Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363030343a3a2f34382d3438203d3e20313938393233.roa
File:                     326130373a353463373a363030343a3a2f34382d3438203d3e20313938393233.roa (raw, json)
Hash identifier:          pVF7JYh0i9d7VlItCIJve18pBgfhTEEhxYWcSM8reOs=
Subject key identifier:   0F:DC:FE:B6:65:6D:38:EE:1F:DE:ED:73:D2:89:60:90:65:50:71:74
Certificate issuer:       /CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
Certificate serial:       49649BC4EE093CA0ECD5ECAB0238D7B871519D68
Authority key identifier: F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363030343a3a2f34382d3438203d3e20313938393233.roa
Signing time:             Mon 04 Mar 2024 00:55:50 +0000
ROA not before:           Mon 04 Mar 2024 00:50:50 +0000
ROA not after:            Mon 03 Mar 2025 00:55:50 +0000
asID:                     198923
IP address blocks:        2a07:54c7:6004::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:64:9b:c4:ee:09:3c:a0:ec:d5:ec:ab:02:38:d7:b8:71:51:9d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
        Validity
            Not Before: Mar  4 00:50:50 2024 GMT
            Not After : Mar  3 00:55:50 2025 GMT
        Subject: CN=0FDCFEB6656D38EE1FDEED73D289609065507174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:16:1b:20:1c:18:49:1a:ac:9e:b9:dc:6c:16:
                    f5:12:ae:4c:8b:ae:56:97:54:6d:72:48:92:f6:19:
                    55:fa:5e:56:1c:3a:37:03:2e:2b:a9:df:78:81:5b:
                    d5:60:19:d9:59:ac:43:04:b2:91:1d:b7:d1:fb:6d:
                    11:b8:da:d9:a4:31:50:db:1b:96:41:1a:f3:08:49:
                    0b:03:d5:0c:29:a3:43:2f:8b:e1:21:7d:cf:2d:0f:
                    74:c9:2c:64:c4:7a:94:06:0f:a3:6f:e2:ea:c8:fa:
                    b8:ca:5d:8f:82:0b:48:e3:bd:ef:4e:54:82:ee:b8:
                    fd:3f:ad:e6:8e:79:f1:0c:e2:f5:79:df:77:91:a5:
                    af:c5:eb:a4:29:d0:73:b4:02:e2:de:b7:58:1d:db:
                    1d:1d:ee:b5:6a:e4:4e:13:09:d5:8a:9f:85:dc:5d:
                    c1:c5:df:59:e4:29:5a:00:d4:fe:f5:e7:0f:1d:f1:
                    50:89:21:b0:4a:fa:7f:ac:36:41:c4:3a:8e:98:ed:
                    ee:59:f9:62:76:28:5c:50:5d:4c:05:e9:e8:6b:14:
                    53:7b:b8:d4:c6:6c:a3:71:26:b7:25:62:ee:16:5f:
                    f7:9a:f2:54:2c:f4:dd:d2:e0:d3:1a:0b:2f:e3:52:
                    c2:2f:e0:7c:64:4b:4d:ed:e3:24:56:35:76:81:9d:
                    1b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:DC:FE:B6:65:6D:38:EE:1F:DE:ED:73:D2:89:60:90:65:50:71:74
            X509v3 Authority Key Identifier:
                keyid:F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363030343a3a2f34382d3438203d3e20313938393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c7:6004::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:c4:05:b7:01:f5:d9:c1:cb:9b:5c:eb:e7:b6:b7:94:a8:04:
         dc:c2:52:ac:51:b9:6d:00:ce:57:1b:91:1a:af:f0:08:75:1d:
         be:e0:74:44:ed:33:2e:f0:a7:19:43:09:d9:21:91:3f:49:b3:
         ca:18:1b:ef:7d:df:bc:4f:aa:58:02:67:a7:06:93:11:28:06:
         6b:b1:82:38:bf:1b:06:85:94:64:d4:86:dc:47:7f:b8:7d:7f:
         e2:4e:4b:29:ce:c4:70:be:1d:82:66:83:07:1f:b3:e0:42:44:
         8b:8b:01:37:45:76:c6:59:1c:b0:9b:b7:15:0d:b5:4b:d2:45:
         67:69:c5:cf:af:87:1e:f1:b4:91:2f:06:e4:94:a4:d9:fb:85:
         a6:7c:22:54:c4:a1:fb:50:12:97:aa:59:cf:b1:f3:5d:88:7a:
         22:ff:45:68:0f:1c:38:c4:e3:f6:cb:2f:78:91:c9:df:d7:aa:
         31:6a:39:c4:62:a6:3a:55:1b:6f:9d:4e:f9:cc:4f:2d:4d:0f:
         8b:3f:fa:5f:83:df:68:a4:16:75:f1:26:fa:ae:80:76:b4:1e:
         d6:e7:0d:2a:9c:6c:20:66:39:0a:fe:94:4b:19:ca:37:9a:ef:
         03:f3:e8:9e:fa:44:80:ed:55:59:d9:45:2a:b6:83:17:2f:18:
         e0:9a:11:9c
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUSWSbxO4JPKDs1eyrAjjXuHFRnWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFBQkQ5NDI5RjNBNzMzNjY4Q0FDNjk4QzExM0E5RTM0
M0M5OUIzRTAeFw0yNDAzMDQwMDUwNTBaFw0yNTAzMDMwMDU1NTBaMDMxMTAvBgNV
BAMTKDBGRENGRUI2NjU2RDM4RUUxRkRFRUQ3M0QyODk2MDkwNjU1MDcxNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJFhsgHBhJGqyeudxsFvUSrkyL
rlaXVG1ySJL2GVX6XlYcOjcDLiup33iBW9VgGdlZrEMEspEdt9H7bRG42tmkMVDb
G5ZBGvMISQsD1Qwpo0Mvi+Ehfc8tD3TJLGTEepQGD6Nv4urI+rjKXY+CC0jjve9O
VILuuP0/reaOefEM4vV533eRpa/F66Qp0HO0AuLet1gd2x0d7rVq5E4TCdWKn4Xc
XcHF31nkKVoA1P715w8d8VCJIbBK+n+sNkHEOo6Y7e5Z+WJ2KFxQXUwF6ehrFFN7
uNTGbKNxJrclYu4WX/ea8lQs9N3S4NMaCy/jUsIv4HxkS03t4yRWNXaBnRuvAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUD9z+tmVtOO4f3u1z0olgkGVQcXQwHwYDVR0j
BBgwFoAU8avZQp86czZoysaYwROp40PJmz4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjUzNmExZTQtM2JmMC00MzUyLTkwNjEtNjY2OTRkMmJj
YmQzLzAvRjFBQkQ5NDI5RjNBNzMzNjY4Q0FDNjk4QzExM0E5RTM0M0M5OUIzRS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk
YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC9GMUFCRDk0MjlGM0E3MzM2NjhDQUM2OThD
MTEzQTlFMzQzQzk5QjNFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9mNTM2YTFlNC0zYmYwLTQzNTItOTA2MS02NjY5NGQyYmNiZDMvMC8zMjYxMzAz
NzNhMzUzNDYzMzczYTM2MzAzMDM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEz
OTM4MzkzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKgdUx2AEMA0GCSqGSIb3DQEBCwUAA4IBAQBh
xAW3AfXZwcubXOvntreUqATcwlKsUbltAM5XG5Ear/AIdR2+4HRE7TMu8KcZQwnZ
IZE/SbPKGBvvfd+8T6pYAmenBpMRKAZrsYI4vxsGhZRk1IbcR3+4fX/iTkspzsRw
vh2CZoMHH7PgQkSLiwE3RXbGWRywm7cVDbVL0kVnacXPr4ce8bSRLwbklKTZ+4Wm
fCJUxKH7UBKXqlnPsfNdiHoi/0VoDxw4xOP2yy94kcnf16oxajnEYqY6VRtvnU75
zE8tTQ+LP/pfg99opBZ18Sb6roB2tB7W5w0qnGwgZjkK/pRLGco3mu8D8+ie+kSA
7VVZ2UUqtoMXLxjgmhGc
-----END CERTIFICATE-----