Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/326130613a363034343a613530383a3a2f34362d3438203d3e20323135393536.roa
File:                     326130613a363034343a613530383a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          AJ73UEch0cpVB30C741eQxJt9O5WjtnvX5DTcTSzQtE=
Subject key identifier:   11:3E:2C:7B:72:9C:A1:25:16:48:61:56:F7:54:D4:40:41:89:DE:2A
Certificate issuer:       /CN=D7D838DED871774D2E875C9CB99B810DC1B38301
Certificate serial:       0505C36C2362342E099079E22F4A070D05A602FF
Authority key identifier: D7:D8:38:DE:D8:71:77:4D:2E:87:5C:9C:B9:9B:81:0D:C1:B3:83:01
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/D7D838DED871774D2E875C9CB99B810DC1B38301.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/326130613a363034343a613530383a3a2f34362d3438203d3e20323135393536.roa
Signing time:             Sun 28 Apr 2024 23:45:44 +0000
ROA not before:           Sun 28 Apr 2024 23:40:44 +0000
ROA not after:            Sun 27 Apr 2025 23:45:44 +0000
asID:                     215956
IP address blocks:        2a0a:6044:a508::/46 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:05:c3:6c:23:62:34:2e:09:90:79:e2:2f:4a:07:0d:05:a6:02:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7D838DED871774D2E875C9CB99B810DC1B38301
        Validity
            Not Before: Apr 28 23:40:44 2024 GMT
            Not After : Apr 27 23:45:44 2025 GMT
        Subject: CN=113E2C7B729CA12516486156F754D4404189DE2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ea:0b:da:18:3a:cd:85:59:1e:21:f7:8f:e0:
                    73:a0:e6:ce:e8:a7:55:59:06:bd:c4:b7:f7:bd:87:
                    d5:2f:26:a5:b8:3b:96:c3:a6:5a:6b:1f:da:da:d3:
                    00:e7:08:bd:44:c9:15:35:b7:4c:ef:a2:4b:cd:eb:
                    95:3e:87:41:fb:4e:9d:28:63:33:d3:d7:c9:38:a3:
                    6d:71:54:ad:3b:0f:ce:d2:f8:08:a6:88:2c:31:e8:
                    8b:aa:cc:e9:a0:51:10:96:65:69:21:35:11:4e:b0:
                    75:8c:76:10:4b:25:74:b4:9a:d7:c6:22:75:11:db:
                    41:e3:aa:df:bd:d0:7e:09:91:41:d2:fd:ce:46:c9:
                    67:9d:43:77:37:76:66:5a:1b:54:db:f1:b7:4c:47:
                    13:9c:ad:ae:19:7b:22:07:af:f4:9f:e3:65:14:c0:
                    41:e6:67:4a:38:d7:fa:37:f2:f6:1a:08:d3:e2:50:
                    a0:40:78:a0:46:5c:50:14:6e:8e:bd:29:1c:e1:b6:
                    41:be:7e:79:25:11:1d:53:79:a0:5f:74:cb:b0:18:
                    e2:90:29:1e:28:f7:49:7f:d1:68:c6:f2:d1:52:7d:
                    01:2c:d3:5b:e5:b4:87:a7:66:80:27:f5:e9:96:79:
                    84:e0:8c:4a:62:5c:06:f0:25:1a:79:76:05:90:d8:
                    5a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3E:2C:7B:72:9C:A1:25:16:48:61:56:F7:54:D4:40:41:89:DE:2A
            X509v3 Authority Key Identifier:
                keyid:D7:D8:38:DE:D8:71:77:4D:2E:87:5C:9C:B9:9B:81:0D:C1:B3:83:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/D7D838DED871774D2E875C9CB99B810DC1B38301.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/D7D838DED871774D2E875C9CB99B810DC1B38301.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/326130613a363034343a613530383a3a2f34362d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a508::/46

    Signature Algorithm: sha256WithRSAEncryption
         75:c5:13:cd:ca:f9:08:37:d4:66:57:5b:97:65:fd:50:ce:5c:
         23:24:49:95:d5:f4:b8:a5:d7:ab:2d:39:47:a2:3c:0a:40:64:
         34:ba:38:5d:e5:75:4e:8f:91:3d:ba:e8:a9:6f:bb:62:9a:a3:
         fb:e9:00:b6:c0:de:35:a5:34:aa:bd:b7:47:24:03:da:2f:20:
         01:a8:ac:95:04:cf:f7:7a:c2:7f:b3:0e:c5:50:68:dd:cc:cc:
         c5:7f:fc:8c:32:42:71:cb:81:7e:80:e9:22:6b:d3:77:82:3e:
         b7:97:6c:7c:42:a9:2e:11:a2:8e:e5:c8:ec:02:b8:2c:77:7c:
         19:7b:c0:2b:31:b2:0f:aa:3d:18:44:e5:47:8c:0d:39:f0:0a:
         12:9c:09:c9:09:c4:a8:13:cf:02:20:03:8a:67:85:89:46:0e:
         99:2e:e4:91:7c:df:7e:36:70:4c:64:82:6f:83:86:30:fc:f9:
         47:40:89:f8:07:38:4f:ce:1f:d8:94:33:5d:b2:43:e9:4a:87:
         ca:44:80:ed:d8:b9:e5:02:64:e4:71:90:72:c3:5c:f2:bf:f5:
         c2:d4:1d:c9:97:0f:51:7c:ff:ea:d1:2b:87:fa:c5:c0:e8:1c:
         4d:22:99:29:3d:90:e7:59:9e:6c:a2:2d:4c:40:4d:44:39:1a:
         13:c6:80:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----