Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130393a353463363a646561643a3a2f34382d3438203d3e20323134373537.roa
File:                     326130393a353463363a646561643a3a2f34382d3438203d3e20323134373537.roa (raw, json)
Hash identifier:          S3mlaQw9EIts3taiUowdwaEgHsrZrgnwKf80PTn7zXk=
Subject key identifier:   8A:15:30:00:18:56:D1:F3:12:A4:38:BE:81:5D:BB:88:C1:93:09:50
Certificate issuer:       /CN=8FD9D2B5888D68B05130C2B204FF94681A764D41
Certificate serial:       69E31C543534A86232CE512FC9BDBC16CAFDFEE0
Authority key identifier: 8F:D9:D2:B5:88:8D:68:B0:51:30:C2:B2:04:FF:94:68:1A:76:4D:41
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/8FD9D2B5888D68B05130C2B204FF94681A764D41.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130393a353463363a646561643a3a2f34382d3438203d3e20323134373537.roa
Signing time:             Mon 09 Sep 2024 09:00:06 +0000
ROA not before:           Mon 09 Sep 2024 08:55:06 +0000
ROA not after:            Mon 08 Sep 2025 09:00:06 +0000
asID:                     214757
IP address blocks:        2a09:54c6:dead::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e3:1c:54:35:34:a8:62:32:ce:51:2f:c9:bd:bc:16:ca:fd:fe:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD9D2B5888D68B05130C2B204FF94681A764D41
        Validity
            Not Before: Sep  9 08:55:06 2024 GMT
            Not After : Sep  8 09:00:06 2025 GMT
        Subject: CN=8A1530001856D1F312A438BE815DBB88C1930950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a2:60:00:1d:69:97:32:77:62:1f:b4:87:72:
                    aa:51:b2:ce:42:2c:34:ed:ca:f2:f3:8a:fe:3c:0c:
                    14:6a:5f:06:54:d1:52:61:d5:1a:e0:d8:53:24:a2:
                    79:09:55:fe:d9:fa:d4:f5:d3:89:74:46:6e:97:b0:
                    27:93:f7:6b:db:92:fe:05:cb:a4:5e:3c:af:ae:75:
                    66:f3:0c:9f:ea:f4:f3:59:35:71:c6:ad:90:6f:91:
                    b9:85:a1:5b:5a:15:0b:19:30:6d:27:fc:60:b5:ac:
                    28:05:eb:bc:b1:e9:96:b4:40:96:ab:93:21:0b:ac:
                    ec:0f:72:d0:a1:8d:8e:df:85:37:b7:d6:3b:f9:d8:
                    47:eb:8f:34:ab:43:3d:c9:ad:0a:75:8c:55:98:fb:
                    ad:9d:af:8c:bd:13:2e:11:96:15:f1:0c:4e:25:f5:
                    c2:b0:9f:49:15:ee:96:02:98:ea:79:dc:54:49:ea:
                    60:43:3e:95:58:62:6f:b0:ad:db:10:55:58:ef:f5:
                    9f:09:91:5f:ee:7e:32:62:7e:18:79:85:30:a6:03:
                    65:ee:3b:2d:ad:5e:35:04:d0:af:88:ed:9d:4e:88:
                    04:35:e1:93:d1:66:39:f9:1c:95:ab:67:cc:6b:a6:
                    13:2f:d4:20:e5:14:48:30:94:22:2d:e0:e7:d1:cd:
                    5d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:15:30:00:18:56:D1:F3:12:A4:38:BE:81:5D:BB:88:C1:93:09:50
            X509v3 Authority Key Identifier:
                keyid:8F:D9:D2:B5:88:8D:68:B0:51:30:C2:B2:04:FF:94:68:1A:76:4D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/8FD9D2B5888D68B05130C2B204FF94681A764D41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/8FD9D2B5888D68B05130C2B204FF94681A764D41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130393a353463363a646561643a3a2f34382d3438203d3e20323134373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c6:dead::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:40:24:7d:ad:cc:f3:98:ee:3a:78:25:25:44:57:85:71:65:
         65:05:c0:65:71:27:89:ea:d7:71:58:c9:fd:c8:7b:47:f7:56:
         ed:71:03:2c:5d:09:bc:b2:19:e6:c0:23:b4:9a:37:4c:ac:b7:
         fc:30:6b:25:f0:30:f1:b3:5a:ba:6e:27:b1:48:84:40:ca:72:
         96:f4:ac:5c:eb:14:24:81:00:26:59:94:3b:5f:ff:57:52:df:
         1a:1b:57:8e:f3:d6:24:b4:75:8e:a0:04:82:04:e6:fa:f2:9c:
         c6:50:4e:5d:8d:60:4a:ec:23:2e:12:8d:67:3f:6a:6f:34:35:
         b5:56:3e:e6:c4:00:bc:8b:2d:81:e0:0d:6d:ed:18:a9:49:8e:
         37:51:37:19:67:99:38:95:36:97:77:35:67:24:c9:79:9c:c6:
         f5:74:e9:f2:e2:63:94:d4:ac:f7:76:b8:40:3f:e7:a4:a6:57:
         49:6a:fd:a3:2c:be:db:cb:1c:ee:31:6d:91:e6:bc:3c:ab:ab:
         c5:16:b5:d7:18:ef:6e:51:da:b2:d4:19:88:e5:de:36:9e:29:
         16:de:b2:94:91:02:58:2a:9a:c4:d0:c7:12:6b:43:ef:db:f5:
         55:61:a3:34:2f:86:be:d4:b8:d2:63:0d:91:44:79:a7:5c:5f:
         1d:7f:b3:cb
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUaeMcVDU0qGIyzlEvyb28Fsr9/uAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZEOUQyQjU4ODhENjhCMDUxMzBDMkIyMDRGRjk0Njgx
QTc2NEQ0MTAeFw0yNDA5MDkwODU1MDZaFw0yNTA5MDgwOTAwMDZaMDMxMTAvBgNV
BAMTKDhBMTUzMDAwMTg1NkQxRjMxMkE0MzhCRTgxNURCQjg4QzE5MzA5NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDComAAHWmXMndiH7SHcqpRss5C
LDTtyvLziv48DBRqXwZU0VJh1Rrg2FMkonkJVf7Z+tT104l0Rm6XsCeT92vbkv4F
y6RePK+udWbzDJ/q9PNZNXHGrZBvkbmFoVtaFQsZMG0n/GC1rCgF67yx6Za0QJar
kyELrOwPctChjY7fhTe31jv52EfrjzSrQz3JrQp1jFWY+62dr4y9Ey4RlhXxDE4l
9cKwn0kV7pYCmOp53FRJ6mBDPpVYYm+wrdsQVVjv9Z8JkV/ufjJifhh5hTCmA2Xu
Oy2tXjUE0K+I7Z1OiAQ14ZPRZjn5HJWrZ8xrphMv1CDlFEgwlCIt4OfRzV2ZAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUihUwABhW0fMSpDi+gV27iMGTCVAwHwYDVR0j
BBgwFoAUj9nStYiNaLBRMMKyBP+UaBp2TUEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDg2OWIzM2ItNTEyMi00YWI4LWJiNTktOTgwMjJkNjM5
MWEwLzEvOEZEOUQyQjU4ODhENjhCMDUxMzBDMkIyMDRGRjk0NjgxQTc2NEQ0MS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC84RkQ5RDJCNTg4OEQ2OEIwNTEzMEMyQjIw
NEZGOTQ2ODFBNzY0RDQxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9kODY5YjMzYi01MTIyLTRhYjgtYmI1OS05ODAyMmQ2MzkxYTAvMS8zMjYxMzAz
OTNhMzUzNDYzMzYzYTY0NjU2MTY0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM0MzczNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKglUxt6tMA0GCSqGSIb3DQEBCwUAA4IBAQA6
QCR9rczzmO46eCUlRFeFcWVlBcBlcSeJ6tdxWMn9yHtH91btcQMsXQm8shnmwCO0
mjdMrLf8MGsl8DDxs1q6biexSIRAynKW9Kxc6xQkgQAmWZQ7X/9XUt8aG1eO89Yk
tHWOoASCBOb68pzGUE5djWBK7CMuEo1nP2pvNDW1Vj7mxAC8iy2B4A1t7RipSY43
UTcZZ5k4lTaXdzVnJMl5nMb1dOny4mOU1Kz3drhAP+ekpldJav2jLL7byxzuMW2R
5rw8q6vFFrXXGO9uUdqy1BmI5d42nikW3rKUkQJYKprE0McSa0Pv2/VVYaM0L4a+
1LjSYw2RRHmnXF8df7PL
-----END CERTIFICATE-----