:ad:
                    02:d4:cd:59:9e:02:7e:65:dc:9b:b0:a2:75:d6:e3:
                    af:b5:61:11:7f:cf:d5:ca:39:20:82:9f:f5:fb:51:
                    30:a2:78:66:32:7c:d4:f2:af:f7:55:f6:34:68:e9:
                    95:59:1a:df:46:9a:19:a8:16:92:82:b8:41:94:7e:
                    b5:7e:d9:80:9e:2d:42:87:3c:4f:6e:22:54:bd:f4:
                    5f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:52:AC:FD:69:E8:18:3D:74:BE:9D:FF:F3:2E:20:E6:43:25:1D:79
            X509v3 Authority Key Identifier:
                keyid:5F:ED:2A:FC:A7:C9:FB:DE:AC:83:52:7A:15:BE:54:7D:7B:63:C2:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/326130613a363034343a623366303a3a2f34342d3434203d3e20323134383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b3f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         74:61:5f:27:bb:e7:60:11:61:76:a6:45:bb:b8:71:92:f9:dc:
         bd:e2:8c:e1:7c:84:d9:dc:32:29:6c:a4:18:45:ec:00:cb:d6:
         e4:fe:92:6b:e3:96:3c:65:e6:fb:2d:43:5c:94:10:57:6c:f4:
         1b:fd:7c:03:2a:a8:ff:ff:d3:0d:56:4f:ad:58:2e:d1:99:b8:
         6a:6d:e0:2c:02:c7:59:56:d4:25:f9:47:2f:06:ce:af:e7:f8:
         e8:76:18:c5:80:81:f2:77:43:66:84:4a:0e:1a:b2:06:91:6d:
         89:69:0b:75:07:2b:dd:bf:7e:36:80:73:71:06:e7:e8:df:81:
         09:1e:1e:7f:fc:53:9f:e5:69:03:bd:7a:eb:dd:aa:85:97:97:
         12:a9:10:c4:e4:04:46:3e:b1:e5:26:31:aa:c5:ea:d9:13:ff:
         a8:c1:fb:33:26:85:86:1b:e5:b8:33:61:33:31:2a:0a:5e:84:
         81:63:1f:a7:6b:79:26:d7:e7:76:46:d0:4f:71:0e:61:66:d1:
         eb:7d:1e:ef:08:77:df:1e:87:93:6e:cd:06:b9:22:38:b4:70:
         ef:5d:e2:98:8d:bf:ec:39:17:d1:72:4e:fd:19:68:a8:20:07:
         49:35:0e:b6:17:de:d0:1e:56:71:70:8d:f2:2e:98:2a:18:16:
         47:8d:15:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----