Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/326131343a373538313a376130303a3a2f33392d3339203d3e203431303531.roa
File:                     326131343a373538313a376130303a3a2f33392d3339203d3e203431303531.roa (raw, json)
Hash identifier:          gjKJmUdyGSiubROOyDtzinRPjnlxeY9lwEKnz73F/m4=
Subject key identifier:   3D:45:E3:C8:8D:4E:3C:1C:75:47:E6:12:BB:60:B1:27:5C:2B:F1:EF
Certificate issuer:       /CN=AB1340E329CCD96287934FA706670D31B73C04E8
Certificate serial:       5227ECD3DCC53F0FBA7E23820834FFD981E9B89A
Authority key identifier: AB:13:40:E3:29:CC:D9:62:87:93:4F:A7:06:67:0D:31:B7:3C:04:E8
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AB1340E329CCD96287934FA706670D31B73C04E8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/326131343a373538313a376130303a3a2f33392d3339203d3e203431303531.roa
Signing time:             Mon 08 Jul 2024 15:58:01 +0000
ROA not before:           Mon 08 Jul 2024 15:53:01 +0000
ROA not after:            Mon 07 Jul 2025 15:58:01 +0000
asID:                     41051
IP address blocks:        2a14:7581:7a00::/39 maxlen: 39

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:27:ec:d3:dc:c5:3f:0f:ba:7e:23:82:08:34:ff:d9:81:e9:b8:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB1340E329CCD96287934FA706670D31B73C04E8
        Validity
            Not Before: Jul  8 15:53:01 2024 GMT
            Not After : Jul  7 15:58:01 2025 GMT
        Subject: CN=3D45E3C88D4E3C1C7547E612BB60B1275C2BF1EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:83:99:af:bf:e2:e0:21:e3:84:a2:0a:f8:43:
                    e9:b6:44:6a:c5:f4:bc:f6:52:b1:dc:e6:9d:d3:87:
                    aa:17:5b:2c:48:9d:6e:5f:5a:df:9e:7e:70:5c:68:
                    c5:fd:2d:92:fe:82:55:72:91:4a:8a:54:18:ae:3a:
                    be:0d:77:e3:ad:35:be:08:5e:e6:b8:fb:e4:39:eb:
                    3b:88:59:fe:f6:16:af:c6:14:c9:ce:3d:da:0e:da:
                    79:7a:07:8f:f5:0e:9d:09:9b:4c:b8:40:b1:ad:c2:
                    1d:3d:2a:02:be:44:04:d5:8f:36:31:a5:62:5d:92:
                    06:4e:a4:01:70:a1:17:3c:05:ea:0c:db:cf:7b:b3:
                    dd:8f:2b:c4:aa:03:6e:a5:52:8f:7c:5d:4e:d8:5a:
                    6d:0d:c4:7f:5b:3b:28:79:71:32:6a:6d:d5:e1:51:
                    af:27:73:84:c6:66:33:37:16:38:2b:b1:37:ec:e8:
                    5b:22:ef:51:74:62:77:71:d3:66:5b:ad:0a:56:1a:
                    3e:62:7f:11:b6:40:5e:34:a2:bf:95:e1:92:29:bf:
                    0c:bc:1e:c7:60:1d:5f:bc:eb:15:d4:15:63:b7:2c:
                    68:dc:ad:12:3d:97:ce:35:4a:9a:13:64:d3:84:aa:
                    35:3d:da:87:d2:4f:ff:b1:ae:0d:52:a3:94:82:78:
                    65:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:45:E3:C8:8D:4E:3C:1C:75:47:E6:12:BB:60:B1:27:5C:2B:F1:EF
            X509v3 Authority Key Identifier:
                keyid:AB:13:40:E3:29:CC:D9:62:87:93:4F:A7:06:67:0D:31:B7:3C:04:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/AB1340E329CCD96287934FA706670D31B73C04E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AB1340E329CCD96287934FA706670D31B73C04E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/326131343a373538313a376130303a3a2f33392d3339203d3e203431303531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:7a00::/39

    Signature Algorithm: sha256WithRSAEncryption
         87:83:5b:bb:52:0b:b9:f1:4b:41:52:3c:34:2c:14:fb:fc:3f:
         b9:14:15:22:1c:2a:70:72:33:ce:f3:5e:f5:3c:a4:65:f2:ed:
         dd:11:c9:ec:83:1c:9c:6d:bc:11:d5:21:06:bf:c9:82:0b:d2:
         a1:e5:17:c6:0b:18:09:92:26:03:ad:91:fd:b3:04:dc:aa:2d:
         a5:d1:61:3c:1d:65:d5:ac:1d:e1:16:2d:1c:ef:5a:5f:d5:d3:
         7a:f3:a2:b9:8c:12:a5:7a:aa:07:cc:3e:40:5d:16:bb:bf:99:
         76:d2:26:b3:3b:1f:0d:2d:a1:ca:b7:fb:47:d4:c7:3f:59:e0:
         13:05:55:1e:97:22:cf:85:0d:fa:e0:7d:f1:36:5d:e0:67:a1:
         42:5e:96:6f:ec:49:16:48:2c:ee:ad:bf:60:cb:cd:b5:01:db:
         3b:ea:5b:e4:4d:98:18:9a:c0:d4:33:62:0f:c5:b1:65:52:8b:
         df:bb:b3:1e:86:2c:2f:d1:96:9f:31:78:f4:09:ee:dc:6e:8c:
         5f:f7:23:68:69:f9:7c:1f:f1:5e:9c:28:40:01:0b:f6:83:ec:
         df:0b:29:03:f1:16:44:6f:84:d5:42:ff:f7:75:b6:a5:7a:c9:
         c9:b9:1e:af:e4:fc:6b:13:80:ee:98:f9:70:8e:28:84:51:e0:
         08:33:d7:a0
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUUifs09zFPw+6fiOCCDT/2YHpuJowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUIxMzQwRTMyOUNDRDk2Mjg3OTM0RkE3MDY2NzBEMzFC
NzNDMDRFODAeFw0yNDA3MDgxNTUzMDFaFw0yNTA3MDcxNTU4MDFaMDMxMTAvBgNV
BAMTKDNENDVFM0M4OEQ0RTNDMUM3NTQ3RTYxMkJCNjBCMTI3NUMyQkYxRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmg5mvv+LgIeOEogr4Q+m2RGrF
9Lz2UrHc5p3Th6oXWyxInW5fWt+efnBcaMX9LZL+glVykUqKVBiuOr4Nd+OtNb4I
Xua4++Q56zuIWf72Fq/GFMnOPdoO2nl6B4/1Dp0Jm0y4QLGtwh09KgK+RATVjzYx
pWJdkgZOpAFwoRc8BeoM2897s92PK8SqA26lUo98XU7YWm0NxH9bOyh5cTJqbdXh
Ua8nc4TGZjM3FjgrsTfs6Fsi71F0Yndx02ZbrQpWGj5ifxG2QF40or+V4ZIpvwy8
HsdgHV+86xXUFWO3LGjcrRI9l841SpoTZNOEqjU92ofST/+xrg1So5SCeGVhAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUPUXjyI1OPBx1R+YSu2CxJ1wr8e8wHwYDVR0j
BBgwFoAUqxNA4ynM2WKHk0+nBmcNMbc8BOgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzU4NDc5ZGYtZjViNy00NDUzLTkyYmYtZGUxZjYxYjNk
NGIwLzEvQUIxMzQwRTMyOUNDRDk2Mjg3OTM0RkE3MDY2NzBEMzFCNzNDMDRFOC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BQjEzNDBFMzI5Q0NEOTYyODc5MzRGQTcw
NjY3MEQzMUI3M0MwNEU4LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF
BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9jNTg0NzlkZi1mNWI3LTQ0NTMtOTJiZi1kZTFmNjFiM2Q0YjAvMS8zMjYxMzEz
NDNhMzczNTM4MzEzYTM3NjEzMDMwM2EzYTJmMzMzOTJkMzMzOTIwM2QzZTIwMzQz
MTMwMzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB
BwEB/wQSMBAwDgQCAAIwCAMGASoUdYF6MA0GCSqGSIb3DQEBCwUAA4IBAQCHg1u7
Ugu58UtBUjw0LBT7/D+5FBUiHCpwcjPO8171PKRl8u3dEcnsgxycbbwR1SEGv8mC
C9Kh5RfGCxgJkiYDrZH9swTcqi2l0WE8HWXVrB3hFi0c71pf1dN686K5jBKleqoH
zD5AXRa7v5l20iazOx8NLaHKt/tH1Mc/WeATBVUelyLPhQ364H3xNl3gZ6FCXpZv
7EkWSCzurb9gy821Ads76lvkTZgYmsDUM2IPxbFlUovfu7Mehiwv0ZafMXj0Ce7c
boxf9yNoafl8H/FenChAAQv2g+zfCykD8RZEb4TVQv/3dbalesnJuR6v5PxrE4Du
mPlwjiiEUeAIM9eg
-----END CERTIFICATE-----