Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/326131343a373538313a376130623a3a2f34382d3438203d3e20323135313236.roa
File:                     326131343a373538313a376130623a3a2f34382d3438203d3e20323135313236.roa (raw, json)
Hash identifier:          1HVCCqG4gBoc72OP7Aul3nDfjDWfPvAXodWrVM42/EI=
Subject key identifier:   7B:49:37:A2:4E:6A:D1:62:ED:41:37:96:27:60:40:6E:3F:48:9C:0E
Certificate issuer:       /CN=AB1340E329CCD96287934FA706670D31B73C04E8
Certificate serial:       1A8AAA9B10F6F82646DBF463EA1C37099E5F5265
Authority key identifier: AB:13:40:E3:29:CC:D9:62:87:93:4F:A7:06:67:0D:31:B7:3C:04:E8
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AB1340E329CCD96287934FA706670D31B73C04E8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/326131343a373538313a376130623a3a2f34382d3438203d3e20323135313236.roa
Signing time:             Sun 19 May 2024 22:11:05 +0000
ROA not before:           Sun 19 May 2024 22:06:05 +0000
ROA not after:            Sun 18 May 2025 22:11:05 +0000
asID:                     215126
IP address blocks:        2a14:7581:7a0b::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:8a:aa:9b:10:f6:f8:26:46:db:f4:63:ea:1c:37:09:9e:5f:52:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB1340E329CCD96287934FA706670D31B73C04E8
        Validity
            Not Before: May 19 22:06:05 2024 GMT
            Not After : May 18 22:11:05 2025 GMT
        Subject: CN=7B4937A24E6AD162ED4137962760406E3F489C0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9d:75:a9:2f:e0:2a:bf:e7:7c:91:1b:5b:c0:
                    8a:98:5d:46:8a:76:fa:ee:fc:b5:4c:90:cf:15:6d:
                    b3:10:5d:fb:35:e9:89:64:bb:02:f9:35:ee:7a:2d:
                    2a:67:38:f8:8a:87:9b:e2:8b:6a:06:59:0a:1e:64:
                    9a:c2:5d:6f:24:a6:0e:f4:4a:17:8f:a6:73:9a:10:
                    dc:f3:77:b8:3b:8d:4b:c2:65:4c:df:29:32:16:27:
                    f3:aa:5d:2f:87:1a:a2:ab:34:b9:5d:71:fe:66:14:
                    fa:38:01:02:4e:47:b8:21:2c:49:94:e4:d4:78:04:
                    00:23:da:ab:11:7d:e7:58:75:e7:e2:6e:fc:c5:42:
                    2f:19:07:88:b2:c2:e7:c9:6c:46:9a:2f:a9:5c:bd:
                    aa:56:0c:1f:5b:a7:46:df:62:2e:3d:f5:b6:3e:cd:
                    17:db:36:5c:b5:e2:57:2f:2e:a3:6a:2c:b2:c1:88:
                    fd:bc:ec:0e:1a:b3:d7:a1:ad:18:94:26:f8:76:25:
                    e9:c2:bb:64:c5:62:24:71:0c:a4:7c:3e:af:c1:dd:
                    7c:cc:e4:f5:06:8c:35:06:8d:75:db:36:61:8a:15:
                    47:20:9d:46:58:6e:65:c1:fc:a8:3f:ef:d5:ae:a5:
                    d0:03:29:b1:35:c9:e3:e4:66:2f:f2:d4:f4:97:34:
                    68:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:49:37:A2:4E:6A:D1:62:ED:41:37:96:27:60:40:6E:3F:48:9C:0E
            X509v3 Authority Key Identifier:
                keyid:AB:13:40:E3:29:CC:D9:62:87:93:4F:A7:06:67:0D:31:B7:3C:04:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/AB1340E329CCD96287934FA706670D31B73C04E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AB1340E329CCD96287934FA706670D31B73C04E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/326131343a373538313a376130623a3a2f34382d3438203d3e20323135313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:7a0b::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:de:6b:d4:80:41:03:0d:25:ee:9e:35:25:ff:5c:af:44:af:
         1f:5e:e8:f6:e9:49:6a:f5:7c:eb:a0:66:7b:37:f0:f7:b3:a3:
         46:80:fc:d1:41:47:13:ca:c9:e4:e0:58:52:d1:14:06:83:c8:
         4a:5d:c1:83:b1:38:93:ba:99:1b:6a:0a:b7:81:a1:6b:d1:46:
         7b:02:6d:ba:2a:5d:d5:aa:a7:2e:ea:f4:a1:90:81:33:c0:c0:
         7c:22:99:88:71:bd:52:43:12:e4:2f:a4:44:e9:d9:ae:93:6e:
         1b:73:fe:84:a9:2e:12:04:ea:de:d4:1a:14:74:a7:4c:fa:3f:
         ad:67:4d:e8:cf:4f:5b:89:1a:d2:49:9b:58:54:29:80:f4:32:
         42:9b:a8:72:ea:8f:0f:1d:85:91:68:f7:7b:6b:34:ea:69:db:
         72:ce:b9:c1:96:22:45:d0:80:aa:d4:10:c6:ac:6f:93:6f:81:
         dc:67:50:19:64:a4:3d:8f:fb:57:6d:54:60:f7:22:33:64:5e:
         c9:5e:69:72:2b:02:cd:4b:10:a8:58:cb:a3:ea:65:eb:8f:da:
         33:3d:2b:3d:3a:3f:2c:44:db:a8:98:e2:bf:a9:a8:82:04:d7:
         4c:f0:7e:e2:36:f7:e6:1d:6c:2c:68:d4:1b:51:82:9e:3e:d7:
         69:5c:af:25
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUGoqqmxD2+CZG2/Rj6hw3CZ5fUmUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUIxMzQwRTMyOUNDRDk2Mjg3OTM0RkE3MDY2NzBEMzFC
NzNDMDRFODAeFw0yNDA1MTkyMjA2MDVaFw0yNTA1MTgyMjExMDVaMDMxMTAvBgNV
BAMTKDdCNDkzN0EyNEU2QUQxNjJFRDQxMzc5NjI3NjA0MDZFM0Y0ODlDMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBnXWpL+Aqv+d8kRtbwIqYXUaK
dvru/LVMkM8VbbMQXfs16YlkuwL5Ne56LSpnOPiKh5vii2oGWQoeZJrCXW8kpg70
ShePpnOaENzzd7g7jUvCZUzfKTIWJ/OqXS+HGqKrNLldcf5mFPo4AQJOR7ghLEmU
5NR4BAAj2qsRfedYdefibvzFQi8ZB4iywufJbEaaL6lcvapWDB9bp0bfYi499bY+
zRfbNly14lcvLqNqLLLBiP287A4as9ehrRiUJvh2JenCu2TFYiRxDKR8Pq/B3XzM
5PUGjDUGjXXbNmGKFUcgnUZYbmXB/Kg/79WupdADKbE1yePkZi/y1PSXNGgBAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUe0k3ok5q0WLtQTeWJ2BAbj9InA4wHwYDVR0j
BBgwFoAUqxNA4ynM2WKHk0+nBmcNMbc8BOgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzU4NDc5ZGYtZjViNy00NDUzLTkyYmYtZGUxZjYxYjNk
NGIwLzEvQUIxMzQwRTMyOUNDRDk2Mjg3OTM0RkE3MDY2NzBEMzFCNzNDMDRFOC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BQjEzNDBFMzI5Q0NEOTYyODc5MzRGQTcw
NjY3MEQzMUI3M0MwNEU4LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9jNTg0NzlkZi1mNWI3LTQ0NTMtOTJiZi1kZTFmNjFiM2Q0YjAvMS8zMjYxMzEz
NDNhMzczNTM4MzEzYTM3NjEzMDYyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM1MzEzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gXoLMA0GCSqGSIb3DQEBCwUAA4IBAQBK
3mvUgEEDDSXunjUl/1yvRK8fXuj26Ulq9XzroGZ7N/D3s6NGgPzRQUcTysnk4FhS
0RQGg8hKXcGDsTiTupkbagq3gaFr0UZ7Am26Kl3Vqqcu6vShkIEzwMB8IpmIcb1S
QxLkL6RE6dmuk24bc/6EqS4SBOre1BoUdKdM+j+tZ03oz09biRrSSZtYVCmA9DJC
m6hy6o8PHYWRaPd7azTqadtyzrnBliJF0ICq1BDGrG+Tb4HcZ1AZZKQ9j/tXbVRg
9yIzZF7JXmlyKwLNSxCoWMuj6mXrj9ozPSs9Oj8sRNuomOK/qaiCBNdM8H7iNvfm
HWwsaNQbUYKePtdpXK8l
-----END CERTIFICATE-----