Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363131303a3a2f34342d3434203d3e20323136333630.roa
File:                     326130373a353463373a363131303a3a2f34342d3434203d3e20323136333630.roa (raw, json)
Hash identifier:          swrQFvEQd0OH6fCpb3qIXIuutWQAC9fuG4FYezTewVQ=
Subject key identifier:   A4:4A:1A:84:B7:C2:2A:E3:91:2A:68:B2:E3:99:3F:88:4A:17:0E:F5
Certificate issuer:       /CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
Certificate serial:       328370A55962B55BC00C926358C25BCF591F15EF
Authority key identifier: F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363131303a3a2f34342d3434203d3e20323136333630.roa
Signing time:             Mon 04 Mar 2024 01:06:11 +0000
ROA not before:           Mon 04 Mar 2024 01:01:11 +0000
ROA not after:            Mon 03 Mar 2025 01:06:11 +0000
asID:                     216360
IP address blocks:        2a07:54c7:6110::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:83:70:a5:59:62:b5:5b:c0:0c:92:63:58:c2:5b:cf:59:1f:15:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
        Validity
            Not Before: Mar  4 01:01:11 2024 GMT
            Not After : Mar  3 01:06:11 2025 GMT
        Subject: CN=A44A1A84B7C22AE3912A68B2E3993F884A170EF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6a:e0:64:b5:76:3c:c6:6f:c6:31:08:36:6e:
                    be:1b:2c:08:e0:99:ff:6e:45:74:c1:a7:1e:a8:29:
                    2d:ee:a4:bf:a7:46:cb:66:bf:8e:06:e6:9f:22:b8:
                    06:71:7d:10:dd:d4:db:c2:64:c7:64:57:f9:64:a0:
                    a3:64:55:14:e1:27:84:d3:0d:54:c6:19:a5:a9:f7:
                    ff:4d:d6:f9:0e:27:2d:ad:66:db:3d:6d:0c:f8:59:
                    01:ad:da:49:1b:63:99:70:f7:61:cc:22:b0:64:55:
                    99:cd:90:04:64:39:1c:3b:28:93:d6:a9:ba:8d:19:
                    c1:f2:cd:da:77:78:3b:2d:7c:f4:14:dd:66:44:19:
                    b2:3f:8a:77:76:4b:fb:be:ad:1a:56:14:5a:d5:ad:
                    ac:0b:85:79:45:d1:e1:52:59:c2:d1:4e:30:c3:9f:
                    c2:90:7a:26:bd:56:da:36:09:fb:81:db:48:ec:df:
                    25:93:48:e8:f9:2e:ff:99:d9:d2:87:ed:3a:bb:c9:
                    51:91:9f:3b:2b:4d:09:d2:c7:c9:76:f0:1a:db:ed:
                    1e:2d:58:54:97:10:1c:fb:4f:ae:f5:dc:d7:fb:dd:
                    e4:23:c7:10:2a:18:09:9d:3f:58:de:65:76:16:9a:
                    9e:68:29:69:9e:de:6f:ab:db:6c:fc:f6:d6:dd:98:
                    33:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:4A:1A:84:B7:C2:2A:E3:91:2A:68:B2:E3:99:3F:88:4A:17:0E:F5
            X509v3 Authority Key Identifier:
                keyid:F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363131303a3a2f34342d3434203d3e20323136333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c7:6110::/44

    Signature Algorithm: sha256WithRSAEncryption
         1a:71:d2:9d:8f:55:56:32:91:f9:f5:4f:0a:06:d3:54:05:de:
         30:fa:c8:81:be:73:35:24:60:cd:e9:56:33:b1:d8:c9:e2:3d:
         df:50:d4:fd:5c:18:e5:34:53:ce:79:f6:17:9e:9f:e8:d8:e7:
         2a:df:0f:9d:97:da:ae:a6:94:eb:21:ce:f2:ed:e1:79:ed:70:
         1f:40:90:9e:d7:66:4e:68:76:93:0e:dc:d3:83:7a:72:d6:90:
         dd:93:fe:64:77:9c:4d:e5:2a:4a:00:26:8c:06:21:b9:19:3d:
         73:bc:84:94:62:36:98:e6:64:bb:96:01:cb:9a:73:fa:bf:54:
         06:19:e5:82:9c:5c:6e:50:c7:24:7d:8f:9c:e8:14:0e:8c:ba:
         0c:4a:06:0e:a7:42:a2:33:9e:87:18:04:fb:04:8c:86:44:03:
         41:9c:34:3c:bb:64:d6:a3:b2:36:e8:ac:e9:09:75:61:f6:80:
         4e:46:64:48:dc:71:3a:33:21:a6:09:6a:ca:9c:ff:2b:db:3c:
         ab:0c:68:0c:8e:b7:34:41:1d:8a:6b:5f:8e:a7:30:72:fb:55:
         b1:97:19:3a:eb:0c:c3:92:7e:5f:64:7a:83:4e:83:d2:62:eb:
         f8:d4:b2:5d:37:9f:4a:bd:97:ce:67:ae:2f:04:2a:a9:0b:c5:
         09:3a:d5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----