Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363030383a3a2f34382d3438203d3e20313938303537.roa
File:                     326130373a353463373a363030383a3a2f34382d3438203d3e20313938303537.roa (raw, json)
Hash identifier:          l1jgXoaVcj6yZLMubHkGx5QfRcCJ1Ls/71jQJrcH/iI=
Subject key identifier:   42:06:8B:C2:56:25:C1:C0:95:19:E8:5B:03:0B:34:75:1D:2A:F0:A0
Certificate issuer:       /CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
Certificate serial:       79D35B6C15397295DEF1DC99593575C4F919237C
Authority key identifier: F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363030383a3a2f34382d3438203d3e20313938303537.roa
Signing time:             Mon 04 Mar 2024 01:04:44 +0000
ROA not before:           Mon 04 Mar 2024 00:59:44 +0000
ROA not after:            Mon 03 Mar 2025 01:04:44 +0000
asID:                     198057
IP address blocks:        2a07:54c7:6008::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d3:5b:6c:15:39:72:95:de:f1:dc:99:59:35:75:c4:f9:19:23:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
        Validity
            Not Before: Mar  4 00:59:44 2024 GMT
            Not After : Mar  3 01:04:44 2025 GMT
        Subject: CN=42068BC25625C1C09519E85B030B34751D2AF0A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:96:2f:a3:3f:d7:6a:c5:dd:a3:06:5b:c6:8e:
                    62:69:6a:ee:26:45:36:36:43:3b:97:fa:4f:6f:6a:
                    85:02:fd:f2:e4:9d:01:6b:d1:fa:1b:ae:03:d8:f4:
                    5a:0e:44:0d:28:82:19:6c:63:c5:56:6e:a1:68:8e:
                    d6:a6:53:a8:1c:65:e8:fc:5b:f0:f3:d7:07:55:12:
                    0d:f9:85:20:f8:3f:b4:92:fc:d9:aa:00:0d:9f:ce:
                    a2:af:4f:f7:a1:52:a3:02:e2:1a:9e:b3:b2:cf:1d:
                    e1:44:0a:34:f6:91:bd:e9:70:9d:c1:fa:ef:a4:66:
                    29:6a:a0:9a:f8:6e:54:e6:78:c5:36:2e:9a:de:af:
                    0f:38:87:93:4c:1d:95:40:26:bc:fb:40:f7:c2:8c:
                    09:e4:bf:e6:c8:00:d2:c5:78:bd:76:a2:f7:76:9b:
                    0c:d4:69:e1:5a:b5:74:9f:b9:3b:93:88:02:25:eb:
                    65:e6:c7:2e:65:f0:59:48:31:5d:0a:7c:05:39:f2:
                    91:20:74:0c:61:20:a6:43:11:81:ef:c2:3b:7f:d8:
                    45:74:a8:19:f6:bc:f6:56:cf:cd:c2:27:cc:48:4f:
                    f5:cc:5f:6b:35:72:7e:1c:78:ff:c3:b1:5e:3b:47:
                    de:ad:1b:1f:bc:65:05:ba:12:94:28:11:a1:1e:ac:
                    3e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:06:8B:C2:56:25:C1:C0:95:19:E8:5B:03:0B:34:75:1D:2A:F0:A0
            X509v3 Authority Key Identifier:
                keyid:F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363030383a3a2f34382d3438203d3e20313938303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c7:6008::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:34:e8:3c:05:64:98:49:d5:68:d4:ce:b0:3c:0a:df:a8:03:
         81:63:df:fc:a9:1a:55:c7:74:09:16:87:87:41:47:26:3a:d0:
         91:74:65:dd:64:ea:24:9d:2f:05:25:13:79:e3:4b:43:88:3f:
         d4:e4:02:6c:88:7d:26:cb:06:25:77:19:9f:74:18:80:0e:17:
         8e:a9:51:e0:39:f7:f6:26:de:0e:24:f2:8e:f7:e7:2d:40:85:
         13:4f:ad:77:e4:72:2d:11:ff:35:fd:81:73:be:20:6f:01:03:
         bb:d4:27:5e:d5:b9:9a:c6:23:e5:b0:c8:3e:47:c3:d0:3f:74:
         c0:a0:ae:2c:92:0d:24:54:0a:92:d6:7e:21:ab:84:e8:bf:56:
         e7:d5:6f:f5:3e:5a:51:de:5b:ee:9a:ec:bf:ea:7a:79:07:0d:
         e2:f3:22:f9:1c:67:9b:c5:a0:81:96:18:10:a8:b9:60:d1:7a:
         74:db:c3:d0:ca:99:96:d3:8e:fa:2f:b2:47:a5:d4:05:70:89:
         2e:4d:c5:1d:86:59:6f:af:df:fa:dd:6a:9f:6d:df:f4:34:f2:
         09:9a:2d:71:d9:07:c0:5d:23:c1:27:9a:59:20:b8:fa:20:c7:
         37:94:71:00:4b:26:b3:6f:8e:f6:45:a7:1a:85:64:6b:91:78:
         c8:20:b3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----