Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3f064c2-a45d-4ab2-b1db-cf4537db6f7a/1/326130373a323438373a3a2f33322d3332203d3e20323135383238.roa
File:                     326130373a323438373a3a2f33322d3332203d3e20323135383238.roa (raw, json)
Hash identifier:          GB49F+1kBAEC3E71kx8/e+J2VoKjiy3gZuAeE0pRbVQ=
Subject key identifier:   D7:93:28:8A:A1:D3:79:E3:21:5D:2D:24:CC:DD:5A:E2:BE:73:F5:96
Certificate issuer:       /CN=72484EF62E84FA48E7A4A243EFAAF012268DBBB4
Certificate serial:       2B28FFA7948289488CCFC3B908ECEDEC61DB387D
Authority key identifier: 72:48:4E:F6:2E:84:FA:48:E7:A4:A2:43:EF:AA:F0:12:26:8D:BB:B4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/72484EF62E84FA48E7A4A243EFAAF012268DBBB4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e3f064c2-a45d-4ab2-b1db-cf4537db6f7a/1/326130373a323438373a3a2f33322d3332203d3e20323135383238.roa
Signing time:             Sat 24 Feb 2024 01:08:19 +0000
ROA not before:           Sat 24 Feb 2024 01:03:19 +0000
ROA not after:            Sat 22 Feb 2025 01:08:19 +0000
asID:                     215828
IP address blocks:        2a07:2487::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:28:ff:a7:94:82:89:48:8c:cf:c3:b9:08:ec:ed:ec:61:db:38:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72484EF62E84FA48E7A4A243EFAAF012268DBBB4
        Validity
            Not Before: Feb 24 01:03:19 2024 GMT
            Not After : Feb 22 01:08:19 2025 GMT
        Subject: CN=D793288AA1D379E3215D2D24CCDD5AE2BE73F596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:96:22:0a:dc:a5:8f:30:fb:ff:f1:7c:71:b7:
                    3c:10:63:c7:d1:33:f6:bb:b4:23:ef:3a:0b:af:70:
                    c6:25:51:18:e9:36:36:59:4a:e8:83:1e:08:b9:90:
                    b4:c2:95:de:bf:4e:c2:40:d3:ee:ae:19:bf:b0:d6:
                    dc:ff:df:f3:b6:10:6c:e5:ef:22:78:f7:78:8c:35:
                    9a:ab:98:6a:12:40:d1:d9:2a:fb:bf:3c:76:de:2a:
                    99:9a:6f:60:1d:6f:8a:4a:a6:f1:2c:04:a9:30:60:
                    d8:d0:1f:af:0f:83:7e:9c:49:7e:cd:7b:3c:11:94:
                    b7:cf:68:43:d5:15:d1:ab:75:8a:4e:3f:b0:02:c0:
                    49:9a:44:38:ec:c9:dc:55:49:25:dd:44:a0:bf:72:
                    ec:22:82:ea:e5:63:c8:81:08:00:39:45:32:c4:79:
                    c2:6d:b8:e6:03:88:4e:9a:2b:97:fd:13:f7:a8:96:
                    88:2c:a7:c7:4c:f2:bd:6f:2e:76:6d:4b:9c:bc:42:
                    df:ec:f2:ec:ab:0e:e8:bf:d8:d3:85:2a:46:e5:a9:
                    a6:71:53:a4:2b:96:0c:02:62:8c:a3:5b:81:55:6a:
                    b9:f4:d6:c3:cc:8e:f0:a4:a8:7d:8a:52:48:79:f4:
                    09:f5:6a:6e:1c:50:46:19:50:11:1c:8a:f3:5f:0d:
                    d9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:93:28:8A:A1:D3:79:E3:21:5D:2D:24:CC:DD:5A:E2:BE:73:F5:96
            X509v3 Authority Key Identifier:
                keyid:72:48:4E:F6:2E:84:FA:48:E7:A4:A2:43:EF:AA:F0:12:26:8D:BB:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e3f064c2-a45d-4ab2-b1db-cf4537db6f7a/1/72484EF62E84FA48E7A4A243EFAAF012268DBBB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/72484EF62E84FA48E7A4A243EFAAF012268DBBB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3f064c2-a45d-4ab2-b1db-cf4537db6f7a/1/326130373a323438373a3a2f33322d3332203d3e20323135383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:2487::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:2d:ed:9d:a7:9a:da:ef:cc:89:13:f3:ad:30:0d:8b:4e:8a:
         f8:d8:bd:62:2e:ce:4a:a0:a6:e9:bc:4c:db:e7:14:54:71:3a:
         f2:9e:d0:f6:e8:4d:28:0e:79:d7:09:9c:28:59:9e:7d:f4:c3:
         82:e6:06:3d:a1:11:02:6a:02:23:8e:45:66:d7:4a:8b:c7:87:
         b9:b5:35:4e:34:7f:a8:3f:01:39:19:b9:3a:42:61:58:44:26:
         a8:3c:68:87:c4:99:02:de:ee:59:ed:3a:eb:40:2b:08:ad:4c:
         df:71:2f:a0:84:3b:2f:da:91:a0:d0:9e:b2:0f:d8:15:65:06:
         b7:27:40:c1:38:76:7a:db:8c:d7:1b:48:fc:03:a7:31:02:d7:
         da:10:d6:cf:95:b4:65:6d:91:dd:c2:b0:96:dc:00:1b:a2:a3:
         ac:b2:aa:eb:c7:ae:a7:70:4c:33:2d:c9:dc:99:cc:57:0c:91:
         2b:7f:f9:e1:47:3f:b1:76:7a:17:d1:0d:3a:71:a8:6f:05:ad:
         24:1b:53:9e:2f:87:46:58:d0:a8:09:4b:98:8a:53:05:11:73:
         3a:81:0a:0b:5f:bb:a9:ac:68:a7:51:d7:f1:31:84:32:36:e4:
         52:71:de:a2:b7:20:f6:1f:2e:a5:49:38:e3:33:f5:22:e2:f6:
         f0:54:7d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----