Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e223bda5-1f94-4319-b448-83db71861695/2/326130373a353463353a313730303a3a2f34302d3438203d3e203630393030.roa
File:                     326130373a353463353a313730303a3a2f34302d3438203d3e203630393030.roa (raw, json)
Hash identifier:          v3ym2llYM/+crQtbJyklTy1oTHoYjDotbGnlyNEq4mM=
Subject key identifier:   E6:3F:E4:FA:B2:E7:31:88:49:41:48:26:6D:3F:F9:B9:A1:4E:3E:55
Certificate issuer:       /CN=F945AC7B0F93F1E0CE16B7F9C9D84D616F73EA82
Certificate serial:       040F280CF2799CEEA8B49EF1D536BD3E1362A5A1
Authority key identifier: F9:45:AC:7B:0F:93:F1:E0:CE:16:B7:F9:C9:D8:4D:61:6F:73:EA:82
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/F945AC7B0F93F1E0CE16B7F9C9D84D616F73EA82.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e223bda5-1f94-4319-b448-83db71861695/2/326130373a353463353a313730303a3a2f34302d3438203d3e203630393030.roa
Signing time:             Wed 19 Apr 2023 21:13:57 +0000
ROA not before:           Wed 19 Apr 2023 21:08:57 +0000
ROA not after:            Wed 17 Apr 2024 21:13:57 +0000
asID:                     60900
IP address blocks:        2a07:54c5:1700::/40 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:0f:28:0c:f2:79:9c:ee:a8:b4:9e:f1:d5:36:bd:3e:13:62:a5:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F945AC7B0F93F1E0CE16B7F9C9D84D616F73EA82
        Validity
            Not Before: Apr 19 21:08:57 2023 GMT
            Not After : Apr 17 21:13:57 2024 GMT
        Subject: CN=E63FE4FAB2E73188494148266D3FF9B9A14E3E55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7e:1d:8a:41:83:c2:d0:6e:d5:b2:99:a4:24:
                    c4:22:92:5b:5d:dc:8a:1c:ff:9a:55:7f:64:c5:dc:
                    33:73:f5:fe:d9:11:9a:eb:4d:16:97:13:a4:71:e2:
                    fe:13:d8:e8:8b:52:69:53:f3:49:be:9e:78:4b:57:
                    f7:b5:ce:e0:8b:6a:b5:ab:e6:c2:c2:0e:ea:07:30:
                    bd:a5:ed:9b:c6:a0:f7:f6:d1:4b:bb:41:f2:2e:22:
                    7a:e2:c7:b9:4c:8b:96:79:58:51:26:b6:98:f4:c6:
                    22:1e:a6:2e:f7:22:62:cb:04:f1:b8:cf:42:df:b4:
                    5f:57:69:7d:d4:de:e3:30:da:c1:ec:ca:4e:5c:8a:
                    12:c6:9b:e0:39:06:cc:ce:d8:74:8c:04:cd:e1:63:
                    bf:ca:bb:57:c9:28:9b:47:e2:98:76:a2:c8:7e:ee:
                    c3:ab:cb:b0:b3:10:a9:7d:ec:1b:44:ab:0e:c4:53:
                    b6:e6:31:2d:ce:a0:1f:73:7f:f9:f8:8c:bb:2e:c3:
                    ae:8b:f1:78:01:71:bc:10:0a:fd:a0:7f:2a:5e:4a:
                    4c:9a:c5:98:e4:6e:d8:4a:71:6e:21:a3:cb:9c:9f:
                    72:49:dd:e1:15:2e:71:5b:c7:72:b2:27:aa:dc:35:
                    94:5a:b2:dc:7c:af:62:57:5c:41:23:ac:6d:6c:2e:
                    1a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3F:E4:FA:B2:E7:31:88:49:41:48:26:6D:3F:F9:B9:A1:4E:3E:55
            X509v3 Authority Key Identifier:
                keyid:F9:45:AC:7B:0F:93:F1:E0:CE:16:B7:F9:C9:D8:4D:61:6F:73:EA:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e223bda5-1f94-4319-b448-83db71861695/2/F945AC7B0F93F1E0CE16B7F9C9D84D616F73EA82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/F945AC7B0F93F1E0CE16B7F9C9D84D616F73EA82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e223bda5-1f94-4319-b448-83db71861695/2/326130373a353463353a313730303a3a2f34302d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c5:1700::/40

    Signature Algorithm: sha256WithRSAEncryption
         98:85:39:ca:5d:99:97:2e:82:f1:89:9b:2a:f0:45:22:64:4b:
         a0:72:15:2b:85:29:b8:c0:c4:cb:b1:3c:96:f5:ac:1b:ac:d3:
         f2:c7:0e:61:b0:f4:84:1a:30:66:99:66:99:c6:5f:64:69:b3:
         68:59:8c:02:8b:35:ba:f9:f5:d0:b6:3b:b0:db:c0:47:8b:dd:
         d2:49:a2:bd:76:86:08:39:be:95:84:ee:7f:43:e3:10:d7:86:
         7e:37:ba:2c:b1:70:38:39:a8:05:d7:42:43:fd:e2:14:0d:b3:
         37:c3:05:2b:2b:45:09:e7:42:bc:5f:1b:78:d0:71:cd:c0:13:
         63:e5:f6:df:94:04:bc:36:dd:68:63:6f:4a:81:e5:97:bd:3f:
         ec:9b:99:42:43:e8:7c:4d:3e:eb:e0:d9:9d:70:53:2f:00:75:
         ac:00:12:9a:ad:22:ed:34:dc:b4:8f:d5:a5:d7:9b:cc:92:fc:
         51:c6:ca:86:be:8a:40:b0:7a:99:22:20:2c:22:ae:0a:9c:54:
         b6:82:d4:07:b4:0b:0d:b8:17:f7:7c:4e:f8:bc:4d:02:4b:33:
         9f:b0:7b:64:0e:b8:b4:e7:de:9b:b6:c0:41:b1:e0:e5:77:4e:
         fc:6d:c8:a6:02:1d:fd:a5:0d:7a:62:eb:c4:2b:66:c3:ea:cf:
         d4:7a:b7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----