Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/326130613a363034343a626230303a3a2f34382d3438203d3e20323135393536.roa
File:                     326130613a363034343a626230303a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          khzZoLQKNNQpfjGnrLZSEnO2KQHTnHnTyYHGLoeUPM8=
Subject key identifier:   25:8B:2C:AE:DC:18:69:24:85:BD:1B:89:DF:97:4A:32:52:99:6D:40
Certificate issuer:       /CN=D7D838DED871774D2E875C9CB99B810DC1B38301
Certificate serial:       58E18145FBF6B03BF4B3960B597EF382377DC3BE
Authority key identifier: D7:D8:38:DE:D8:71:77:4D:2E:87:5C:9C:B9:9B:81:0D:C1:B3:83:01
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/D7D838DED871774D2E875C9CB99B810DC1B38301.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/326130613a363034343a626230303a3a2f34382d3438203d3e20323135393536.roa
Signing time:             Sun 07 Jul 2024 00:13:28 +0000
ROA not before:           Sun 07 Jul 2024 00:08:28 +0000
ROA not after:            Sun 06 Jul 2025 00:13:28 +0000
asID:                     215956
IP address blocks:        2a0a:6044:bb00::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e1:81:45:fb:f6:b0:3b:f4:b3:96:0b:59:7e:f3:82:37:7d:c3:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7D838DED871774D2E875C9CB99B810DC1B38301
        Validity
            Not Before: Jul  7 00:08:28 2024 GMT
            Not After : Jul  6 00:13:28 2025 GMT
        Subject: CN=258B2CAEDC18692485BD1B89DF974A3252996D40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0e:f1:d6:c6:c4:45:12:ff:31:78:c1:84:b8:
                    2d:58:bd:d3:4c:f3:7f:53:c6:53:e9:6c:8c:43:f6:
                    2e:e6:7a:90:33:c8:f8:65:15:4d:6c:8b:48:45:27:
                    98:53:b9:4c:66:3d:3c:15:f3:db:97:2f:76:1e:36:
                    3e:c4:55:eb:c8:f7:4c:39:27:7f:0d:3c:a3:dc:0b:
                    52:38:5d:fa:df:a8:ac:e2:59:16:52:6f:af:82:ab:
                    83:5a:5f:5a:d3:ac:33:33:db:ab:52:a1:0a:68:4d:
                    4d:69:6a:58:c9:c5:18:20:52:6e:33:64:b4:16:a7:
                    e3:7f:4b:04:d0:34:30:53:e9:29:d1:f5:73:35:0c:
                    99:66:63:b2:f6:af:87:e2:b1:bc:fd:c3:28:72:4c:
                    d9:a7:76:7e:46:4b:42:4d:48:60:b9:f0:ab:5e:cd:
                    71:9d:bb:51:df:07:f0:89:a8:a0:81:a8:0b:1a:97:
                    cf:99:3b:ca:bf:8e:47:ff:6f:ae:5e:93:fc:6c:b0:
                    5b:9d:de:26:d1:f8:c5:21:39:6e:76:f7:88:de:d2:
                    49:10:ff:54:4e:a9:ac:c6:71:3e:5e:8a:52:40:b7:
                    3e:cd:49:7b:71:fd:bd:3d:03:e3:73:29:b1:55:59:
                    0a:fc:be:84:06:1d:3d:69:d2:b4:8a:66:6e:5f:66:
                    10:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:8B:2C:AE:DC:18:69:24:85:BD:1B:89:DF:97:4A:32:52:99:6D:40
            X509v3 Authority Key Identifier:
                keyid:D7:D8:38:DE:D8:71:77:4D:2E:87:5C:9C:B9:9B:81:0D:C1:B3:83:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/D7D838DED871774D2E875C9CB99B810DC1B38301.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/D7D838DED871774D2E875C9CB99B810DC1B38301.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/326130613a363034343a626230303a3a2f34382d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:bb00::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:60:c1:28:ad:c4:6a:c8:28:f6:34:f0:97:c9:0c:f4:65:ce:
         d7:3c:f7:ea:1c:44:f8:f5:b3:a8:f3:47:9c:ed:4d:92:66:b6:
         27:b7:2a:a6:17:af:68:d4:58:7b:18:25:ac:10:d0:b1:f0:a1:
         39:fa:d5:b2:cc:cd:78:4e:c6:06:a5:5e:12:d6:0d:79:ca:e6:
         6f:ad:2e:13:52:28:ab:ae:f5:4b:f6:7d:92:b4:20:dd:11:b8:
         d8:52:3b:fc:e9:51:99:e1:74:c1:9c:20:68:2c:3f:6f:36:94:
         cd:ed:a9:6f:8d:06:25:fc:27:df:f5:18:14:32:2e:8a:49:d7:
         27:2f:5a:47:a8:02:0f:86:86:39:56:51:fc:62:76:0e:78:b6:
         73:aa:b9:a5:9b:07:0b:9d:38:dc:8d:e5:99:91:95:37:bd:50:
         52:fa:d6:ea:97:e5:0c:9f:d7:2b:43:36:e9:0b:b2:bb:b3:d6:
         27:71:52:dc:04:8e:d9:46:7e:ae:ce:48:f6:43:10:af:a2:63:
         42:99:45:fb:12:4c:d4:2a:96:43:f3:c2:03:26:53:02:f2:c0:
         81:8c:3a:fa:2c:1b:70:0a:c1:28:cd:c5:50:41:e1:e4:ff:c9:
         37:3e:a5:91:92:ba:59:65:85:11:0f:d6:2b:48:ad:d5:13:5a:
         93:9d:36:34
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUWOGBRfv2sDv0s5YLWX7zgjd9w74wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdEODM4REVEODcxNzc0RDJFODc1QzlDQjk5QjgxMERD
MUIzODMwMTAeFw0yNDA3MDcwMDA4MjhaFw0yNTA3MDYwMDEzMjhaMDMxMTAvBgNV
BAMTKDI1OEIyQ0FFREMxODY5MjQ4NUJEMUI4OURGOTc0QTMyNTI5OTZENDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5DvHWxsRFEv8xeMGEuC1YvdNM
839TxlPpbIxD9i7mepAzyPhlFU1si0hFJ5hTuUxmPTwV89uXL3YeNj7EVevI90w5
J38NPKPcC1I4XfrfqKziWRZSb6+Cq4NaX1rTrDMz26tSoQpoTU1paljJxRggUm4z
ZLQWp+N/SwTQNDBT6SnR9XM1DJlmY7L2r4fisbz9wyhyTNmndn5GS0JNSGC58Kte
zXGdu1HfB/CJqKCBqAsal8+ZO8q/jkf/b65ek/xssFud3ibR+MUhOW5294je0kkQ
/1ROqazGcT5eilJAtz7NSXtx/b09A+NzKbFVWQr8voQGHT1p0rSKZm5fZhBNAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUJYssrtwYaSSFvRuJ35dKMlKZbUAwHwYDVR0j
BBgwFoAU19g43thxd00uh1ycuZuBDcGzgwEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmM2MTVlYmQtNWMyOC00MzM0LThkMmMtZWMzMTU4YWZk
YzhjLzAvRDdEODM4REVEODcxNzc0RDJFODc1QzlDQjk5QjgxMERDMUIzODMwMS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9EN0Q4MzhERUQ4NzE3NzREMkU4NzVDOUNC
OTlCODEwREMxQjM4MzAxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9mYzYxNWViZC01YzI4LTQzMzQtOGQyYy1lYzMxNThhZmRjOGMvMC8zMjYxMzA2
MTNhMzYzMDM0MzQzYTYyNjIzMDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRLsAMA0GCSqGSIb3DQEBCwUAA4IBAQCp
YMEorcRqyCj2NPCXyQz0Zc7XPPfqHET49bOo80ec7U2SZrYntyqmF69o1Fh7GCWs
ENCx8KE5+tWyzM14TsYGpV4S1g15yuZvrS4TUiirrvVL9n2StCDdEbjYUjv86VGZ
4XTBnCBoLD9vNpTN7alvjQYl/Cff9RgUMi6KSdcnL1pHqAIPhoY5VlH8YnYOeLZz
qrmlmwcLnTjcjeWZkZU3vVBS+tbql+UMn9crQzbpC7K7s9YncVLcBI7ZRn6uzkj2
QxCvomNCmUX7EkzUKpZD88IDJlMC8sCBjDr6LBtwCsEozcVQQeHk/8k3PqWRkrpZ
ZYURD9YrSK3VE1qTnTY0
-----END CERTIFICATE-----