Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130393a353463363a643033303a3a2f34342d3434203d3e20323134373537.roa
File:                     326130393a353463363a643033303a3a2f34342d3434203d3e20323134373537.roa (raw, json)
Hash identifier:          MtjR66LmDKShY3bpXpKngJ7masxh3BRhHTY38g/Pv+E=
Subject key identifier:   53:A0:88:D0:C6:48:E0:4E:04:D7:8A:98:67:AF:15:10:61:7D:44:9E
Certificate issuer:       /CN=8FD9D2B5888D68B05130C2B204FF94681A764D41
Certificate serial:       7FC92AF79040CC8191A84D58B24F930DC02C84C9
Authority key identifier: 8F:D9:D2:B5:88:8D:68:B0:51:30:C2:B2:04:FF:94:68:1A:76:4D:41
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/8FD9D2B5888D68B05130C2B204FF94681A764D41.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130393a353463363a643033303a3a2f34342d3434203d3e20323134373537.roa
Signing time:             Sat 28 Sep 2024 17:32:54 +0000
ROA not before:           Sat 28 Sep 2024 17:27:54 +0000
ROA not after:            Sat 27 Sep 2025 17:32:54 +0000
asID:                     214757
IP address blocks:        2a09:54c6:d030::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:c9:2a:f7:90:40:cc:81:91:a8:4d:58:b2:4f:93:0d:c0:2c:84:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD9D2B5888D68B05130C2B204FF94681A764D41
        Validity
            Not Before: Sep 28 17:27:54 2024 GMT
            Not After : Sep 27 17:32:54 2025 GMT
        Subject: CN=53A088D0C648E04E04D78A9867AF1510617D449E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:01:cf:18:16:16:32:64:cb:f8:e0:71:27:d5:
                    70:d8:63:50:99:88:1c:b4:69:99:65:61:ba:ad:e3:
                    d2:f4:2f:f6:78:60:8b:18:aa:f3:8c:58:2a:3c:2a:
                    7b:b5:84:5a:d8:5a:0f:7f:4b:46:ca:ae:34:3e:d8:
                    ff:db:06:db:65:e9:32:b3:a7:69:da:0e:cf:90:95:
                    e2:aa:84:4b:52:de:a3:fa:a8:ab:cf:f4:cf:2d:b4:
                    3e:f5:12:9b:75:e6:d7:6c:14:41:b8:38:5d:c3:35:
                    17:c3:44:9c:2e:1e:43:39:9c:d1:ef:a9:46:84:af:
                    40:3a:84:14:8b:15:1a:70:08:66:d9:34:4b:3d:b4:
                    0f:3f:0e:f1:c6:18:de:4f:36:7c:97:e6:ea:66:0d:
                    ad:97:b6:e9:68:74:a9:33:d4:49:a9:02:d0:94:50:
                    7d:73:f6:38:b4:fe:3c:1e:1d:c6:cb:4a:00:f0:0c:
                    52:7c:c4:98:97:60:a5:d7:06:36:bf:41:d1:21:53:
                    97:71:ca:dd:df:25:33:33:0e:9e:14:dd:35:25:e0:
                    16:5f:ef:5a:e0:3f:4d:2e:db:2d:bf:75:d5:40:e7:
                    bc:9f:f5:42:63:05:43:3b:46:fb:0a:60:4a:a6:80:
                    d1:c5:e4:8c:aa:71:3f:1c:a4:36:22:7f:a2:3f:8c:
                    58:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A0:88:D0:C6:48:E0:4E:04:D7:8A:98:67:AF:15:10:61:7D:44:9E
            X509v3 Authority Key Identifier:
                keyid:8F:D9:D2:B5:88:8D:68:B0:51:30:C2:B2:04:FF:94:68:1A:76:4D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/8FD9D2B5888D68B05130C2B204FF94681A764D41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/8FD9D2B5888D68B05130C2B204FF94681A764D41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130393a353463363a643033303a3a2f34342d3434203d3e20323134373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c6:d030::/44

    Signature Algorithm: sha256WithRSAEncryption
         7d:d5:f2:89:85:97:20:2b:18:71:64:3d:39:f2:15:ca:7c:12:
         33:a7:74:95:64:e2:5e:06:f2:b7:15:6b:c9:b9:8e:c3:de:57:
         23:0c:f6:d2:71:11:cb:a6:de:55:1d:9f:47:13:7f:b0:0b:98:
         39:a8:be:50:a2:96:cb:77:1d:a5:79:67:10:22:6f:24:52:61:
         5b:95:1f:7b:cc:31:41:55:66:a4:12:e0:85:31:ba:7f:79:7d:
         4c:8b:56:a3:7d:18:33:f9:e9:32:f6:d4:01:f3:c9:99:31:08:
         34:e4:ae:85:9b:c5:ec:4e:83:28:2d:1a:eb:f1:5e:21:6c:63:
         93:63:b1:92:dd:d1:e9:49:20:50:bb:98:04:b4:8e:26:76:4e:
         8d:66:7a:34:65:71:38:49:ac:52:7f:e1:de:30:3f:c9:ed:33:
         7b:07:02:08:b8:34:d5:1f:06:7f:08:40:f0:ee:1f:a5:eb:b5:
         b4:97:ca:ab:b7:9a:ef:e5:e6:a8:e4:23:18:96:1d:ad:89:e6:
         92:7b:d3:d7:8f:10:16:5b:44:f1:31:77:b9:5a:79:6b:3c:0b:
         be:d3:cf:b6:89:d5:e7:25:28:e8:d5:a0:47:19:6f:91:68:64:
         b0:55:5a:db:91:8d:83:00:b6:06:47:0d:60:e6:13:82:1e:9e:
         b3:71:75:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----