Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130393a353463363a643032303a3a2f34342d3434203d3e20323134373537.roa
File:                     326130393a353463363a643032303a3a2f34342d3434203d3e20323134373537.roa (raw, json)
Hash identifier:          YJLeLqvSghdd2f/gPxfSK4t4wwcFeDUFM6DBUuhW408=
Subject key identifier:   41:03:94:02:F4:30:E4:3C:D1:98:2D:24:A8:2A:12:08:F1:16:0F:83
Certificate issuer:       /CN=8FD9D2B5888D68B05130C2B204FF94681A764D41
Certificate serial:       04C5F15A504330F57DDCA779A29580A48D55CBD8
Authority key identifier: 8F:D9:D2:B5:88:8D:68:B0:51:30:C2:B2:04:FF:94:68:1A:76:4D:41
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/8FD9D2B5888D68B05130C2B204FF94681A764D41.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130393a353463363a643032303a3a2f34342d3434203d3e20323134373537.roa
Signing time:             Mon 09 Sep 2024 08:58:54 +0000
ROA not before:           Mon 09 Sep 2024 08:53:54 +0000
ROA not after:            Mon 08 Sep 2025 08:58:54 +0000
asID:                     214757
IP address blocks:        2a09:54c6:d020::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c5:f1:5a:50:43:30:f5:7d:dc:a7:79:a2:95:80:a4:8d:55:cb:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD9D2B5888D68B05130C2B204FF94681A764D41
        Validity
            Not Before: Sep  9 08:53:54 2024 GMT
            Not After : Sep  8 08:58:54 2025 GMT
        Subject: CN=41039402F430E43CD1982D24A82A1208F1160F83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b4:18:35:7e:0d:b3:64:8b:92:6a:f8:d4:07:
                    74:26:e1:6b:67:56:c6:db:04:cf:6e:1e:70:f2:29:
                    6e:16:ca:86:e1:1b:71:ba:c3:96:cc:91:18:1e:3b:
                    52:6f:d6:2d:f7:41:fa:34:b4:54:bb:5e:2e:8e:29:
                    79:fd:33:6f:96:9c:4c:df:00:26:11:4a:d5:fd:80:
                    65:fb:9b:17:77:cf:55:9b:63:ce:67:90:50:9e:02:
                    05:70:9c:7f:19:d1:8e:1c:72:75:9c:dc:dc:bf:95:
                    e0:72:f0:b4:d4:75:69:0e:0c:59:ca:f2:4f:36:0c:
                    04:72:a9:df:ba:3c:a5:26:9c:19:09:c8:1d:86:e2:
                    7e:73:08:34:67:51:54:b9:6a:47:a3:77:b4:bf:a8:
                    e9:43:2a:17:3d:99:7d:e7:13:96:22:ff:1f:57:f5:
                    89:8a:82:c9:5e:58:aa:7b:19:2e:55:5f:34:8e:63:
                    bd:67:4f:82:17:e0:eb:93:fe:52:39:d6:0d:b8:02:
                    6a:4a:26:be:58:f8:16:6a:09:47:61:20:cb:0c:8f:
                    86:68:02:11:cf:32:2e:49:fd:38:2b:19:ab:13:21:
                    b5:fa:93:c8:4a:e3:7e:1f:99:71:f5:39:4e:48:95:
                    1d:0b:5d:c2:f9:b0:d6:35:35:68:ad:89:19:f9:f6:
                    70:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:03:94:02:F4:30:E4:3C:D1:98:2D:24:A8:2A:12:08:F1:16:0F:83
            X509v3 Authority Key Identifier:
                keyid:8F:D9:D2:B5:88:8D:68:B0:51:30:C2:B2:04:FF:94:68:1A:76:4D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/8FD9D2B5888D68B05130C2B204FF94681A764D41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/8FD9D2B5888D68B05130C2B204FF94681A764D41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130393a353463363a643032303a3a2f34342d3434203d3e20323134373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c6:d020::/44

    Signature Algorithm: sha256WithRSAEncryption
         32:98:31:99:c1:30:82:87:3b:5d:4f:34:79:f6:99:eb:d5:5a:
         ea:08:72:c7:b5:fa:1a:f3:84:c0:63:3a:39:46:65:02:41:86:
         f6:2d:c3:eb:82:68:74:59:bc:ab:61:ff:66:65:05:e4:b5:58:
         c7:30:ef:eb:76:57:ac:69:dc:b0:93:46:bc:88:52:33:db:58:
         f0:75:b9:7c:9b:8f:4b:e2:75:28:44:46:63:b4:8d:20:6b:98:
         f5:e9:4f:f6:bc:9f:d6:c0:55:cc:04:9e:04:9f:14:90:26:53:
         12:f5:f5:3a:6e:02:5e:d7:cb:2c:39:cb:61:72:de:4c:9c:4b:
         81:1e:66:b3:28:39:2e:18:53:40:6c:8e:14:a2:b0:5d:bb:54:
         42:65:9b:a4:9b:87:af:2e:ea:0f:55:48:39:59:ad:e4:8c:3e:
         fa:f6:a7:8b:f6:cc:83:ae:52:f5:11:7d:69:98:0a:77:cb:a4:
         b8:d7:8b:76:1d:fd:62:24:b7:dc:48:a5:44:9d:b9:b1:2a:28:
         a9:dc:0a:e3:22:0a:53:cb:af:d8:ac:64:ff:f1:ce:bb:3d:e8:
         df:59:9b:ab:54:14:53:0d:5d:39:33:ac:1a:e5:93:b3:1a:1b:
         b8:d6:de:b3:45:89:00:83:04:07:6e:c1:e4:c8:df:26:77:ed:
         b8:2b:35:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----