Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363030633a3a2f34382d3438203d3e20323135353232.roa
File:                     326130373a353463373a363030633a3a2f34382d3438203d3e20323135353232.roa (raw, json)
Hash identifier:          q0SrNodPl7dsJULMvVPcjXYF2+Cg6ESzo8La5N79Dss=
Subject key identifier:   93:3D:FE:51:48:7D:45:1A:70:F5:49:E2:6D:12:9A:45:10:30:0D:46
Certificate issuer:       /CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
Certificate serial:       5EAB6EEAD8A2962EC0098F9E634864ED332AC7B9
Authority key identifier: F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363030633a3a2f34382d3438203d3e20323135353232.roa
Signing time:             Sun 10 Mar 2024 17:06:30 +0000
ROA not before:           Sun 10 Mar 2024 17:01:30 +0000
ROA not after:            Sun 09 Mar 2025 17:06:30 +0000
asID:                     215522
IP address blocks:        2a07:54c7:600c::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ab:6e:ea:d8:a2:96:2e:c0:09:8f:9e:63:48:64:ed:33:2a:c7:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
        Validity
            Not Before: Mar 10 17:01:30 2024 GMT
            Not After : Mar  9 17:06:30 2025 GMT
        Subject: CN=933DFE51487D451A70F549E26D129A4510300D46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f5:11:c7:8b:cc:92:43:02:dd:91:0d:c5:41:
                    c0:25:37:55:95:ac:8e:a0:94:ec:10:7d:56:4b:28:
                    85:98:17:4d:24:35:47:08:b5:2b:93:09:74:a0:51:
                    1e:cd:28:ef:60:ba:85:8f:4b:c2:78:e5:3a:2f:b3:
                    58:89:fb:7a:6e:9b:14:ac:28:18:3d:6e:6f:05:5a:
                    3e:6c:5c:d5:15:8f:7c:57:a4:98:a5:97:c4:37:15:
                    7e:25:f0:68:5f:30:ff:51:64:38:1c:ba:0f:74:6d:
                    8d:cb:2b:2b:d7:51:2f:1e:59:04:ac:26:dd:74:0e:
                    cb:7b:71:d5:6a:c2:bb:53:7f:d0:ab:a4:a9:f2:e8:
                    32:5c:0f:7b:d8:6d:4e:8c:83:89:f5:c0:15:1a:f7:
                    af:4d:83:a7:8a:9f:02:4d:f6:3e:bd:a0:92:57:ee:
                    79:da:38:66:e3:be:45:c2:f1:63:f7:81:b1:97:0a:
                    18:9e:17:30:3d:72:fa:86:21:84:2f:89:0d:44:24:
                    5a:14:01:ef:e2:0a:53:1e:b7:1b:39:87:42:e5:9b:
                    79:54:04:f0:34:c7:da:18:42:10:a4:15:11:81:48:
                    4e:ce:eb:d8:9f:e0:a6:72:a6:cc:f8:55:86:0a:2c:
                    28:05:89:03:b6:82:9d:2d:c7:c6:d3:3d:f0:69:fe:
                    e8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:3D:FE:51:48:7D:45:1A:70:F5:49:E2:6D:12:9A:45:10:30:0D:46
            X509v3 Authority Key Identifier:
                keyid:F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363030633a3a2f34382d3438203d3e20323135353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c7:600c::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:a5:da:8a:ad:ca:c9:8d:e6:8f:a6:a5:6a:bf:3f:36:9f:b9:
         4f:88:f6:ef:bf:07:c4:e2:b2:34:3a:86:a6:b5:7f:f6:42:e1:
         68:e7:f3:cc:35:d1:3f:21:4d:92:22:57:fc:e5:4f:15:be:53:
         28:62:96:a3:53:a2:27:dc:39:8d:50:40:78:fa:b8:b4:53:08:
         21:b3:bf:7b:5f:92:76:7a:31:24:e4:2f:f6:89:c0:55:a9:58:
         33:26:12:1e:4d:07:9a:1f:c0:03:38:3b:ce:cc:87:dd:c8:86:
         19:4c:a6:21:80:c9:33:4e:67:b2:64:8e:3d:80:56:2c:58:77:
         b7:db:fa:d5:b4:c6:19:fa:6e:5c:e5:2d:d4:81:77:27:b2:5f:
         ae:59:a2:f2:b0:c2:cb:af:80:0e:7a:a3:76:95:74:23:76:81:
         f5:b9:d9:88:c6:d6:e0:4a:da:f6:db:07:93:c3:a5:08:47:7c:
         e7:6f:6e:8c:47:6e:28:02:41:ba:44:b9:79:3e:86:cf:66:df:
         e6:fe:49:a0:b8:b1:ea:b8:c9:b1:68:d2:4c:35:ef:f5:e4:1c:
         c0:5a:b3:0c:ec:6c:d7:a0:12:80:1f:cc:3a:02:87:0f:a0:bb:
         5e:0b:e2:e6:08:9b:66:f8:7e:4e:f8:9c:91:97:d8:90:3a:90:
         6b:9f:9c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----