Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/326130373a353463313a333830303a3a2f34382d3438203d3e20323136333034.roa
File:                     326130373a353463313a333830303a3a2f34382d3438203d3e20323136333034.roa (raw, json)
Hash identifier:          I619WFYXl6rGHPeFloAP3p4zyAYfQoHtr7SwS6FPheE=
Subject key identifier:   85:FF:73:37:69:D5:33:D9:20:3F:C2:09:6C:35:63:13:14:8A:4B:3E
Certificate issuer:       /CN=CEE50F8654426B5A60EE8C52A9AE958F8D77B848
Certificate serial:       3BFE91D134729F9ACFB6C79996B62E27C284531B
Authority key identifier: CE:E5:0F:86:54:42:6B:5A:60:EE:8C:52:A9:AE:95:8F:8D:77:B8:48
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/326130373a353463313a333830303a3a2f34382d3438203d3e20323136333034.roa
Signing time:             Fri 22 Sep 2023 17:51:40 +0000
ROA not before:           Fri 22 Sep 2023 17:46:40 +0000
ROA not after:            Fri 20 Sep 2024 17:51:40 +0000
asID:                     216304
IP address blocks:        2a07:54c1:3800::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:fe:91:d1:34:72:9f:9a:cf:b6:c7:99:96:b6:2e:27:c2:84:53:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEE50F8654426B5A60EE8C52A9AE958F8D77B848
        Validity
            Not Before: Sep 22 17:46:40 2023 GMT
            Not After : Sep 20 17:51:40 2024 GMT
        Subject: CN=85FF733769D533D9203FC2096C356313148A4B3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:96:c3:b3:21:b1:79:a1:07:54:c3:c2:19:eb:
                    96:3d:7e:61:5d:0e:e3:0e:92:70:2d:c5:fa:86:ed:
                    88:cd:c6:aa:0b:ca:14:7d:57:4d:b6:a3:a3:72:c5:
                    a7:8c:98:ca:4b:19:9b:15:01:7c:04:5e:5d:0c:d7:
                    69:c9:22:fc:57:cf:47:0d:65:f8:b7:7c:76:c2:0b:
                    75:53:da:47:f8:ea:0c:1f:fc:e0:b1:5b:6f:47:ec:
                    36:70:c8:65:b3:88:55:23:2e:15:29:42:86:62:ae:
                    0f:9f:84:ae:d0:03:d6:7d:5e:9e:fe:5f:14:5e:99:
                    c7:a4:15:8e:50:8c:b0:f6:db:0c:72:28:7c:22:4e:
                    fe:b6:a0:ec:9e:de:57:89:2e:a2:ff:b3:1a:d3:8d:
                    14:06:02:9e:41:bc:f9:3d:25:24:06:55:7a:87:6f:
                    ef:13:b8:bd:13:90:f5:e2:23:97:c4:61:a0:3a:aa:
                    d6:bf:eb:0e:17:ff:1e:47:fa:e5:47:01:55:f3:0f:
                    54:f4:cf:c4:25:31:b8:0d:72:61:8b:34:36:70:61:
                    ab:35:38:82:43:fc:89:70:73:79:68:ff:31:b1:28:
                    53:4a:e3:36:86:07:42:a1:c3:86:77:75:ed:f9:21:
                    eb:c9:5b:d4:4f:b2:71:27:bb:e4:ac:f2:84:3f:2c:
                    b3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FF:73:37:69:D5:33:D9:20:3F:C2:09:6C:35:63:13:14:8A:4B:3E
            X509v3 Authority Key Identifier:
                keyid:CE:E5:0F:86:54:42:6B:5A:60:EE:8C:52:A9:AE:95:8F:8D:77:B8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/326130373a353463313a333830303a3a2f34382d3438203d3e20323136333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:3800::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:47:8e:42:c1:7c:18:fd:52:2c:43:bb:96:52:c0:3d:bf:f2:
         04:d5:8e:39:2a:cd:05:f2:a6:c3:a6:c9:bc:b0:b4:86:d9:b0:
         c6:38:52:b4:32:8c:fe:ed:eb:37:41:a7:4d:c9:f8:bf:23:71:
         f9:39:7f:a1:a9:13:d9:4c:be:40:50:12:68:8f:1e:1e:9c:20:
         9d:f9:ff:75:3a:72:f3:02:8c:04:2c:fb:7e:5a:a1:5f:8d:b9:
         fc:41:b4:50:ec:29:89:7e:54:6f:de:f1:85:e4:3c:18:21:90:
         e3:5d:f7:04:a4:90:4c:06:26:d6:87:74:dc:e1:d5:06:5f:ad:
         61:c2:64:7e:97:c0:e6:ea:b8:e5:5a:a2:40:a3:39:0d:69:e1:
         ac:83:4c:cb:18:95:9d:99:9a:2a:ca:f5:d0:f9:f6:62:1f:94:
         ce:8b:c3:f3:fe:ed:6d:39:27:73:15:84:99:01:d7:37:23:a1:
         59:ec:51:21:99:c0:ec:b8:34:4d:c6:44:7d:f2:bf:f5:15:8d:
         d6:e4:85:a0:98:55:3a:7b:1b:64:16:dd:ea:64:c0:34:39:64:
         cd:a3:3e:55:98:5e:55:ad:a5:15:c1:39:d5:93:b1:7a:76:96:
         1f:68:ae:a9:45:ea:bc:14:f9:69:c2:39:c1:fa:c4:f9:a2:7d:
         1c:f0:c9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----