Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/326130613a363034343a613531343a3a2f34362d3438203d3e20323135393536.roa
File:                     326130613a363034343a613531343a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          pOOK05ExVjmg/IvROy8S5ajO+yNEfS9kDc4x//g7LdU=
Subject key identifier:   84:88:16:61:B9:14:73:1E:5F:85:3A:35:5E:03:CF:AF:7A:32:DB:B9
Certificate issuer:       /CN=D7D838DED871774D2E875C9CB99B810DC1B38301
Certificate serial:       356A42B5B21AE9D6222ECFA374661D0EE8EB9698
Authority key identifier: D7:D8:38:DE:D8:71:77:4D:2E:87:5C:9C:B9:9B:81:0D:C1:B3:83:01
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/D7D838DED871774D2E875C9CB99B810DC1B38301.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/326130613a363034343a613531343a3a2f34362d3438203d3e20323135393536.roa
Signing time:             Sat 04 May 2024 20:44:25 +0000
ROA not before:           Sat 04 May 2024 20:39:25 +0000
ROA not after:            Sat 03 May 2025 20:44:25 +0000
asID:                     215956
IP address blocks:        2a0a:6044:a514::/46 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:6a:42:b5:b2:1a:e9:d6:22:2e:cf:a3:74:66:1d:0e:e8:eb:96:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7D838DED871774D2E875C9CB99B810DC1B38301
        Validity
            Not Before: May  4 20:39:25 2024 GMT
            Not After : May  3 20:44:25 2025 GMT
        Subject: CN=84881661B914731E5F853A355E03CFAF7A32DBB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c4:cf:a8:70:5a:cf:93:2d:92:c0:bc:84:c5:
                    cc:4b:22:e1:b1:91:4b:8d:6f:f5:a7:25:3c:7d:42:
                    51:59:4c:21:d7:ae:6f:15:e7:0e:c8:f9:51:60:a1:
                    4c:51:7d:1a:3d:57:47:e1:db:bb:5d:14:38:c9:9a:
                    fe:f6:aa:1e:d1:ae:70:5b:06:4f:12:08:3f:e8:93:
                    76:86:eb:a6:39:ec:08:12:57:e0:76:17:d3:43:bc:
                    06:e0:c6:0a:58:5e:61:01:71:8e:4b:e9:37:f4:ee:
                    4c:06:ec:69:6c:7e:c0:34:4d:2a:69:7f:8c:12:4b:
                    42:93:48:4c:24:b8:3b:90:74:c1:8a:72:03:57:89:
                    68:b6:01:9d:b7:e9:27:8e:34:6b:8d:52:90:e2:26:
                    e0:2e:c4:4d:7b:7f:27:8e:96:6d:6e:5f:2e:0e:a0:
                    c6:31:0b:dd:33:6b:8f:65:8f:75:4f:0d:fb:c7:a3:
                    de:a8:4b:26:a5:1d:29:b3:a3:42:ad:d2:a3:da:41:
                    3b:3f:6c:ac:46:48:d2:f3:8c:51:0a:58:14:e1:1f:
                    96:35:35:7a:66:ce:33:2c:34:f5:4d:c6:83:d6:53:
                    0c:a4:4e:65:67:42:19:27:c6:f7:2e:0a:e0:fc:5b:
                    78:3b:52:02:35:61:d9:8f:cd:75:23:b9:72:a8:72:
                    52:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:88:16:61:B9:14:73:1E:5F:85:3A:35:5E:03:CF:AF:7A:32:DB:B9
            X509v3 Authority Key Identifier:
                keyid:D7:D8:38:DE:D8:71:77:4D:2E:87:5C:9C:B9:9B:81:0D:C1:B3:83:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/D7D838DED871774D2E875C9CB99B810DC1B38301.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/D7D838DED871774D2E875C9CB99B810DC1B38301.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/326130613a363034343a613531343a3a2f34362d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a514::/46

    Signature Algorithm: sha256WithRSAEncryption
         84:c5:56:c4:87:3a:e5:01:b1:19:85:0a:3a:35:4e:91:86:22:
         76:36:cf:e1:24:99:d7:5f:d6:68:4d:6d:e4:80:19:39:87:d0:
         cc:0d:a2:cb:0a:fc:6b:b1:9b:5b:be:f3:70:a0:c5:b0:29:b5:
         41:f2:f7:3a:2f:3d:38:34:05:5b:42:1a:b0:cf:e3:ed:25:7e:
         80:22:14:df:53:25:3e:be:0d:53:ca:fa:e5:f3:3c:b2:b4:1e:
         4e:93:2f:6e:b9:ac:15:1f:a6:a6:3c:5e:78:14:5d:5f:d3:86:
         eb:cc:ef:a3:e6:c8:7d:90:16:f1:c4:b6:b2:57:06:4c:28:31:
         b2:ce:dd:ab:fb:43:f2:58:33:6a:38:88:89:f5:b2:c6:cf:c4:
         31:d3:30:43:42:4d:2b:71:9f:a8:3f:eb:97:2f:e7:b0:62:c9:
         7b:d6:f0:44:cd:81:e8:ff:9d:c6:e0:72:cc:60:22:96:85:9f:
         e8:77:59:0f:a5:9b:fd:a4:5b:28:18:9c:59:98:17:4e:2f:bc:
         6a:e6:f9:6d:75:b0:5f:43:0e:2f:f4:e0:63:06:c1:9c:d5:1d:
         d8:ad:7d:48:4a:3b:e1:f3:86:31:0f:41:d2:52:27:c0:8d:2b:
         64:4d:b0:86:c7:98:8b:a1:73:89:ec:59:c3:fb:1b:4c:be:ed:
         01:67:86:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----