Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a366438303a3a2f34322d3432203d3e20323136333630.roa
File:                     326130373a353463373a366438303a3a2f34322d3432203d3e20323136333630.roa (raw, json)
Hash identifier:          Bg89tHGoWVsdePik4nAA2+6g5eoDQ7ZZpARcfmXpjeE=
Subject key identifier:   E8:F8:02:A1:33:5E:D8:44:38:8B:9D:4C:D1:2C:52:2C:8E:4E:9E:F5
Certificate issuer:       /CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
Certificate serial:       2F97A639BF06236825E5F5F21D7E17DDD7C32D79
Authority key identifier: F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a366438303a3a2f34322d3432203d3e20323136333630.roa
Signing time:             Mon 04 Mar 2024 01:07:02 +0000
ROA not before:           Mon 04 Mar 2024 01:02:02 +0000
ROA not after:            Mon 03 Mar 2025 01:07:02 +0000
asID:                     216360
IP address blocks:        2a07:54c7:6d80::/42 maxlen: 42

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:97:a6:39:bf:06:23:68:25:e5:f5:f2:1d:7e:17:dd:d7:c3:2d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
        Validity
            Not Before: Mar  4 01:02:02 2024 GMT
            Not After : Mar  3 01:07:02 2025 GMT
        Subject: CN=E8F802A1335ED844388B9D4CD12C522C8E4E9EF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b6:f0:71:5c:4c:4a:f8:f8:f5:99:1f:42:a4:
                    b6:20:8a:34:81:63:9e:b3:88:53:46:4c:bc:f1:3b:
                    4e:ce:29:32:6f:67:c1:18:c9:29:82:de:01:09:2b:
                    15:c4:b9:8f:33:d1:77:36:52:0a:c0:ef:67:4e:3b:
                    d5:ed:bd:bb:24:65:3a:d6:5e:1a:13:3a:04:8c:8d:
                    5d:ce:2b:9d:72:43:00:93:7c:6f:be:fe:52:24:14:
                    0b:9a:a0:48:86:73:6d:f6:20:c2:54:73:bb:b9:a5:
                    64:74:06:15:d1:ea:0b:fe:83:77:33:14:77:a8:ba:
                    21:f1:f3:ed:18:21:47:3e:6a:67:2c:26:cf:72:9a:
                    73:cb:7b:52:98:68:70:a9:ff:ea:dd:c7:09:7d:31:
                    a3:18:aa:9e:3b:25:49:c3:a3:0d:01:ac:e6:31:40:
                    b8:19:03:37:b2:dd:9b:33:44:d9:ba:e3:89:61:2b:
                    ea:d7:f4:9a:b2:dc:61:4a:25:78:ab:e2:00:be:68:
                    2d:ca:7d:21:3b:72:b8:22:57:a7:9d:ae:34:d7:6d:
                    ce:51:8f:16:68:21:c8:ce:d7:30:cd:b2:a6:8c:4d:
                    a9:f7:eb:41:d6:ef:c5:8f:11:6f:98:05:c4:7e:3d:
                    9e:e2:8f:9f:62:a1:fb:8d:4f:fd:c8:76:df:1f:ca:
                    cc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F8:02:A1:33:5E:D8:44:38:8B:9D:4C:D1:2C:52:2C:8E:4E:9E:F5
            X509v3 Authority Key Identifier:
                keyid:F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a366438303a3a2f34322d3432203d3e20323136333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c7:6d80::/42

    Signature Algorithm: sha256WithRSAEncryption
         ac:89:a3:c8:f5:42:72:48:c0:5a:97:b3:4c:60:cb:04:10:ef:
         2f:21:d8:26:e6:36:9f:20:94:43:7c:6b:5e:61:3a:17:92:c2:
         38:bd:41:80:88:87:f4:60:7d:ee:72:27:a0:1a:fa:a4:20:87:
         21:e8:9d:f6:a2:98:75:3d:66:33:95:45:66:13:84:c3:99:94:
         0a:52:d3:d2:a6:dd:e7:ca:5a:09:12:a7:96:53:11:9d:ce:55:
         e7:cf:ab:c5:a1:9d:e9:b3:9f:ca:55:dd:b5:31:11:18:88:5f:
         95:c5:38:09:78:8f:cb:98:be:9a:38:fb:eb:e3:f1:79:5d:3d:
         5d:71:90:a5:f8:a4:05:e0:29:d9:d9:1c:fb:7e:b9:f2:e2:cd:
         17:3f:a8:d8:c3:18:1f:1f:8c:e1:00:21:c8:40:2f:e9:7f:17:
         80:3f:b6:66:f7:47:51:5c:74:4a:99:b6:5d:46:9d:ee:33:75:
         19:37:66:bf:7d:6b:41:19:da:b0:14:bb:af:24:81:3e:bb:2b:
         bf:63:5b:3c:12:e1:f9:3a:e6:72:ff:5a:a1:04:5a:8f:ea:5b:
         c9:83:ff:12:a2:13:e6:93:6b:fe:c9:56:f5:df:49:5f:9b:cb:
         69:8c:d6:9b:44:21:39:57:c6:58:c8:7a:0a:91:19:ca:2e:5b:
         1c:36:b5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----