Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363030613a3a2f34382d3438203d3e20323033303639.roa
File:                     326130373a353463373a363030613a3a2f34382d3438203d3e20323033303639.roa (raw, json)
Hash identifier:          sAuBr7KifoTsavN1yyCV7AeAnhSSPwTsUtde7ESKu6Q=
Subject key identifier:   D6:7B:F8:82:87:7A:14:C1:5E:73:ED:32:63:51:54:36:14:7D:29:47
Certificate issuer:       /CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
Certificate serial:       0A47CA6D6CE3538B8416FAEF10F5AC7A39ECFE2D
Authority key identifier: F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363030613a3a2f34382d3438203d3e20323033303639.roa
Signing time:             Mon 04 Mar 2024 01:05:14 +0000
ROA not before:           Mon 04 Mar 2024 01:00:14 +0000
ROA not after:            Mon 03 Mar 2025 01:05:14 +0000
asID:                     203069
IP address blocks:        2a07:54c7:600a::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:47:ca:6d:6c:e3:53:8b:84:16:fa:ef:10:f5:ac:7a:39:ec:fe:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
        Validity
            Not Before: Mar  4 01:00:14 2024 GMT
            Not After : Mar  3 01:05:14 2025 GMT
        Subject: CN=D67BF882877A14C15E73ED3263515436147D2947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:7c:41:95:76:b9:13:bc:7a:4a:6d:aa:b0:eb:
                    60:d2:7f:0f:8a:3c:ee:ff:5c:04:15:c4:e0:19:89:
                    2b:e2:0d:8f:36:59:65:97:03:8a:42:7d:27:d6:35:
                    c5:68:6f:0b:e5:22:b5:75:48:d1:da:3e:09:11:62:
                    4d:ce:e5:3b:c7:40:16:e3:dd:26:5a:f1:9c:b9:ea:
                    da:e3:5d:c1:1f:9d:61:ac:f9:e5:f0:fd:61:f2:f9:
                    b6:60:e4:26:c1:be:11:f9:c9:f1:e8:d6:74:4a:69:
                    61:e1:fd:dd:58:c0:28:8b:60:c1:9e:9c:f8:e7:02:
                    9a:8a:2e:e1:39:78:b2:b9:a9:e6:4e:94:95:5b:c9:
                    89:6b:90:11:4f:26:04:72:bb:ac:3d:82:7a:0c:ff:
                    23:32:38:c7:bc:eb:c0:40:52:bc:86:57:5e:fa:b5:
                    ac:11:0a:c7:5b:d1:26:48:1e:5f:1e:fa:9c:05:45:
                    cd:c5:de:42:30:2c:13:02:4c:09:85:1c:27:57:d9:
                    c9:72:2d:21:12:8f:68:48:16:83:83:9d:de:e2:ae:
                    af:16:c6:3e:e4:79:19:9f:53:18:ec:0a:7c:e5:d6:
                    1e:7d:71:11:4e:e3:98:97:90:24:eb:18:02:74:4b:
                    3a:fb:0d:c1:b7:17:c0:7f:2b:4b:b9:3a:a0:60:ef:
                    e4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7B:F8:82:87:7A:14:C1:5E:73:ED:32:63:51:54:36:14:7D:29:47
            X509v3 Authority Key Identifier:
                keyid:F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363030613a3a2f34382d3438203d3e20323033303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c7:600a::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:17:72:05:4f:b1:44:7f:d5:ea:a0:74:73:2c:43:8f:b9:d2:
         fa:86:16:f9:0c:6d:ea:d6:e6:a6:14:56:03:ec:8c:59:f9:bd:
         dc:71:2a:ca:7f:95:4c:ee:37:53:43:b8:45:2e:d1:d8:9e:32:
         52:18:d8:80:e8:34:04:a0:b1:d9:e5:9d:24:24:24:b1:b1:b1:
         bc:bd:f8:d0:0b:3a:53:3d:c7:05:60:6e:57:38:24:46:f9:66:
         64:3e:8c:7f:1a:03:4a:c2:9f:9d:a8:76:90:32:09:af:6c:b5:
         ad:ba:20:7d:7c:14:a6:ee:0f:59:22:1e:30:4e:42:40:f0:70:
         33:db:4e:c4:a0:c6:04:7f:e3:9b:b5:e1:5b:0a:63:71:17:cc:
         05:76:cb:38:fb:5f:d9:4d:9d:30:24:59:d6:61:da:a2:1f:c1:
         1f:65:74:cf:90:f5:84:50:59:f9:cd:dd:c7:9b:50:26:77:8d:
         76:6b:31:e3:d3:0d:eb:a7:4f:d6:ad:7d:c8:3e:96:1b:df:7d:
         d4:db:3f:a5:58:fa:61:e9:4d:6c:66:c9:b5:60:ce:49:f1:a6:
         12:b6:2d:7b:c0:a2:5e:bf:f1:ae:30:6f:8e:57:55:48:0b:89:
         df:52:0a:fa:47:61:30:57:c2:43:49:d1:34:bb:9b:46:9b:95:
         3a:38:2b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----