Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/326131343a373538313a373230303a3a2f34302d3430203d3e20323132383935.roa
File:                     326131343a373538313a373230303a3a2f34302d3430203d3e20323132383935.roa (raw, json)
Hash identifier:          5RvQ11zqA87nSkgET1/LZB/8q01ICMdccwFzuDSJAMA=
Subject key identifier:   2C:4A:8E:42:B0:B7:95:C3:3B:77:56:13:62:6F:64:AA:63:B0:87:11
Certificate issuer:       /CN=AB1340E329CCD96287934FA706670D31B73C04E8
Certificate serial:       6FFDD9BEADCF834EC970DCFA120E88984885BF45
Authority key identifier: AB:13:40:E3:29:CC:D9:62:87:93:4F:A7:06:67:0D:31:B7:3C:04:E8
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AB1340E329CCD96287934FA706670D31B73C04E8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/326131343a373538313a373230303a3a2f34302d3430203d3e20323132383935.roa
Signing time:             Sun 07 Jul 2024 20:10:40 +0000
ROA not before:           Sun 07 Jul 2024 20:05:40 +0000
ROA not after:            Sun 06 Jul 2025 20:10:40 +0000
asID:                     212895
IP address blocks:        2a14:7581:7200::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:fd:d9:be:ad:cf:83:4e:c9:70:dc:fa:12:0e:88:98:48:85:bf:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB1340E329CCD96287934FA706670D31B73C04E8
        Validity
            Not Before: Jul  7 20:05:40 2024 GMT
            Not After : Jul  6 20:10:40 2025 GMT
        Subject: CN=2C4A8E42B0B795C33B775613626F64AA63B08711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:72:19:cb:71:06:44:c4:24:dc:ae:ca:eb:a1:
                    4c:8f:6d:29:2e:00:85:7a:84:b9:1c:c0:d2:18:a7:
                    c3:ae:3e:a3:ab:6e:40:00:44:4d:d0:5a:4d:18:d8:
                    d1:71:52:05:3f:2f:95:72:02:79:d2:b4:dc:e7:7e:
                    81:89:5e:d5:05:0c:b0:8d:83:37:1a:b9:87:7a:b6:
                    c2:16:bc:96:92:11:15:3b:c6:73:ca:bb:7e:a1:3d:
                    a3:d2:26:2e:e3:7f:3d:07:54:ce:47:27:b1:80:9c:
                    e7:57:e5:d0:dd:38:f1:66:49:17:9d:8e:62:bb:02:
                    53:5b:d9:6c:49:43:ed:a6:ad:5d:9b:63:dc:a9:ba:
                    ba:c1:f1:cc:07:dd:53:a3:04:ee:17:e0:c0:5f:54:
                    29:9d:f2:d8:bd:3b:31:bb:10:e3:e9:ac:f0:1e:97:
                    ba:7c:13:a9:2a:65:65:92:0a:7b:04:50:c1:9b:18:
                    08:5d:ec:5e:b8:18:36:50:83:9c:c4:32:65:18:d1:
                    f7:a5:98:7f:7b:a0:da:25:6f:35:d0:b2:71:d8:d7:
                    c5:73:37:cb:28:a6:ba:f8:d3:8c:83:c5:aa:52:08:
                    38:60:a8:15:de:3f:0d:f2:65:29:a0:1d:ca:c8:18:
                    7e:06:d1:d5:66:61:3e:c4:d7:51:5e:56:1d:e9:51:
                    4d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4A:8E:42:B0:B7:95:C3:3B:77:56:13:62:6F:64:AA:63:B0:87:11
            X509v3 Authority Key Identifier:
                keyid:AB:13:40:E3:29:CC:D9:62:87:93:4F:A7:06:67:0D:31:B7:3C:04:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/AB1340E329CCD96287934FA706670D31B73C04E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AB1340E329CCD96287934FA706670D31B73C04E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/326131343a373538313a373230303a3a2f34302d3430203d3e20323132383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:7200::/40

    Signature Algorithm: sha256WithRSAEncryption
         2b:5e:7d:be:9c:0f:8a:d6:dd:53:70:cc:b2:e5:3c:c1:2c:9a:
         11:56:73:11:40:be:ca:a2:85:99:88:db:45:7d:cf:9a:aa:ac:
         ac:8e:28:b3:82:57:d9:9f:c5:2c:7e:4c:6c:a2:0d:ae:e8:82:
         10:e6:0c:c6:5d:84:8e:ce:43:2e:5d:c4:a6:91:0b:87:8b:22:
         db:4a:62:bf:42:32:d4:bc:9b:f2:42:5d:d4:f9:93:3d:3f:d3:
         4c:dc:9e:72:96:32:2d:e4:ad:9c:65:c9:38:3a:b7:ff:d9:2a:
         2a:6a:37:d8:97:ea:e3:6e:cf:fb:d9:9e:4b:7e:a0:e5:ae:6c:
         c5:e3:16:f5:9b:3d:e5:80:f2:4f:c8:1f:9a:99:fc:7c:a8:a3:
         f3:1d:b8:bf:38:da:12:5c:c1:69:40:8f:ad:69:86:eb:5d:7f:
         a1:9c:3f:b9:d6:ad:8d:49:07:1c:1e:c4:45:aa:a9:df:69:0a:
         ea:0c:64:aa:18:ff:eb:33:48:98:15:d6:2d:9f:38:00:f9:9d:
         87:4d:40:a8:c8:20:d1:27:be:a6:58:f0:c0:70:cf:5d:f4:da:
         b4:71:a1:f1:1f:14:57:fe:db:3a:a9:e3:4a:82:d7:cb:23:85:
         58:66:4a:00:48:77:71:79:60:18:94:1d:27:64:13:a3:c4:74:
         25:19:01:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----