Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/326131343a373538313a376130303a3a2f34342d3434203d3e20323135373331.roa
File:                     326131343a373538313a376130303a3a2f34342d3434203d3e20323135373331.roa (raw, json)
Hash identifier:          +9ZBrsye/+7JcfQCN7LZ22z9A0AorbivM4NukTYuELA=
Subject key identifier:   12:9F:F5:84:E2:49:AC:13:F5:C0:EE:07:D0:C7:68:3A:36:60:9E:0B
Certificate issuer:       /CN=AB1340E329CCD96287934FA706670D31B73C04E8
Certificate serial:       07A4CEB9BA71354A5C1EF2B753418862AEC2A82E
Authority key identifier: AB:13:40:E3:29:CC:D9:62:87:93:4F:A7:06:67:0D:31:B7:3C:04:E8
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AB1340E329CCD96287934FA706670D31B73C04E8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/326131343a373538313a376130303a3a2f34342d3434203d3e20323135373331.roa
Signing time:             Mon 20 May 2024 10:41:20 +0000
ROA not before:           Mon 20 May 2024 10:36:20 +0000
ROA not after:            Mon 19 May 2025 10:41:20 +0000
asID:                     215731
IP address blocks:        2a14:7581:7a00::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a4:ce:b9:ba:71:35:4a:5c:1e:f2:b7:53:41:88:62:ae:c2:a8:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB1340E329CCD96287934FA706670D31B73C04E8
        Validity
            Not Before: May 20 10:36:20 2024 GMT
            Not After : May 19 10:41:20 2025 GMT
        Subject: CN=129FF584E249AC13F5C0EE07D0C7683A36609E0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a9:38:bf:e0:0b:31:50:00:84:ec:26:9c:75:
                    f3:62:59:f9:59:72:5c:bc:3a:81:65:9a:7d:87:d5:
                    2c:1f:d6:ef:1a:e0:28:e5:1f:6d:f3:14:e6:88:fe:
                    18:46:14:87:19:31:09:e3:be:1b:08:92:c5:fc:b8:
                    5b:2e:8f:ac:85:1c:79:07:ed:0f:5d:a4:d6:97:6b:
                    1d:15:2e:e6:6a:d3:c8:aa:74:30:44:25:74:45:59:
                    1c:aa:a3:8e:c6:f2:0d:e9:1d:76:11:73:03:4e:34:
                    bf:33:c4:c9:cb:d3:2f:1e:d2:f0:2d:cc:6d:52:b0:
                    01:ad:cd:f9:89:3e:27:b8:4f:5d:3f:fa:e2:d0:c3:
                    30:f3:85:30:b9:cb:b2:1f:85:23:65:26:e2:b9:ba:
                    1b:7f:c7:72:45:92:35:10:c0:12:25:a2:ea:44:84:
                    a3:28:e3:7d:7d:fc:4a:37:fb:f1:2c:c6:0f:25:69:
                    5b:5b:10:51:fb:0d:75:0d:eb:1c:41:11:71:21:08:
                    dd:52:51:58:ee:fe:3a:da:31:eb:d2:ef:de:40:04:
                    15:5c:fd:14:dd:e5:e4:b7:32:cb:8b:dc:d0:fc:d0:
                    fc:f0:06:45:8b:24:43:7b:77:bc:98:d6:5e:6e:ca:
                    ce:f3:34:76:b6:cb:89:37:6c:48:3d:2f:f5:69:f4:
                    c3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9F:F5:84:E2:49:AC:13:F5:C0:EE:07:D0:C7:68:3A:36:60:9E:0B
            X509v3 Authority Key Identifier:
                keyid:AB:13:40:E3:29:CC:D9:62:87:93:4F:A7:06:67:0D:31:B7:3C:04:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/AB1340E329CCD96287934FA706670D31B73C04E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AB1340E329CCD96287934FA706670D31B73C04E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/326131343a373538313a376130303a3a2f34342d3434203d3e20323135373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:7a00::/44

    Signature Algorithm: sha256WithRSAEncryption
         7d:d6:7d:c9:3f:9e:93:13:5d:be:fa:c1:ae:67:17:d4:06:de:
         69:37:15:28:78:6d:0b:cd:d6:70:75:5e:78:72:53:e9:6c:f4:
         9e:35:78:95:1c:79:33:4d:3b:47:fe:0c:f5:29:21:a3:13:b5:
         30:10:01:91:b0:34:a7:cf:fb:cb:d7:11:82:7c:23:d2:1f:3b:
         cc:b9:0d:ef:d2:7f:01:1b:6f:0f:7f:0b:0c:a9:9e:69:56:0c:
         4b:1d:55:c7:c4:9a:39:15:1b:8d:a2:f1:8e:fc:06:c1:73:f7:
         44:8c:27:aa:de:a0:a2:85:de:86:b3:35:33:05:68:9a:94:eb:
         29:6f:70:e6:82:dc:3b:58:ef:37:ba:15:7e:11:55:e5:20:5b:
         af:42:45:ab:e7:36:59:9e:03:9f:8d:60:c0:e3:67:93:20:b7:
         75:4c:57:87:0e:b8:6f:50:06:5b:3b:12:4e:f3:75:ee:08:65:
         4c:d1:19:8c:7a:c8:93:c6:18:25:42:3c:e9:38:de:aa:a9:bb:
         3c:0f:cd:d3:6a:37:8b:e5:e6:3f:32:52:98:55:b0:7b:4f:9e:
         8c:32:e4:72:cc:00:fb:52:6f:ce:5e:c2:33:cd:9a:b3:db:b7:
         e5:26:67:39:81:fb:cf:67:8b:94:c8:6a:81:dd:de:55:65:68:
         c1:66:99:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----