Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130393a353463363a643061303a3a2f34342d3434203d3e20323134373537.roa
File:                     326130393a353463363a643061303a3a2f34342d3434203d3e20323134373537.roa (raw, json)
Hash identifier:          MZ0APLSfbNb0xVuGc62RE8Nm8JOKMhh4ln1PRDPOBwY=
Subject key identifier:   CC:BA:98:0C:21:FF:D2:A5:46:46:87:DD:31:64:DD:76:14:3F:FB:94
Certificate issuer:       /CN=8FD9D2B5888D68B05130C2B204FF94681A764D41
Certificate serial:       515BD8D9C895C1A3E070C4B9CC88988B4730FAD3
Authority key identifier: 8F:D9:D2:B5:88:8D:68:B0:51:30:C2:B2:04:FF:94:68:1A:76:4D:41
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/8FD9D2B5888D68B05130C2B204FF94681A764D41.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130393a353463363a643061303a3a2f34342d3434203d3e20323134373537.roa
Signing time:             Mon 09 Sep 2024 08:59:15 +0000
ROA not before:           Mon 09 Sep 2024 08:54:15 +0000
ROA not after:            Mon 08 Sep 2025 08:59:15 +0000
asID:                     214757
IP address blocks:        2a09:54c6:d0a0::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:5b:d8:d9:c8:95:c1:a3:e0:70:c4:b9:cc:88:98:8b:47:30:fa:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD9D2B5888D68B05130C2B204FF94681A764D41
        Validity
            Not Before: Sep  9 08:54:15 2024 GMT
            Not After : Sep  8 08:59:15 2025 GMT
        Subject: CN=CCBA980C21FFD2A5464687DD3164DD76143FFB94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3e:14:df:a3:59:96:7e:a4:37:1b:3e:23:e7:
                    c0:1e:bc:a5:9b:ac:a4:84:53:f2:15:34:7c:19:40:
                    f0:5c:2e:5a:e1:1b:d2:73:75:66:44:a5:1c:51:90:
                    0d:8e:5c:ac:b3:87:1b:c9:43:5c:bb:19:02:ab:79:
                    de:5a:24:0c:1a:dc:55:47:55:70:6a:92:91:9b:e1:
                    7d:0f:6e:4a:c1:88:eb:5b:71:2c:8f:b2:c7:f3:ad:
                    ac:ab:7b:10:0e:6d:b2:12:3a:2a:7a:c9:25:1f:1b:
                    97:1f:f5:f7:5b:8c:df:fd:e0:86:8f:2d:92:a2:a1:
                    fc:2c:71:1b:ac:be:f0:a9:3f:e3:3f:2d:b5:78:32:
                    d4:f4:67:51:88:2f:c8:20:44:ee:66:f7:20:a6:11:
                    62:31:13:71:11:12:6e:33:7e:7c:a8:79:73:4b:5f:
                    8c:dc:c9:4c:b2:ac:2e:fd:db:21:f7:73:5e:b4:d3:
                    5c:1e:3e:9c:17:b3:45:a4:63:75:ef:b9:7e:89:53:
                    27:ba:3e:fb:2f:fb:91:0b:3a:0f:38:14:03:1b:8b:
                    20:a4:6f:a2:04:0a:13:1d:c9:31:3f:2b:e0:8f:b2:
                    c0:0c:03:33:cd:3b:6f:20:ee:dd:f7:41:f6:0e:d0:
                    fd:58:ce:5d:7f:f9:6f:b4:e5:a0:b5:f5:c0:89:99:
                    da:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:BA:98:0C:21:FF:D2:A5:46:46:87:DD:31:64:DD:76:14:3F:FB:94
            X509v3 Authority Key Identifier:
                keyid:8F:D9:D2:B5:88:8D:68:B0:51:30:C2:B2:04:FF:94:68:1A:76:4D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/8FD9D2B5888D68B05130C2B204FF94681A764D41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/8FD9D2B5888D68B05130C2B204FF94681A764D41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130393a353463363a643061303a3a2f34342d3434203d3e20323134373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c6:d0a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         4c:f4:e1:3c:36:00:43:a3:2c:10:78:c0:5d:b7:1a:e3:e5:13:
         77:ac:cf:ae:7a:64:7a:73:2f:1e:a0:b4:e2:bd:1c:ba:bf:b1:
         37:2b:9e:9e:80:9e:b0:fd:58:81:9f:ac:46:61:7b:29:1e:2e:
         12:61:c7:89:06:fb:f3:2a:d9:47:5c:ec:d6:68:26:1b:90:de:
         b1:87:78:01:0b:18:ab:75:fe:8c:5d:ac:12:62:53:f8:5d:10:
         aa:56:2d:69:5c:50:09:d4:0f:ce:bc:46:98:09:a4:b2:bc:42:
         d6:78:cb:a7:b6:ff:43:e9:25:c2:10:01:ae:60:72:95:62:60:
         1b:5b:7e:93:df:c5:9f:ce:bc:cd:60:0b:49:6b:cd:70:98:47:
         24:8c:60:18:ba:53:60:3f:94:70:a7:84:2a:2e:ed:e9:62:03:
         48:e0:85:32:bc:31:46:df:2d:74:b3:93:ad:aa:ef:bb:92:50:
         83:9a:74:c9:3a:c1:78:7d:02:23:1b:9c:51:dd:e6:9d:ed:3e:
         fd:fc:09:1c:c6:39:51:71:54:ec:c0:85:9f:01:72:8b:4d:99:
         3b:ca:83:5f:75:3b:a9:fc:50:20:0c:85:1b:44:92:c0:f2:5d:
         86:b5:f5:98:51:28:45:d5:e3:60:f3:e4:31:b4:96:4e:2c:9d:
         f8:a7:0c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 19:45:41 2024 by rpki-client on console-fra.rpki-client.org