Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363031303a3a2f34382d3438203d3e203434333331.roa
File:                     326130373a353463373a363031303a3a2f34382d3438203d3e203434333331.roa (raw, json)
Hash identifier:          Vkk+RJMZfh/on+Z68PlfWvddnmzrx0i073cGoBkfglc=
Subject key identifier:   A2:F4:DA:3B:0D:A7:6B:28:F3:09:AD:C9:C7:CA:06:D9:74:A5:E6:AB
Certificate issuer:       /CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
Certificate serial:       289B534E6E5A89EFD215D29AB7D5146AF1BDB29E
Authority key identifier: F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363031303a3a2f34382d3438203d3e203434333331.roa
Signing time:             Mon 20 May 2024 22:04:19 +0000
ROA not before:           Mon 20 May 2024 21:59:19 +0000
ROA not after:            Mon 19 May 2025 22:04:19 +0000
asID:                     44331
IP address blocks:        2a07:54c7:6010::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:9b:53:4e:6e:5a:89:ef:d2:15:d2:9a:b7:d5:14:6a:f1:bd:b2:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
        Validity
            Not Before: May 20 21:59:19 2024 GMT
            Not After : May 19 22:04:19 2025 GMT
        Subject: CN=A2F4DA3B0DA76B28F309ADC9C7CA06D974A5E6AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:88:d7:df:83:e6:05:90:a8:08:7f:99:76:6a:
                    6a:0f:e2:1c:98:7a:d3:64:46:62:ff:3a:fa:31:6f:
                    d8:2d:e7:92:86:4b:2c:7a:55:c9:2d:06:96:f3:0f:
                    0d:a5:c0:27:1f:e2:7e:e3:c2:c9:97:8d:b8:7a:19:
                    06:28:f6:96:70:7d:6c:74:d9:a1:a0:ff:ca:28:52:
                    f1:38:28:1c:84:86:83:75:6f:e8:f0:fe:9c:1b:79:
                    a3:06:a3:cb:4e:d0:db:6c:60:c0:ad:4d:53:36:67:
                    a0:f5:77:e4:69:7a:08:c4:b4:7b:50:a7:8b:26:2c:
                    87:ee:ab:2a:f1:8b:60:27:59:f6:dd:0f:fb:2b:a8:
                    22:65:7d:bd:1f:b8:02:b8:2f:04:e0:d0:5d:04:33:
                    bf:95:d2:67:90:84:29:d1:2f:32:6f:28:87:cc:b7:
                    be:b1:bf:f0:fa:b4:e9:ea:2c:75:65:75:b4:fa:e8:
                    9c:48:77:9d:65:ee:08:52:73:13:45:7a:bd:76:43:
                    9e:3f:25:b4:7b:84:19:5a:cb:4d:8d:de:8d:e9:e8:
                    b7:d3:12:8a:29:1d:a5:22:84:9b:4d:99:ed:c3:b3:
                    54:06:82:f1:61:b1:b1:40:3f:26:3c:37:a3:aa:4f:
                    e8:3b:99:a6:4a:cf:1e:cc:71:fd:13:e2:0c:a5:d4:
                    b5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F4:DA:3B:0D:A7:6B:28:F3:09:AD:C9:C7:CA:06:D9:74:A5:E6:AB
            X509v3 Authority Key Identifier:
                keyid:F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363031303a3a2f34382d3438203d3e203434333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c7:6010::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:25:76:c4:f0:df:c2:f2:b9:e2:e9:23:e9:be:21:97:a4:46:
         32:fc:c2:4e:e0:87:47:8d:10:33:ae:8e:39:ce:ec:b4:74:38:
         27:4e:6b:87:06:be:1f:9f:e8:f3:9f:65:56:33:56:05:0c:66:
         a9:b4:89:0f:ba:d9:92:7d:38:ad:5b:d4:2e:07:de:04:3f:d9:
         b6:77:b8:df:40:c2:cb:0a:0f:ac:a6:3b:40:af:5f:0c:4f:fb:
         5f:77:6c:38:1d:24:38:f1:db:dd:d6:1a:c0:35:d8:97:a1:84:
         d9:04:27:18:5d:9c:d7:9e:67:cc:ad:a2:f7:fc:b6:72:97:d0:
         d9:38:10:89:9d:56:e3:85:0b:fc:27:90:32:93:e8:27:19:61:
         35:9a:c9:bb:54:88:6a:58:df:09:4d:fa:69:ce:22:78:05:3a:
         50:45:ed:56:8a:2f:9f:d0:b3:55:7f:66:f7:8b:4f:cf:21:1c:
         96:c2:c8:4e:90:c1:c1:44:1c:d5:f8:23:93:1a:7f:74:9a:28:
         b7:5a:8b:17:31:a5:2c:c3:96:8f:ce:b2:e9:97:86:43:95:98:
         d9:b7:04:3a:ae:0f:28:dc:be:a9:c1:a0:5f:ef:78:ee:5d:e4:
         a2:26:70:62:ef:ad:25:ee:c4:8f:8d:5c:33:f0:bd:53:d3:86:
         a0:8d:85:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----