Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363930323a3a2f34382d3438203d3e20323136313833.roa
File:                     326130373a353463373a363930323a3a2f34382d3438203d3e20323136313833.roa (raw, json)
Hash identifier:          3uofGJCRExvbJ0zh2Vas4aQhOzxLT8De7PnKvFvKV4o=
Subject key identifier:   49:EE:90:E0:8F:C9:75:9B:2C:8E:44:96:0B:D1:AE:42:5D:9F:03:87
Certificate issuer:       /CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
Certificate serial:       037567BF4E5F384B94F0056FD079F59A7C970198
Authority key identifier: F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363930323a3a2f34382d3438203d3e20323136313833.roa
Signing time:             Mon 13 May 2024 23:25:00 +0000
ROA not before:           Mon 13 May 2024 23:20:00 +0000
ROA not after:            Mon 12 May 2025 23:25:00 +0000
asID:                     216183
IP address blocks:        2a07:54c7:6902::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:75:67:bf:4e:5f:38:4b:94:f0:05:6f:d0:79:f5:9a:7c:97:01:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
        Validity
            Not Before: May 13 23:20:00 2024 GMT
            Not After : May 12 23:25:00 2025 GMT
        Subject: CN=49EE90E08FC9759B2C8E44960BD1AE425D9F0387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:fc:c0:59:34:23:87:58:29:2d:6b:08:89:a1:
                    9f:36:50:c1:84:df:26:79:0a:a3:48:ca:55:85:fd:
                    0c:17:38:8a:c0:8f:f7:bf:9b:51:b1:a3:3a:89:84:
                    c6:66:87:ce:8b:fb:0e:2a:4f:e2:2d:06:bc:b2:d9:
                    b6:90:a1:b2:b4:31:46:f2:c7:3a:41:ed:23:48:cf:
                    82:86:99:e2:96:c0:ac:99:4e:f6:08:22:ea:89:90:
                    47:be:4c:13:c9:65:63:16:63:da:cb:69:80:f3:b6:
                    a5:ee:be:69:a6:db:1f:d1:69:f3:85:f7:01:ba:92:
                    4f:1a:d9:92:e2:69:41:5e:cd:d8:ff:4f:5b:7f:b1:
                    ad:f9:0c:ec:f6:76:27:9e:8a:c8:02:9e:26:6e:51:
                    30:5b:fa:ef:21:83:a1:01:66:a5:c3:71:0d:de:46:
                    78:ff:e6:4b:0c:fb:0f:ee:48:c0:43:d4:e2:51:be:
                    b0:6b:b9:56:ab:39:3c:9d:4b:b5:eb:4e:a7:8c:11:
                    40:10:bd:19:b7:cb:dd:86:c2:62:b7:64:76:47:c0:
                    e6:f6:42:a1:9e:27:6d:3d:70:39:81:ba:b8:29:4c:
                    8b:16:ab:01:51:94:c4:ff:31:c0:c2:5e:41:d0:4f:
                    94:2a:55:fe:8b:08:4d:b3:18:72:1b:ef:94:11:e9:
                    74:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EE:90:E0:8F:C9:75:9B:2C:8E:44:96:0B:D1:AE:42:5D:9F:03:87
            X509v3 Authority Key Identifier:
                keyid:F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a363930323a3a2f34382d3438203d3e20323136313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c7:6902::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:a3:48:6f:be:ec:41:bc:77:83:88:dc:8a:97:a4:7c:16:b1:
         7a:45:a2:12:31:1b:84:5f:2e:52:52:64:ad:ca:9e:bf:b4:6f:
         91:83:d0:70:77:4e:12:03:fe:69:16:51:0b:df:74:ca:02:31:
         46:90:c8:0e:8c:05:c9:11:d4:52:d9:ea:7c:b7:9d:84:20:9c:
         cb:dc:5a:7d:cd:ee:f5:6b:dd:2a:db:60:72:83:f9:52:b7:51:
         74:5f:95:1b:74:ff:32:d1:a8:71:f9:61:a9:d4:f9:e2:0f:6d:
         9f:12:85:74:e3:7c:11:66:7c:3e:c5:c5:25:5d:dd:2c:bc:3e:
         63:f2:d8:6b:84:fe:b7:03:24:bd:0b:e3:97:fe:d2:08:79:82:
         20:6e:0a:d9:e6:bf:8c:0a:f1:47:ca:8c:44:6d:c0:ca:87:88:
         97:db:43:fc:d7:46:71:d0:b2:ca:a6:54:1f:35:c5:ed:1a:e4:
         e7:cc:d5:e7:05:e7:fb:5f:a0:5f:98:4a:16:ea:50:33:82:cc:
         db:d9:6d:8c:da:3d:0c:62:bd:3e:27:6a:07:69:30:e9:28:b9:
         6f:a5:06:46:a5:4e:22:84:36:38:0f:67:62:11:d8:08:bd:19:
         85:20:6d:1f:03:ee:9b:a3:b6:f8:b7:ee:17:1d:57:de:30:59:
         f8:7b:ef:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----