Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363930313a3a2f34382d3438203d3e20323136313833.roa
File:                     326130373a353463373a363930313a3a2f34382d3438203d3e20323136313833.roa (raw, json)
Hash identifier:          NYo5s1qbQ/1JlSrS70G5YUYg/O6TrwYn5HfSpWMmR6M=
Subject key identifier:   2B:87:DB:C0:C7:5F:9A:D8:24:C2:CB:7F:D3:4E:CD:43:3E:7D:FA:00
Certificate issuer:       /CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
Certificate serial:       0A7D225989BD4CF18E8AFA88082A0220D7278D4C
Authority key identifier: F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363930313a3a2f34382d3438203d3e20323136313833.roa
Signing time:             Mon 13 May 2024 23:25:13 +0000
ROA not before:           Mon 13 May 2024 23:20:13 +0000
ROA not after:            Mon 12 May 2025 23:25:13 +0000
asID:                     216183
IP address blocks:        2a07:54c7:6901::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:7d:22:59:89:bd:4c:f1:8e:8a:fa:88:08:2a:02:20:d7:27:8d:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
        Validity
            Not Before: May 13 23:20:13 2024 GMT
            Not After : May 12 23:25:13 2025 GMT
        Subject: CN=2B87DBC0C75F9AD824C2CB7FD34ECD433E7DFA00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:30:ce:5f:49:75:4e:1b:12:c8:56:eb:20:cf:
                    f4:d3:4c:e3:8e:ed:00:a4:e2:f6:c0:50:90:6a:fc:
                    ae:b0:df:31:87:4f:07:a9:09:67:47:c9:49:50:5e:
                    ef:8f:32:17:fb:6c:95:e4:42:38:35:93:be:55:df:
                    3d:fe:14:bc:66:92:95:b0:20:30:31:ff:a9:e0:70:
                    ba:43:e9:cd:7e:a7:0e:c0:ba:dc:2a:3b:2e:53:9d:
                    a4:4f:dd:d2:56:0f:de:1c:d4:14:41:77:39:9e:10:
                    63:b3:72:fc:c9:64:19:33:9e:10:f1:1e:c4:27:97:
                    21:be:20:b0:6f:db:b5:5d:d3:62:c6:df:35:3f:36:
                    37:7e:b3:12:30:05:b7:43:6f:75:84:a6:3c:75:b1:
                    d2:45:cb:a5:12:c6:ee:e2:fc:eb:be:7a:39:eb:46:
                    3c:6b:06:74:46:21:34:7e:ee:44:3a:92:ad:77:28:
                    3d:de:ef:e8:bb:25:4e:db:1e:a2:19:fc:68:a6:4c:
                    e4:0c:ad:45:a0:e3:07:37:ec:eb:77:1b:e2:d5:ae:
                    f8:ae:f0:46:ad:6d:4b:7c:09:b9:61:27:f5:50:a9:
                    36:1e:ef:df:dc:df:42:02:f3:34:1a:4f:d2:24:1b:
                    a8:81:88:a2:b5:8c:dd:b9:8b:25:f1:4d:23:69:38:
                    3d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:87:DB:C0:C7:5F:9A:D8:24:C2:CB:7F:D3:4E:CD:43:3E:7D:FA:00
            X509v3 Authority Key Identifier:
                keyid:F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363930313a3a2f34382d3438203d3e20323136313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c7:6901::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:d9:06:b4:80:c1:6a:fb:7c:a9:b2:93:44:a6:06:05:ed:05:
         5b:cc:f4:d8:1e:58:66:a3:a2:95:80:7e:5c:55:f5:cb:ae:a1:
         7b:b1:24:5a:06:fc:ce:63:c0:b2:1d:84:59:4c:13:21:09:63:
         e1:4b:e4:39:69:23:60:8b:a0:5b:24:c3:eb:7a:8a:e8:47:3d:
         c5:42:7f:36:4e:1d:5d:ab:41:69:ea:3f:ef:0d:4f:42:c7:38:
         4b:e1:74:e1:81:6a:4f:8d:f8:21:80:06:a6:71:cd:81:f1:e3:
         98:7a:c9:26:55:0c:12:12:a6:a2:6b:2e:74:bf:53:f7:f7:f7:
         62:5b:4c:81:24:9c:bb:a5:04:75:f7:e2:2d:3b:ff:1e:61:49:
         e5:8f:6f:82:a6:cb:3a:96:96:4c:76:df:11:5c:5a:68:e2:29:
         2f:2d:f0:4d:bf:28:a4:1a:c2:9b:91:f9:d5:bd:bb:72:fa:f0:
         c8:9d:bc:81:8c:df:5b:25:22:39:5e:6d:73:e7:ad:90:6b:e5:
         17:99:e7:49:14:40:78:fa:0d:0b:61:b4:6e:dc:c3:f1:c7:63:
         4f:a8:e5:f4:6c:94:24:a9:a3:3e:95:7f:92:77:64:cb:3a:0c:
         9c:a8:fe:74:23:88:ea:e8:09:49:60:51:20:e9:43:18:b1:29:
         da:bc:d4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----