Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130613a363034343a616337303a3a2f34342d3434203d3e20323134373537.roa
File:                     326130613a363034343a616337303a3a2f34342d3434203d3e20323134373537.roa (raw, json)
Hash identifier:          HcgYG831+sp4l2HKJwactjaO5LKv+cJ/NA31bgjRfJM=
Subject key identifier:   84:AF:69:27:50:A1:DF:69:4D:9B:DA:06:5E:9C:8D:4D:67:72:DA:F8
Certificate issuer:       /CN=8FD9D2B5888D68B05130C2B204FF94681A764D41
Certificate serial:       346C956907E61968579DA7A62D0AB2A391FF3D27
Authority key identifier: 8F:D9:D2:B5:88:8D:68:B0:51:30:C2:B2:04:FF:94:68:1A:76:4D:41
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/8FD9D2B5888D68B05130C2B204FF94681A764D41.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130613a363034343a616337303a3a2f34342d3434203d3e20323134373537.roa
Signing time:             Mon 09 Sep 2024 09:00:30 +0000
ROA not before:           Mon 09 Sep 2024 08:55:30 +0000
ROA not after:            Mon 08 Sep 2025 09:00:30 +0000
asID:                     214757
IP address blocks:        2a0a:6044:ac70::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:6c:95:69:07:e6:19:68:57:9d:a7:a6:2d:0a:b2:a3:91:ff:3d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD9D2B5888D68B05130C2B204FF94681A764D41
        Validity
            Not Before: Sep  9 08:55:30 2024 GMT
            Not After : Sep  8 09:00:30 2025 GMT
        Subject: CN=84AF692750A1DF694D9BDA065E9C8D4D6772DAF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0d:c3:2f:fc:00:cb:89:09:95:26:8b:37:b7:
                    69:8e:99:33:76:8b:5d:bd:f3:4e:2e:c4:11:2e:98:
                    e3:64:30:55:22:12:7f:3d:61:bf:9e:b3:39:5a:13:
                    65:18:a3:4d:f9:96:5a:b9:2e:57:14:c0:31:63:1e:
                    30:60:43:28:3a:2f:1e:ef:1c:2c:0d:89:da:01:35:
                    e5:b3:29:cc:4e:65:ff:4f:33:6f:2b:53:75:37:b7:
                    29:4b:48:84:40:e6:19:b8:e0:e9:c0:b8:1f:84:9b:
                    81:2b:f1:13:e1:7e:af:ec:77:7b:ff:1d:5c:7d:a4:
                    74:02:0a:c7:82:a5:fe:8f:64:6b:0d:df:5e:af:c8:
                    94:81:1e:38:4f:24:06:c2:25:c6:56:6f:0f:90:5d:
                    40:c9:ab:bb:b1:77:7f:34:a8:84:43:4b:ee:a1:b8:
                    36:aa:91:5e:74:18:08:8f:c1:c4:04:e8:64:0f:c2:
                    ef:b7:5c:f0:3e:ef:68:05:ef:09:4a:8a:45:71:85:
                    20:4e:99:d6:dc:f9:9e:67:d3:f0:69:a3:36:fd:e4:
                    46:ba:49:d7:00:dc:b0:29:90:6f:19:d2:c8:50:51:
                    6d:1c:ba:92:d7:ae:a8:e9:71:20:d5:7a:28:d4:eb:
                    4f:bd:67:3b:27:6d:84:5d:3f:c7:cb:81:ef:0f:1c:
                    56:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:AF:69:27:50:A1:DF:69:4D:9B:DA:06:5E:9C:8D:4D:67:72:DA:F8
            X509v3 Authority Key Identifier:
                keyid:8F:D9:D2:B5:88:8D:68:B0:51:30:C2:B2:04:FF:94:68:1A:76:4D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/8FD9D2B5888D68B05130C2B204FF94681A764D41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/8FD9D2B5888D68B05130C2B204FF94681A764D41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/1/326130613a363034343a616337303a3a2f34342d3434203d3e20323134373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ac70::/44

    Signature Algorithm: sha256WithRSAEncryption
         81:2e:d3:18:20:24:1c:55:94:c8:a6:bd:2b:f5:c6:35:33:38:
         19:57:aa:fd:67:89:55:1b:83:05:e8:91:45:ff:fd:2e:f8:49:
         05:32:c8:96:87:fd:e4:9f:f7:93:ba:a4:66:83:50:d3:21:f2:
         bc:bd:48:ad:ce:68:3b:99:8e:3a:20:97:6a:84:6f:98:ec:37:
         1e:c3:57:0e:e4:25:7a:0e:21:29:24:3a:68:05:d8:1f:ad:9c:
         d1:32:b0:cf:da:8c:9c:88:cc:d0:8f:6d:56:ac:25:91:f9:d8:
         5a:87:6d:7a:f5:92:4b:2d:b6:c6:b2:a8:a5:f5:ce:f0:c2:41:
         41:25:e4:14:6d:b8:35:c3:9f:66:13:d3:ab:37:f5:4c:6f:22:
         c9:ea:88:d7:f0:e6:83:53:eb:f8:d3:31:c4:60:c6:b0:4c:ec:
         2f:2c:c0:37:d9:19:59:74:9c:7e:59:86:1d:f2:28:54:5a:06:
         c9:a2:8c:3a:fe:43:ef:5f:af:38:93:31:93:e0:0d:9f:2f:23:
         c7:06:f1:59:21:3d:dc:63:e3:de:d6:e4:c9:e5:dd:24:fe:01:
         88:ab:b9:79:fa:b7:6c:cf:e8:b9:50:80:8c:55:f4:97:e1:04:
         39:7b:1e:02:a6:d2:c2:6d:94:ec:c8:e6:3b:83:4d:a2:98:a4:
         cb:05:4d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----