Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/326131343a373538313a373130303a3a2f34302d3430203d3e20313530333135.roa
File:                     326131343a373538313a373130303a3a2f34302d3430203d3e20313530333135.roa (raw, json)
Hash identifier:          BDbySONHBTFHr4ZJ8R/TKKzKBUQAw/1H/W9cHf9/wlQ=
Subject key identifier:   4D:BB:EC:44:B4:2D:BF:F9:A5:6B:11:3D:6B:1E:6D:C0:3B:DC:CA:DA
Certificate issuer:       /CN=AB1340E329CCD96287934FA706670D31B73C04E8
Certificate serial:       2F113677377860D3147826458C7AFCBBAB92E1DD
Authority key identifier: AB:13:40:E3:29:CC:D9:62:87:93:4F:A7:06:67:0D:31:B7:3C:04:E8
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AB1340E329CCD96287934FA706670D31B73C04E8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/326131343a373538313a373130303a3a2f34302d3430203d3e20313530333135.roa
Signing time:             Sat 18 May 2024 09:02:32 +0000
ROA not before:           Sat 18 May 2024 08:57:32 +0000
ROA not after:            Sat 17 May 2025 09:02:32 +0000
asID:                     150315
IP address blocks:        2a14:7581:7100::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:11:36:77:37:78:60:d3:14:78:26:45:8c:7a:fc:bb:ab:92:e1:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB1340E329CCD96287934FA706670D31B73C04E8
        Validity
            Not Before: May 18 08:57:32 2024 GMT
            Not After : May 17 09:02:32 2025 GMT
        Subject: CN=4DBBEC44B42DBFF9A56B113D6B1E6DC03BDCCADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fc:43:45:a3:d7:a7:c5:a3:93:7a:42:db:27:
                    5d:38:42:31:9c:c4:0c:e0:5e:12:67:15:33:51:4e:
                    34:c0:18:60:ca:82:a0:4a:4f:88:fa:4f:d6:6b:68:
                    be:67:f0:91:ea:b2:fe:49:81:ef:c3:22:40:a8:b2:
                    53:ad:6e:e5:0c:89:87:db:71:ad:4d:f9:79:0d:21:
                    12:f8:f7:3e:2e:60:02:a7:44:31:f6:9f:65:a6:0f:
                    cb:2a:77:bd:94:93:dc:07:6d:25:c4:ba:ab:e8:87:
                    8d:73:58:41:2d:5a:8f:fb:63:49:da:37:ec:7a:18:
                    05:79:5e:31:f2:84:b5:f1:70:32:4f:df:a5:1f:5a:
                    26:2a:7e:1e:d9:b8:f1:15:af:17:bc:89:48:4a:df:
                    eb:26:ad:fe:37:fa:7a:a5:e9:62:16:3b:c1:d3:31:
                    f7:3a:ff:34:13:6f:b9:db:bc:3a:7f:26:7d:1c:b1:
                    7b:f9:f5:04:62:50:54:cb:e1:04:3c:09:c9:5d:3e:
                    b9:fc:86:c8:aa:63:65:d6:9e:dc:75:06:5a:f6:ba:
                    70:ac:53:a0:9d:a9:20:fe:ee:67:0c:31:00:3f:4a:
                    0a:96:51:a2:e8:a3:19:f1:9f:2c:e9:27:b0:a1:b8:
                    5d:72:fc:e8:db:b7:e0:3d:f3:1d:38:78:3b:2e:a6:
                    7a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BB:EC:44:B4:2D:BF:F9:A5:6B:11:3D:6B:1E:6D:C0:3B:DC:CA:DA
            X509v3 Authority Key Identifier:
                keyid:AB:13:40:E3:29:CC:D9:62:87:93:4F:A7:06:67:0D:31:B7:3C:04:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/AB1340E329CCD96287934FA706670D31B73C04E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AB1340E329CCD96287934FA706670D31B73C04E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/326131343a373538313a373130303a3a2f34302d3430203d3e20313530333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:7100::/40

    Signature Algorithm: sha256WithRSAEncryption
         3d:a5:6a:28:40:55:43:f0:79:54:62:39:e8:55:07:dd:77:e6:
         1a:56:10:89:ab:0c:1a:48:29:18:2b:a0:5b:06:2c:88:b0:56:
         4c:fc:ba:f5:a9:e8:60:00:e3:8f:f0:f9:59:8f:31:47:e5:5e:
         14:b6:e0:26:76:2a:33:1f:9f:51:23:d4:49:a4:7b:82:29:9c:
         e4:77:08:75:b0:26:68:8d:4d:a9:a6:ca:c9:99:cf:0e:0e:49:
         3c:6e:ef:c6:36:fd:9c:5d:5a:bb:98:7c:a6:10:68:9b:cf:5a:
         f5:06:2c:e6:bc:5b:87:0b:5c:ce:45:01:4c:58:bd:34:e1:85:
         a0:70:d2:d0:f9:b4:1c:b9:75:a7:97:32:6c:97:2e:57:f2:6b:
         43:2f:e6:ab:87:21:d8:af:8d:fa:1e:bf:15:8d:fc:62:57:2a:
         64:e9:d4:b8:c8:54:c4:9b:92:a5:fa:1a:3e:3e:c7:88:23:58:
         b7:19:80:30:f9:62:5a:96:a1:33:36:a4:96:3d:10:1d:a9:4c:
         8f:be:b4:56:e3:ef:26:7c:4a:65:c7:ca:cb:9c:2a:60:03:00:
         b5:12:fc:96:4f:92:d2:69:95:70:00:a7:b0:1f:6a:19:df:7d:
         06:26:ac:17:26:1a:f9:ca:1a:64:68:5a:57:76:d4:ed:3b:7c:
         88:41:a4:51
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIULxE2dzd4YNMUeCZFjHr8u6uS4d0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUIxMzQwRTMyOUNDRDk2Mjg3OTM0RkE3MDY2NzBEMzFC
NzNDMDRFODAeFw0yNDA1MTgwODU3MzJaFw0yNTA1MTcwOTAyMzJaMDMxMTAvBgNV
BAMTKDREQkJFQzQ0QjQyREJGRjlBNTZCMTEzRDZCMUU2REMwM0JEQ0NBREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCD/ENFo9enxaOTekLbJ104QjGc
xAzgXhJnFTNRTjTAGGDKgqBKT4j6T9ZraL5n8JHqsv5Jge/DIkCoslOtbuUMiYfb
ca1N+XkNIRL49z4uYAKnRDH2n2WmD8sqd72Uk9wHbSXEuqvoh41zWEEtWo/7Y0na
N+x6GAV5XjHyhLXxcDJP36UfWiYqfh7ZuPEVrxe8iUhK3+smrf43+nql6WIWO8HT
Mfc6/zQTb7nbvDp/Jn0csXv59QRiUFTL4QQ8CcldPrn8hsiqY2XWntx1Blr2unCs
U6CdqSD+7mcMMQA/SgqWUaLooxnxnyzpJ7ChuF1y/Ojbt+A98x04eDsupnpRAgMB
AAGjggKEMIICgDAdBgNVHQ4EFgQUTbvsRLQtv/mlaxE9ax5twDvcytowHwYDVR0j
BBgwFoAUqxNA4ynM2WKHk0+nBmcNMbc8BOgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzU4NDc5ZGYtZjViNy00NDUzLTkyYmYtZGUxZjYxYjNk
NGIwLzEvQUIxMzQwRTMyOUNDRDk2Mjg3OTM0RkE3MDY2NzBEMzFCNzNDMDRFOC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BQjEzNDBFMzI5Q0NEOTYyODc5MzRGQTcw
NjY3MEQzMUI3M0MwNEU4LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9jNTg0NzlkZi1mNWI3LTQ0NTMtOTJiZi1kZTFmNjFiM2Q0YjAvMS8zMjYxMzEz
NDNhMzczNTM4MzEzYTM3MzEzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzEz
NTMwMzMzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1gXEwDQYJKoZIhvcNAQELBQADggEBAD2l
aihAVUPweVRiOehVB9135hpWEImrDBpIKRgroFsGLIiwVkz8uvWp6GAA44/w+VmP
MUflXhS24CZ2KjMfn1Ej1Emke4IpnOR3CHWwJmiNTammysmZzw4OSTxu78Y2/Zxd
WruYfKYQaJvPWvUGLOa8W4cLXM5FAUxYvTThhaBw0tD5tBy5daeXMmyXLlfya0Mv
5quHIdivjfoevxWN/GJXKmTp1LjIVMSbkqX6Gj4+x4gjWLcZgDD5YlqWoTM2pJY9
EB2pTI++tFbj7yZ8SmXHysucKmADALUS/JZPktJplXAAp7AfahnffQYmrBcmGvnK
GmRoWld21O07fIhBpFE=
-----END CERTIFICATE-----