Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363430303a3a2f34302d3430203d3e20313939373633.roa
File:                     326130373a353463373a363430303a3a2f34302d3430203d3e20313939373633.roa (raw, json)
Hash identifier:          o4x7ODdf1n+0icm+FCL2y9haOewqM2Xk34MmCyJrvms=
Subject key identifier:   1B:CD:46:F8:AF:5A:95:7F:B1:23:0F:90:C7:7C:A2:1B:39:A8:C5:33
Certificate issuer:       /CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
Certificate serial:       3CC40B67314B15B07585BB1ED8DE5E94350A879F
Authority key identifier: F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363430303a3a2f34302d3430203d3e20313939373633.roa
Signing time:             Fri 23 Aug 2024 17:01:04 +0000
ROA not before:           Fri 23 Aug 2024 16:56:04 +0000
ROA not after:            Fri 22 Aug 2025 17:01:04 +0000
asID:                     199763
IP address blocks:        2a07:54c7:6400::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c4:0b:67:31:4b:15:b0:75:85:bb:1e:d8:de:5e:94:35:0a:87:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
        Validity
            Not Before: Aug 23 16:56:04 2024 GMT
            Not After : Aug 22 17:01:04 2025 GMT
        Subject: CN=1BCD46F8AF5A957FB1230F90C77CA21B39A8C533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:85:49:2b:03:35:70:a8:7a:d5:0c:10:18:56:
                    b9:ea:52:b8:74:07:5f:a7:e1:3d:fe:93:26:64:10:
                    3a:aa:bd:43:93:10:1b:2b:6b:09:76:a5:84:a4:5f:
                    80:b2:57:ba:01:e7:86:dd:70:67:cf:b8:08:87:00:
                    d3:19:c1:c6:dd:fc:8b:a8:85:06:72:1b:6d:0a:77:
                    c6:28:33:71:e5:f8:d5:1d:42:aa:b2:bd:4d:a9:55:
                    6c:ce:e2:54:e5:a0:58:7b:4f:86:8f:82:0b:63:c4:
                    53:0d:80:b9:3e:7f:94:a7:1a:7a:77:10:d7:a6:61:
                    cf:f3:91:37:d8:ee:d4:1c:ca:35:30:ab:86:61:49:
                    65:5b:7a:f5:b7:49:ba:55:e6:a1:63:bb:eb:c2:43:
                    26:ad:3a:5a:7b:5d:b6:3d:e5:8a:0c:19:31:60:fd:
                    88:0e:fb:30:8a:72:4b:72:de:ff:f7:ee:54:ab:2c:
                    27:91:30:82:33:35:7a:d8:29:45:17:d8:e8:77:29:
                    6e:f6:16:19:c1:60:d8:1b:8d:a6:04:06:ff:91:9e:
                    84:7e:6d:26:12:19:ae:55:b7:35:41:66:42:12:4b:
                    68:89:f5:fb:0f:e1:d4:3d:75:7d:30:fd:70:2b:4a:
                    fa:a8:fe:c7:cd:e8:eb:8a:1d:21:48:39:23:ef:5c:
                    e7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CD:46:F8:AF:5A:95:7F:B1:23:0F:90:C7:7C:A2:1B:39:A8:C5:33
            X509v3 Authority Key Identifier:
                keyid:F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363430303a3a2f34302d3430203d3e20313939373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c7:6400::/40

    Signature Algorithm: sha256WithRSAEncryption
         28:d7:97:83:e6:1d:40:e7:87:24:53:0d:06:13:df:88:68:49:
         be:77:b1:26:67:78:6d:f6:18:8a:1a:ff:02:0f:03:ed:11:c3:
         0f:b0:f2:d5:64:28:04:8f:36:27:d4:2e:73:2c:20:57:6a:a3:
         00:94:ff:03:dc:3a:8e:c2:38:75:fc:4f:24:22:04:1a:4d:92:
         70:45:92:eb:ee:29:d4:17:08:20:6d:b9:ce:fc:9e:2a:61:6a:
         fa:ea:91:38:73:a7:76:7b:60:48:d5:7f:c9:73:71:c3:7c:9a:
         f4:f0:48:8b:d6:ef:f1:8d:58:db:2e:bb:8e:d8:83:f1:70:ab:
         63:17:15:64:14:6a:af:5d:36:32:22:09:a9:bc:15:4e:14:cd:
         d0:24:65:4b:84:22:a8:a2:0c:ed:01:27:d9:ab:eb:50:75:d2:
         6c:33:5d:c2:4c:2b:11:72:b7:33:df:e0:8d:28:9c:8d:cb:3e:
         94:dc:64:f8:8c:6c:fa:34:d6:de:d0:89:00:13:5f:98:d0:fe:
         11:91:a9:00:d3:3c:6c:f6:03:ba:3c:3e:fd:f9:e1:6c:a6:21:
         3f:fe:c2:d6:ff:0c:56:31:b8:45:6a:b8:32:e9:1e:02:46:c6:
         a7:ea:5e:7a:6e:34:4f:86:c9:b2:9b:90:99:16:ef:22:c6:eb:
         f7:45:8a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----