Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/326130613a363034343a626230313a3a2f34382d3438203d3e20323135393536.roa
File:                     326130613a363034343a626230313a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          1OSEnC+4lX2pvYO9sm9YT/xCL6kA/GPMhpm/dkzN9XI=
Subject key identifier:   F0:13:3E:D9:58:8A:5C:C8:72:04:C5:B0:0F:C7:F3:2F:D8:97:75:BA
Certificate issuer:       /CN=D7D838DED871774D2E875C9CB99B810DC1B38301
Certificate serial:       38B934DBF19182B26A61EEFC12BBC99BC80CBB50
Authority key identifier: D7:D8:38:DE:D8:71:77:4D:2E:87:5C:9C:B9:9B:81:0D:C1:B3:83:01
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/D7D838DED871774D2E875C9CB99B810DC1B38301.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/326130613a363034343a626230313a3a2f34382d3438203d3e20323135393536.roa
Signing time:             Sun 07 Jul 2024 00:13:48 +0000
ROA not before:           Sun 07 Jul 2024 00:08:48 +0000
ROA not after:            Sun 06 Jul 2025 00:13:48 +0000
asID:                     215956
IP address blocks:        2a0a:6044:bb01::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b9:34:db:f1:91:82:b2:6a:61:ee:fc:12:bb:c9:9b:c8:0c:bb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7D838DED871774D2E875C9CB99B810DC1B38301
        Validity
            Not Before: Jul  7 00:08:48 2024 GMT
            Not After : Jul  6 00:13:48 2025 GMT
        Subject: CN=F0133ED9588A5CC87204C5B00FC7F32FD89775BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7e:36:ed:34:ad:e5:98:74:ad:6b:23:d8:cc:
                    c8:87:16:89:fa:14:13:3d:ce:d9:aa:fe:2f:8a:a2:
                    cc:4d:ad:d1:88:05:b8:60:57:47:d1:57:af:51:ff:
                    66:9d:c5:20:1a:9f:51:51:7f:b3:28:f6:ab:3b:21:
                    f0:49:55:b5:24:46:d2:5f:3d:5d:c4:d4:f5:60:aa:
                    b7:ed:67:f4:f3:a1:17:68:85:4f:fb:87:ec:a0:8e:
                    af:67:77:cc:a5:ce:b5:ee:20:6a:28:49:e0:6c:86:
                    2d:9f:af:33:84:d2:8c:61:2b:e3:1e:dd:c4:88:a3:
                    0e:34:67:c3:17:19:49:84:ae:5b:8e:1a:88:4c:bc:
                    e7:1c:dd:b8:39:6e:0f:f0:df:c4:6d:c4:9a:c2:09:
                    96:27:94:a2:5d:6f:b4:ab:35:1c:39:3e:0f:83:db:
                    21:cd:df:cb:55:aa:59:5e:39:f8:04:61:9f:29:15:
                    95:14:d9:17:65:d3:e7:79:16:d3:23:ef:17:ad:89:
                    45:26:ac:f7:78:e8:cb:0b:cc:8a:a4:c5:12:0f:dc:
                    4b:b9:67:65:fb:7d:33:a7:03:1d:8b:1c:b5:b5:13:
                    e1:51:d6:53:06:6f:ae:cc:55:f7:a5:d7:4a:e2:6c:
                    65:39:c1:49:be:06:2c:fb:5a:bc:2e:0b:d4:90:cd:
                    6b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:13:3E:D9:58:8A:5C:C8:72:04:C5:B0:0F:C7:F3:2F:D8:97:75:BA
            X509v3 Authority Key Identifier:
                keyid:D7:D8:38:DE:D8:71:77:4D:2E:87:5C:9C:B9:9B:81:0D:C1:B3:83:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/D7D838DED871774D2E875C9CB99B810DC1B38301.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/D7D838DED871774D2E875C9CB99B810DC1B38301.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/326130613a363034343a626230313a3a2f34382d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:bb01::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:6f:97:55:57:dd:f8:8a:4f:b8:c7:48:f2:af:1e:e2:b1:4b:
         bf:da:d4:e9:01:60:ab:e8:76:42:dd:f6:5a:4d:53:61:f8:8e:
         65:0a:3e:50:54:b8:25:08:e2:19:1f:8e:3e:65:db:72:d7:56:
         d6:6e:13:14:a5:ed:3a:71:9b:74:db:c0:0a:7b:ac:c2:14:d1:
         9e:dd:00:b7:44:0b:c4:19:50:75:10:55:d3:9c:25:4c:00:27:
         6a:60:0e:36:c2:25:3a:27:9c:79:9f:dd:62:21:83:b8:28:88:
         2b:ef:da:22:1e:7f:a6:d6:2c:ef:a5:bd:9f:ee:0d:8a:ab:fb:
         39:1d:d6:30:76:14:fa:66:9a:dc:10:02:81:4c:0b:8b:2d:e4:
         49:11:3e:9f:84:4c:20:84:f0:1b:8d:3a:bf:1c:53:a5:46:71:
         5d:2f:3c:4b:d2:49:29:b7:c9:b6:65:8d:c3:ee:21:32:96:21:
         1c:72:da:ac:10:ac:60:e6:a2:b0:72:83:ed:35:f5:26:e0:a8:
         6c:89:51:b9:de:55:80:63:2e:4f:ea:43:4d:14:7f:52:69:03:
         28:1c:d8:f0:be:f9:11:a3:20:23:39:d6:17:d9:99:1b:b2:7f:
         2f:d8:33:ba:56:28:f8:92:7c:81:31:e9:db:44:db:bb:c3:1c:
         c5:44:e6:e9
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUOLk02/GRgrJqYe78ErvJm8gMu1AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdEODM4REVEODcxNzc0RDJFODc1QzlDQjk5QjgxMERD
MUIzODMwMTAeFw0yNDA3MDcwMDA4NDhaFw0yNTA3MDYwMDEzNDhaMDMxMTAvBgNV
BAMTKEYwMTMzRUQ5NTg4QTVDQzg3MjA0QzVCMDBGQzdGMzJGRDg5Nzc1QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLfjbtNK3lmHStayPYzMiHFon6
FBM9ztmq/i+KosxNrdGIBbhgV0fRV69R/2adxSAan1FRf7Mo9qs7IfBJVbUkRtJf
PV3E1PVgqrftZ/TzoRdohU/7h+ygjq9nd8ylzrXuIGooSeBshi2frzOE0oxhK+Me
3cSIow40Z8MXGUmErluOGohMvOcc3bg5bg/w38RtxJrCCZYnlKJdb7SrNRw5Pg+D
2yHN38tVqlleOfgEYZ8pFZUU2Rdl0+d5FtMj7xetiUUmrPd46MsLzIqkxRIP3Eu5
Z2X7fTOnAx2LHLW1E+FR1lMGb67MVfel10ribGU5wUm+Biz7WrwuC9SQzWtpAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQU8BM+2ViKXMhyBMWwD8fzL9iXdbowHwYDVR0j
BBgwFoAU19g43thxd00uh1ycuZuBDcGzgwEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmM2MTVlYmQtNWMyOC00MzM0LThkMmMtZWMzMTU4YWZk
YzhjLzAvRDdEODM4REVEODcxNzc0RDJFODc1QzlDQjk5QjgxMERDMUIzODMwMS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9EN0Q4MzhERUQ4NzE3NzREMkU4NzVDOUNC
OTlCODEwREMxQjM4MzAxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9mYzYxNWViZC01YzI4LTQzMzQtOGQyYy1lYzMxNThhZmRjOGMvMC8zMjYxMzA2
MTNhMzYzMDM0MzQzYTYyNjIzMDMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRLsBMA0GCSqGSIb3DQEBCwUAA4IBAQA+
b5dVV934ik+4x0jyrx7isUu/2tTpAWCr6HZC3fZaTVNh+I5lCj5QVLglCOIZH44+
Zdty11bWbhMUpe06cZt028AKe6zCFNGe3QC3RAvEGVB1EFXTnCVMACdqYA42wiU6
J5x5n91iIYO4KIgr79oiHn+m1izvpb2f7g2Kq/s5HdYwdhT6ZprcEAKBTAuLLeRJ
ET6fhEwghPAbjTq/HFOlRnFdLzxL0kkpt8m2ZY3D7iEyliEcctqsEKxg5qKwcoPt
NfUm4KhsiVG53lWAYy5P6kNNFH9SaQMoHNjwvvkRoyAjOdYX2Zkbsn8v2DO6Vij4
knyBMenbRNu7wxzFRObp
-----END CERTIFICATE-----