Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363030663a3a2f34382d3438203d3e203434333331.roa
File:                     326130373a353463373a363030663a3a2f34382d3438203d3e203434333331.roa (raw, json)
Hash identifier:          XHorKGc7/QUX1L+6fHKj5gVyzQXqz/Yy9EUggzHrHGg=
Subject key identifier:   14:C3:39:F1:A5:A2:82:49:8E:0F:1D:4B:31:A7:84:80:8E:E5:6E:AE
Certificate issuer:       /CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
Certificate serial:       6122C53F7B624D1536B14AE245A5F15611390F68
Authority key identifier: F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363030663a3a2f34382d3438203d3e203434333331.roa
Signing time:             Mon 20 May 2024 22:03:45 +0000
ROA not before:           Mon 20 May 2024 21:58:45 +0000
ROA not after:            Mon 19 May 2025 22:03:45 +0000
asID:                     44331
IP address blocks:        2a07:54c7:600f::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:22:c5:3f:7b:62:4d:15:36:b1:4a:e2:45:a5:f1:56:11:39:0f:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
        Validity
            Not Before: May 20 21:58:45 2024 GMT
            Not After : May 19 22:03:45 2025 GMT
        Subject: CN=14C339F1A5A282498E0F1D4B31A784808EE56EAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fb:36:8d:70:49:1f:49:6e:03:0d:98:f5:f8:
                    5f:3a:4d:75:6a:01:87:40:d3:32:21:a6:b7:b6:4f:
                    0d:e3:88:76:15:5b:4c:6b:06:e8:e1:7a:7e:3c:47:
                    ef:42:96:ae:6b:4c:39:3d:e7:1d:5e:9a:24:7e:26:
                    c7:6c:5a:20:6d:78:3f:2b:e8:89:e9:00:6c:6d:61:
                    7b:6b:66:97:36:3c:d3:f7:52:b5:c4:42:36:f8:70:
                    42:83:52:c0:df:b3:e0:5f:33:32:8e:c6:02:55:7a:
                    5a:4a:1a:e5:e4:15:5f:12:94:ba:53:5a:76:6c:60:
                    c0:9e:cb:a9:33:e7:b1:eb:21:6b:7f:e0:e9:87:cd:
                    09:d4:f1:05:1b:51:5a:6e:89:60:c2:03:53:ec:26:
                    70:62:2f:5c:4d:16:d4:fe:89:d3:19:32:48:11:00:
                    a7:a2:ab:c6:3e:dd:28:a0:0f:1e:0b:10:24:c2:20:
                    70:4b:3c:ab:38:71:56:fc:29:23:9e:e5:46:ca:b3:
                    bd:82:e5:4b:10:bc:d0:12:1a:18:3b:00:70:92:c2:
                    0e:70:ae:8a:30:4c:41:70:42:db:ce:8a:3f:19:dc:
                    0c:60:b4:35:b2:7e:92:25:c9:c7:7f:6c:7c:26:da:
                    ba:fb:54:d7:1c:3e:2e:df:3c:a7:12:0f:a7:b5:91:
                    5f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C3:39:F1:A5:A2:82:49:8E:0F:1D:4B:31:A7:84:80:8E:E5:6E:AE
            X509v3 Authority Key Identifier:
                keyid:F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363030663a3a2f34382d3438203d3e203434333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c7:600f::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:25:44:a3:f6:93:29:ab:2b:da:3c:32:4d:ca:02:c0:fd:fc:
         3e:7b:5b:8c:7d:27:8d:bc:ef:da:08:b5:fb:28:82:fc:8b:b0:
         c3:a0:b5:80:b7:bd:3d:58:66:b8:53:84:27:ae:90:01:c1:78:
         85:77:fb:e6:53:df:48:c2:a4:a4:f3:a1:80:0e:05:8e:37:a9:
         fd:04:ad:64:76:95:d4:39:65:17:17:a2:ab:89:01:79:ca:b7:
         7a:36:26:88:08:a4:29:f0:75:da:95:e9:a0:90:37:1e:f9:7e:
         7c:c0:1a:32:c2:80:c6:c1:5b:92:8b:90:d0:79:c7:d3:34:5f:
         e4:d7:4c:0a:bf:9c:d4:f5:a1:c5:f2:31:9b:3b:b7:5f:03:20:
         55:6f:80:fe:34:b6:70:9f:63:40:3f:e1:a6:d5:43:8a:9d:e4:
         50:81:a7:5c:bb:8e:8d:e1:82:12:78:1c:d9:df:b4:30:3e:37:
         33:e7:a4:9c:9a:64:ec:2a:87:90:74:da:a6:0e:dd:3d:b5:f6:
         34:45:26:da:61:f8:d5:14:bf:d3:70:67:a8:15:60:8a:1e:6d:
         33:48:9d:56:2b:50:9f:b5:91:26:ba:41:3f:5a:ac:7c:d5:d0:
         c0:0a:cc:d4:ec:ed:c6:d0:0b:5b:9f:2b:25:a3:ff:24:ec:33:
         3d:b1:3e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----