Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130393a353463363a643030303a3a2f34342d3434203d3e20323134373537.roa
File:                     326130393a353463363a643030303a3a2f34342d3434203d3e20323134373537.roa (raw, json)
Hash identifier:          8DrvjeBgrpMBB8eM1za7EbWZA+aZBcuQe+hLVYGWAig=
Subject key identifier:   A8:2D:4D:B0:BA:02:0D:3E:94:DD:A8:57:37:DB:9F:15:AE:F4:8F:80
Certificate issuer:       /CN=8FD9D2B5888D68B05130C2B204FF94681A764D41
Certificate serial:       1C2DBE7EB083E933EA31AFF612FE2FDC3007ACB8
Authority key identifier: 8F:D9:D2:B5:88:8D:68:B0:51:30:C2:B2:04:FF:94:68:1A:76:4D:41
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/8FD9D2B5888D68B05130C2B204FF94681A764D41.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130393a353463363a643030303a3a2f34342d3434203d3e20323134373537.roa
Signing time:             Mon 09 Sep 2024 16:43:58 +0000
ROA not before:           Mon 09 Sep 2024 16:38:58 +0000
ROA not after:            Mon 08 Sep 2025 16:43:58 +0000
asID:                     214757
IP address blocks:        2a09:54c6:d000::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:2d:be:7e:b0:83:e9:33:ea:31:af:f6:12:fe:2f:dc:30:07:ac:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD9D2B5888D68B05130C2B204FF94681A764D41
        Validity
            Not Before: Sep  9 16:38:58 2024 GMT
            Not After : Sep  8 16:43:58 2025 GMT
        Subject: CN=A82D4DB0BA020D3E94DDA85737DB9F15AEF48F80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:87:a9:e8:d2:ab:28:95:7b:0f:b3:6c:eb:96:
                    a4:b4:ed:69:07:25:7d:bc:fd:d7:0f:4d:f1:36:44:
                    cf:4e:ab:1b:3d:1c:79:b4:71:29:31:72:2e:9e:79:
                    09:ec:96:2c:1b:51:f8:cc:8a:5f:cf:d1:8b:ce:9d:
                    9d:61:75:63:87:99:82:c8:77:72:2d:bb:d3:74:82:
                    e1:db:51:7e:0d:ff:d4:86:d0:21:46:b5:d4:b0:69:
                    58:4b:a8:65:58:d5:0a:03:27:98:7c:32:c3:5e:97:
                    22:ab:21:51:f1:b2:88:05:8f:1c:fd:e9:17:5f:5b:
                    36:f8:f8:75:c2:74:f5:6d:3d:7a:8d:ca:66:6f:10:
                    ad:ed:7e:cb:70:1b:5c:46:e8:0d:57:28:18:59:fa:
                    a9:ce:f5:bf:b1:96:6c:52:3b:1d:d1:66:e2:b4:81:
                    2f:ea:56:85:b1:4e:de:3f:8c:b2:cc:d1:a0:04:6a:
                    78:a4:be:ff:27:da:3f:88:9b:fe:f4:79:df:2e:f1:
                    41:17:67:09:28:c1:dc:ee:4b:45:75:5c:12:15:98:
                    3a:0b:ec:76:1e:41:81:66:49:15:23:3d:1c:8b:cf:
                    2e:2e:a8:be:13:0e:30:ac:d2:09:5f:17:c5:6c:13:
                    59:8e:8f:d8:32:bf:9b:d3:70:c5:ac:d7:16:23:8c:
                    14:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2D:4D:B0:BA:02:0D:3E:94:DD:A8:57:37:DB:9F:15:AE:F4:8F:80
            X509v3 Authority Key Identifier:
                keyid:8F:D9:D2:B5:88:8D:68:B0:51:30:C2:B2:04:FF:94:68:1A:76:4D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/8FD9D2B5888D68B05130C2B204FF94681A764D41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/8FD9D2B5888D68B05130C2B204FF94681A764D41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130393a353463363a643030303a3a2f34342d3434203d3e20323134373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c6:d000::/44

    Signature Algorithm: sha256WithRSAEncryption
         8f:87:02:65:65:65:c6:c6:ec:c1:d5:4b:c5:ec:bd:e7:a6:d0:
         bf:5b:3d:aa:59:94:2b:d7:47:7b:55:53:15:fc:9a:e1:03:23:
         ef:b7:be:57:72:83:59:63:dc:9d:bc:a5:0f:e5:d6:29:82:eb:
         d6:21:bf:2c:cb:6a:bc:be:6e:3a:c1:cc:e3:bb:53:35:d1:47:
         88:cc:7f:29:0a:b7:55:90:74:44:6d:a0:d2:fa:1d:b1:d4:9c:
         12:13:ca:0b:62:48:4e:f4:05:3a:65:a9:9a:94:ca:66:fc:4d:
         be:85:f9:ea:e4:2e:98:a7:f2:25:7c:91:2c:fc:49:91:2b:5d:
         c9:c3:29:7f:6b:15:fc:a1:2e:53:7f:6e:a0:55:09:fc:fc:5d:
         46:0d:27:10:80:d4:be:9d:8d:fb:64:41:b8:a1:47:0a:55:a2:
         19:9d:79:19:8b:33:d2:62:7c:a6:75:35:96:6f:04:4f:f4:c9:
         d9:94:ae:25:2c:f7:1e:9e:fc:35:1c:96:2b:12:fe:db:95:7f:
         57:27:0f:7d:a4:25:78:3c:01:ed:b5:61:dd:b5:c9:0a:41:c0:
         76:ee:65:af:2c:0a:b2:f0:79:92:f3:6d:6d:5d:82:ec:77:01:
         f8:c6:d6:3d:50:1f:ed:c0:b0:bf:27:37:95:02:26:c0:cc:85:
         ce:7e:91:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 19:45:41 2024 by rpki-client on console-fra.rpki-client.org