Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/326130613a363034343a613530633a3a2f34362d3438203d3e20323135393536.roa
File:                     326130613a363034343a613530633a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          M2UnMXVicQbwGrxYBWokhW9CxL+5gU/xLlthKn/Rfkk=
Subject key identifier:   8E:EE:3E:CA:C7:B4:B6:75:1A:A6:62:18:2C:77:7D:8D:55:90:35:20
Certificate issuer:       /CN=D7D838DED871774D2E875C9CB99B810DC1B38301
Certificate serial:       1C25341378C96719C079EB7F795F0C0642D572CA
Authority key identifier: D7:D8:38:DE:D8:71:77:4D:2E:87:5C:9C:B9:9B:81:0D:C1:B3:83:01
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/D7D838DED871774D2E875C9CB99B810DC1B38301.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/326130613a363034343a613530633a3a2f34362d3438203d3e20323135393536.roa
Signing time:             Sun 28 Apr 2024 23:46:11 +0000
ROA not before:           Sun 28 Apr 2024 23:41:11 +0000
ROA not after:            Sun 27 Apr 2025 23:46:11 +0000
asID:                     215956
IP address blocks:        2a0a:6044:a50c::/46 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:25:34:13:78:c9:67:19:c0:79:eb:7f:79:5f:0c:06:42:d5:72:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7D838DED871774D2E875C9CB99B810DC1B38301
        Validity
            Not Before: Apr 28 23:41:11 2024 GMT
            Not After : Apr 27 23:46:11 2025 GMT
        Subject: CN=8EEE3ECAC7B4B6751AA662182C777D8D55903520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:94:9e:62:cf:1d:29:83:05:28:90:f7:ef:a4:
                    85:98:90:e2:83:6f:ac:e0:fb:f0:68:2a:3d:a2:5e:
                    2b:38:f8:5e:87:80:b7:6b:9f:bd:b1:a5:59:43:7e:
                    6d:48:28:93:9b:a6:e9:33:c9:bb:80:5d:7e:ad:d5:
                    bd:dd:06:0a:6d:13:c1:47:81:05:6c:ea:68:98:73:
                    16:1f:2c:1d:67:61:8e:f4:9e:be:a6:1b:be:86:ea:
                    80:24:81:1e:bf:71:7e:1a:c2:af:7a:ed:09:9b:be:
                    b8:99:7d:c3:aa:68:81:e5:07:77:4e:ec:07:64:ce:
                    52:1a:e4:db:d8:bb:fd:cb:a3:b5:b9:36:46:a5:ce:
                    c7:00:37:9e:0e:f8:7d:81:12:a9:48:40:ec:17:ea:
                    69:67:35:49:27:2b:b3:c7:28:3b:e5:fd:d1:31:b9:
                    f6:e1:07:5e:9e:54:45:3f:a6:96:9d:0b:83:8c:6a:
                    be:28:8c:47:ec:e2:ce:f4:09:25:b2:48:6b:27:6a:
                    03:be:c8:86:29:be:2c:fa:45:73:d3:73:0b:3a:1f:
                    a9:5f:4a:ea:11:64:10:f0:39:28:53:e7:90:42:e4:
                    8c:c1:80:34:2c:45:bf:7f:c6:97:3b:93:68:93:ac:
                    d0:2b:95:41:aa:79:c5:fe:77:21:49:27:dd:b9:0c:
                    3b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:EE:3E:CA:C7:B4:B6:75:1A:A6:62:18:2C:77:7D:8D:55:90:35:20
            X509v3 Authority Key Identifier:
                keyid:D7:D8:38:DE:D8:71:77:4D:2E:87:5C:9C:B9:9B:81:0D:C1:B3:83:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/D7D838DED871774D2E875C9CB99B810DC1B38301.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/D7D838DED871774D2E875C9CB99B810DC1B38301.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/326130613a363034343a613530633a3a2f34362d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a50c::/46

    Signature Algorithm: sha256WithRSAEncryption
         3c:55:20:f7:f0:7f:06:7a:97:62:4e:4b:9a:03:09:af:9b:42:
         8a:f1:61:52:bd:09:eb:0c:cf:1c:56:a2:f3:94:d7:71:ed:7c:
         14:68:e7:09:49:ca:bd:1e:12:f8:f9:96:71:62:55:9a:e6:aa:
         5e:83:43:09:89:8c:f6:49:98:26:80:af:32:35:67:58:a8:aa:
         ea:a5:59:4d:c5:14:70:d5:41:d6:5b:93:77:ac:f5:35:03:a0:
         ae:87:e4:94:06:3a:98:1a:cf:c4:ae:52:11:b2:b1:d4:76:14:
         3f:72:12:dd:93:40:d6:22:4c:73:20:a1:91:b7:c5:76:df:7f:
         c0:74:a6:e6:b3:97:06:76:72:92:2c:79:ef:35:e4:85:da:5a:
         88:cb:44:3a:bc:9c:2a:cf:8e:0f:aa:a2:53:de:e7:37:81:03:
         78:39:1e:79:d3:bf:e1:74:79:5b:8a:62:d0:0d:f1:b7:0e:41:
         f6:41:7c:a0:bb:62:ed:6c:59:b3:35:26:81:c6:0b:d9:87:22:
         75:ca:dc:46:b2:6c:7b:ee:68:3d:69:4b:b8:27:fc:99:f9:7a:
         03:d7:9b:fc:e0:1f:63:0c:93:2b:ac:91:0a:ce:f3:89:b2:25:
         b9:dc:ee:62:db:f7:3c:b3:c7:12:ad:70:26:25:93:1b:b5:14:
         27:27:54:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----