Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa
File:                     326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (raw, json)
Hash identifier:          AF+Ua5qWjlXSmRcISzVN1U/rrOe/cIos4w3BIP5f38s=
Subject key identifier:   69:E5:E1:F3:E8:B7:15:A2:F0:A8:4B:02:6F:04:D0:8D:CE:56:CD:A1
Certificate issuer:       /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
Certificate serial:       15E42E5FA82AACC5F2769361D17562C4AED175C8
Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa
Signing time:             Wed 26 Jun 2024 09:51:30 +0000
ROA not before:           Wed 26 Jun 2024 09:46:30 +0000
ROA not after:            Wed 25 Jun 2025 09:51:30 +0000
asID:                     63473
IP address blocks:        2a14:7581:d200::/40 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e4:2e:5f:a8:2a:ac:c5:f2:76:93:61:d1:75:62:c4:ae:d1:75:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
        Validity
            Not Before: Jun 26 09:46:30 2024 GMT
            Not After : Jun 25 09:51:30 2025 GMT
        Subject: CN=69E5E1F3E8B715A2F0A84B026F04D08DCE56CDA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:93:30:44:e1:09:4c:91:3f:0a:6e:de:35:88:
                    a5:57:01:cd:e8:0a:d5:f6:eb:12:4c:8d:bf:e6:9a:
                    cb:d6:fc:80:2d:ca:3e:4d:3b:53:8d:b2:2d:3c:2e:
                    b1:70:42:c5:10:5a:4c:ca:bd:72:7d:16:6b:24:bc:
                    81:5d:ea:30:9c:d1:28:e0:16:12:34:43:16:fd:e0:
                    cb:bb:fd:0d:5e:17:0c:e5:b4:48:2f:48:b1:40:7d:
                    79:27:98:c2:46:c6:bf:3d:22:1e:67:31:77:fb:2f:
                    09:0b:28:82:09:6d:8e:21:aa:ec:07:66:2e:e8:29:
                    b9:71:ff:44:7b:ee:da:3c:f2:5b:18:d3:d9:d2:f8:
                    fd:f1:22:61:7c:c1:dc:be:2d:cb:c9:09:37:a4:66:
                    1c:f3:94:dc:d4:c9:b3:df:2d:30:12:c5:ca:47:5f:
                    d6:12:2f:f3:a9:26:f2:66:5f:1d:c1:8c:7d:6b:b2:
                    2e:45:73:fc:e2:ec:69:6c:d0:80:76:4b:9e:b9:f7:
                    7d:b7:9a:31:53:da:0b:4c:c2:43:d8:f9:47:c1:ba:
                    4c:d9:46:16:b4:a4:c8:c6:ba:a0:22:f1:e7:b9:2d:
                    d6:e1:89:5c:9b:7f:8b:11:30:31:7f:e6:62:10:80:
                    4d:ee:84:53:09:be:d3:aa:a6:bc:cf:6c:84:b1:f9:
                    6a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E5:E1:F3:E8:B7:15:A2:F0:A8:4B:02:6F:04:D0:8D:CE:56:CD:A1
            X509v3 Authority Key Identifier:
                keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:d200::/40

    Signature Algorithm: sha256WithRSAEncryption
         12:83:8b:63:7c:3d:f9:62:68:2e:9f:d1:fb:78:d1:5a:4d:ca:
         05:c0:3c:39:e9:37:fb:ca:2c:69:39:62:b7:3b:93:32:7b:1b:
         c2:f3:b0:04:66:4d:d7:4a:35:b8:74:11:bf:09:2d:9f:4e:4d:
         00:9c:39:b9:ad:a4:77:42:f6:38:8a:84:e9:5a:ab:cb:a1:dc:
         77:46:9e:80:1a:1e:1d:bb:14:c8:aa:98:ee:27:43:e9:2f:ec:
         ac:5f:68:c9:02:e0:64:72:32:29:cb:4a:f5:af:34:61:65:8a:
         12:0c:dd:3b:17:ac:ad:95:e6:b2:a5:f4:17:8d:3f:cc:f7:95:
         fc:ce:6a:2a:2d:e2:fa:b2:20:c6:ed:a6:0a:fc:a0:a2:8a:82:
         23:97:a2:bb:b3:f3:0e:0a:53:8f:4d:57:d0:c6:db:76:2a:c0:
         de:ea:4b:43:f1:18:26:48:17:df:88:f0:7e:63:0c:e0:39:1b:
         a4:68:a6:cb:02:82:27:a3:6a:8d:24:d2:f6:e4:70:46:ed:51:
         96:cb:0f:86:6c:18:04:56:3e:a9:b7:4e:ee:cc:c3:e5:98:f9:
         9f:21:a2:3e:40:0a:ee:45:3f:79:bf:cc:92:fe:aa:e6:50:46:
         5b:56:82:bc:2c:e1:e8:75:bf:b7:a8:b0:d5:dc:1b:17:a4:6c:
         0b:96:1a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----