Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363230313a3a2f34382d3438203d3e20323136323635.roa
File:                     326130373a353463373a363230313a3a2f34382d3438203d3e20323136323635.roa (raw, json)
Hash identifier:          b4qeXvVk5yQH5Ea9tuHT7B7IbjmF6RCBIVXyUhcPsWY=
Subject key identifier:   A6:A2:5B:0F:14:F8:9D:D8:36:51:19:64:70:47:5B:54:70:88:59:73
Certificate issuer:       /CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
Certificate serial:       5C945D3F5B3379A23DF419728DB7E20413CBA763
Authority key identifier: F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363230313a3a2f34382d3438203d3e20323136323635.roa
Signing time:             Fri 23 Aug 2024 17:07:57 +0000
ROA not before:           Fri 23 Aug 2024 17:02:57 +0000
ROA not after:            Fri 22 Aug 2025 17:07:57 +0000
asID:                     216265
IP address blocks:        2a07:54c7:6201::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:94:5d:3f:5b:33:79:a2:3d:f4:19:72:8d:b7:e2:04:13:cb:a7:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
        Validity
            Not Before: Aug 23 17:02:57 2024 GMT
            Not After : Aug 22 17:07:57 2025 GMT
        Subject: CN=A6A25B0F14F89DD83651196470475B5470885973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c8:2a:74:e8:73:9e:84:fc:11:2c:8c:43:3d:
                    74:f6:d5:91:c7:1b:47:c1:d5:4d:cf:7e:c1:f8:c1:
                    75:61:b4:89:e6:c5:2c:e6:ef:32:b2:fb:11:d0:ca:
                    de:76:35:55:6a:c3:6e:8e:2a:59:1a:ec:91:09:99:
                    57:be:84:d1:20:ae:ec:ae:c0:aa:6c:66:b6:a3:03:
                    2b:0e:0e:36:5b:85:27:87:7a:ce:42:06:f4:a7:2f:
                    ec:3d:a4:86:e8:ee:cb:bb:ed:46:e0:72:78:87:d7:
                    6e:3c:45:4f:c1:49:8b:ff:17:ef:90:d3:92:29:5b:
                    fc:a5:1e:a0:18:28:e4:ce:1d:6c:4b:24:b9:36:6e:
                    f6:f2:31:1c:4c:d0:ec:3f:bc:c5:13:18:91:29:75:
                    a7:f3:77:78:35:f2:3e:e5:19:39:d0:33:a6:84:cc:
                    01:57:dc:d7:bd:61:12:f2:54:57:c7:a2:0b:0b:19:
                    26:8c:7c:ae:d8:ba:14:66:d6:3f:1a:4f:c8:02:10:
                    99:57:f1:e1:6d:38:de:91:d8:dd:fe:18:de:47:fa:
                    4d:b0:a7:8d:48:1e:5f:02:8c:96:53:85:9b:93:a8:
                    9e:ae:00:20:38:ef:52:f9:b1:56:c8:61:93:af:56:
                    13:06:31:0e:fd:8d:34:fa:44:e8:14:1d:17:5c:35:
                    fd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A2:5B:0F:14:F8:9D:D8:36:51:19:64:70:47:5B:54:70:88:59:73
            X509v3 Authority Key Identifier:
                keyid:F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363230313a3a2f34382d3438203d3e20323136323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c7:6201::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:b4:93:e9:86:a0:c7:42:d4:87:6f:d3:73:64:04:e3:ac:85:
         26:41:d4:5d:8b:02:13:15:75:8c:86:64:b2:d2:05:ab:dc:c4:
         77:a4:01:7e:cc:32:8a:0f:f8:52:d4:78:5e:f2:cf:55:f7:9f:
         2d:23:79:af:d3:03:44:63:2c:c9:33:74:da:15:33:fe:38:c4:
         ee:32:31:a2:60:a6:bb:ea:0c:60:cb:38:cc:4e:12:5c:89:74:
         9f:83:9d:0e:65:b5:80:a0:44:28:4b:04:8a:ae:4b:9b:f0:e5:
         a2:88:a9:04:ac:db:c4:df:1c:7c:a5:48:f7:ea:f9:bc:46:91:
         7b:3c:1a:42:89:d8:2f:1c:60:31:aa:6d:ef:49:c1:0e:53:73:
         49:61:1a:2c:1f:3e:71:e8:ed:28:c2:65:05:92:65:64:9d:c1:
         4f:af:d5:a0:7d:72:ec:72:14:22:c7:61:49:48:0d:b1:35:04:
         54:79:15:89:36:d6:7f:12:7a:ef:1f:dd:ac:e6:a4:32:e6:d5:
         2b:85:18:3f:c7:93:e2:a9:13:97:dc:23:14:c0:4c:69:ba:e0:
         c1:de:10:73:74:3a:21:aa:58:4f:3e:74:f7:8a:80:62:22:0d:
         18:6e:ae:21:90:f0:88:c7:44:64:72:22:bb:48:08:a1:50:e6:
         9c:24:b0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----