Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/326130613a363034343a626230323a3a2f34382d3438203d3e20323135393536.roa
File:                     326130613a363034343a626230323a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          pmUUzLvaMQgFT3gWaPUHlFaDQceLaXF82BquEBhscU4=
Subject key identifier:   74:88:E9:5F:9F:0B:61:B2:0D:00:D7:09:A5:6D:0A:B8:D5:AF:D0:7D
Certificate issuer:       /CN=D7D838DED871774D2E875C9CB99B810DC1B38301
Certificate serial:       44D58099A6B777ABDEADF53D765C4A605A976972
Authority key identifier: D7:D8:38:DE:D8:71:77:4D:2E:87:5C:9C:B9:9B:81:0D:C1:B3:83:01
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/D7D838DED871774D2E875C9CB99B810DC1B38301.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/326130613a363034343a626230323a3a2f34382d3438203d3e20323135393536.roa
Signing time:             Sun 07 Jul 2024 00:14:18 +0000
ROA not before:           Sun 07 Jul 2024 00:09:18 +0000
ROA not after:            Sun 06 Jul 2025 00:14:18 +0000
asID:                     215956
IP address blocks:        2a0a:6044:bb02::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d5:80:99:a6:b7:77:ab:de:ad:f5:3d:76:5c:4a:60:5a:97:69:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7D838DED871774D2E875C9CB99B810DC1B38301
        Validity
            Not Before: Jul  7 00:09:18 2024 GMT
            Not After : Jul  6 00:14:18 2025 GMT
        Subject: CN=7488E95F9F0B61B20D00D709A56D0AB8D5AFD07D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:11:62:14:93:08:c1:e9:5b:f4:71:f3:21:4f:
                    aa:82:27:c5:d9:e2:0f:21:45:78:c2:a9:48:e2:d1:
                    4a:36:d8:51:5f:62:1f:dc:e5:27:12:87:fe:07:1d:
                    2e:9f:f2:93:45:ac:01:7d:3e:3c:ca:dd:7e:da:36:
                    e9:40:75:f8:bf:28:26:5d:24:b1:b6:0e:d3:3b:bc:
                    e9:78:c7:50:40:43:b5:24:28:35:3c:3e:84:e8:68:
                    49:a8:9e:c1:03:b6:8b:05:16:33:d8:33:a1:f8:3a:
                    b9:1a:fc:09:0e:d5:a0:3f:da:ed:0f:fe:0c:7e:d1:
                    2f:db:2a:ec:12:ba:36:5a:98:4e:6d:aa:1b:eb:c0:
                    b0:06:a0:1b:4b:b1:e3:5f:a0:5a:63:d9:16:c0:a2:
                    bf:f5:2c:72:f6:f4:1c:3a:cc:bd:1e:c4:6a:7b:2b:
                    3b:f0:0b:a4:7d:d0:3f:83:dc:27:d6:b2:3b:76:f6:
                    95:b6:cf:06:79:b0:8e:7d:e2:f6:e9:4b:85:55:f0:
                    ba:48:c6:a8:09:3b:32:51:a2:ba:37:f2:a1:0d:d6:
                    0c:b1:cd:f7:ec:b4:ce:80:44:4c:b7:7b:a2:89:a2:
                    51:c1:dc:36:70:13:87:4f:64:63:0d:ab:0b:a1:bd:
                    28:6e:5f:6f:9f:90:a4:a9:b3:ed:37:9d:98:c6:e2:
                    2e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:88:E9:5F:9F:0B:61:B2:0D:00:D7:09:A5:6D:0A:B8:D5:AF:D0:7D
            X509v3 Authority Key Identifier:
                keyid:D7:D8:38:DE:D8:71:77:4D:2E:87:5C:9C:B9:9B:81:0D:C1:B3:83:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/D7D838DED871774D2E875C9CB99B810DC1B38301.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/D7D838DED871774D2E875C9CB99B810DC1B38301.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/326130613a363034343a626230323a3a2f34382d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:bb02::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:e8:71:7f:49:e9:fc:18:54:59:c1:35:25:2a:61:c7:85:8c:
         b0:51:42:88:07:ed:c7:0c:83:8b:ad:72:05:71:c7:57:9c:87:
         fc:38:a3:d5:8c:f1:b2:ec:1d:dd:d8:cf:17:64:3a:38:b0:bb:
         af:e2:20:54:e8:3d:01:d3:91:1d:78:91:46:3f:b1:a3:6d:58:
         0d:c3:d2:f3:02:6d:30:38:30:8a:e4:11:1d:af:01:68:2d:04:
         64:73:49:03:af:e6:01:8d:5e:77:ad:2e:fa:42:4f:91:74:a5:
         d1:e8:18:a5:37:08:1b:d0:d6:c4:be:cc:91:51:b2:d4:fd:fe:
         52:1a:20:5a:37:c1:7c:5e:61:b4:a5:45:9d:2f:0e:8e:4a:20:
         ea:54:5e:5a:36:26:11:2e:b6:be:23:81:5e:40:82:a9:58:de:
         36:df:fc:8e:da:14:05:9d:3e:15:37:b6:2a:0c:7f:03:04:a4:
         77:f7:07:e4:06:32:be:e8:20:86:6f:7e:10:42:3d:8b:67:06:
         70:69:e7:3e:1d:aa:bd:a1:e7:e7:09:f4:b4:bd:86:77:51:93:
         da:a5:9e:6d:04:df:49:dd:e2:e4:91:2e:4a:4c:7e:19:16:c6:
         9b:ab:0e:b6:36:8e:38:a5:83:9b:7d:58:d9:25:f9:2d:00:7c:
         fd:ca:16:63
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIURNWAmaa3d6verfU9dlxKYFqXaXIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdEODM4REVEODcxNzc0RDJFODc1QzlDQjk5QjgxMERD
MUIzODMwMTAeFw0yNDA3MDcwMDA5MThaFw0yNTA3MDYwMDE0MThaMDMxMTAvBgNV
BAMTKDc0ODhFOTVGOUYwQjYxQjIwRDAwRDcwOUE1NkQwQUI4RDVBRkQwN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9EWIUkwjB6Vv0cfMhT6qCJ8XZ
4g8hRXjCqUji0Uo22FFfYh/c5ScSh/4HHS6f8pNFrAF9PjzK3X7aNulAdfi/KCZd
JLG2DtM7vOl4x1BAQ7UkKDU8PoToaEmonsEDtosFFjPYM6H4Orka/AkO1aA/2u0P
/gx+0S/bKuwSujZamE5tqhvrwLAGoBtLseNfoFpj2RbAor/1LHL29Bw6zL0exGp7
KzvwC6R90D+D3CfWsjt29pW2zwZ5sI594vbpS4VV8LpIxqgJOzJRoro38qEN1gyx
zffstM6AREy3e6KJolHB3DZwE4dPZGMNqwuhvShuX2+fkKSps+03nZjG4i6dAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUdIjpX58LYbINANcJpW0KuNWv0H0wHwYDVR0j
BBgwFoAU19g43thxd00uh1ycuZuBDcGzgwEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmM2MTVlYmQtNWMyOC00MzM0LThkMmMtZWMzMTU4YWZk
YzhjLzAvRDdEODM4REVEODcxNzc0RDJFODc1QzlDQjk5QjgxMERDMUIzODMwMS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9EN0Q4MzhERUQ4NzE3NzREMkU4NzVDOUNC
OTlCODEwREMxQjM4MzAxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9mYzYxNWViZC01YzI4LTQzMzQtOGQyYy1lYzMxNThhZmRjOGMvMC8zMjYxMzA2
MTNhMzYzMDM0MzQzYTYyNjIzMDMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRLsCMA0GCSqGSIb3DQEBCwUAA4IBAQAG
6HF/Sen8GFRZwTUlKmHHhYywUUKIB+3HDIOLrXIFccdXnIf8OKPVjPGy7B3d2M8X
ZDo4sLuv4iBU6D0B05EdeJFGP7GjbVgNw9LzAm0wODCK5BEdrwFoLQRkc0kDr+YB
jV53rS76Qk+RdKXR6BilNwgb0NbEvsyRUbLU/f5SGiBaN8F8XmG0pUWdLw6OSiDq
VF5aNiYRLra+I4FeQIKpWN423/yO2hQFnT4VN7YqDH8DBKR39wfkBjK+6CCGb34Q
Qj2LZwZwaec+Haq9oefnCfS0vYZ3UZPapZ5tBN9J3eLkkS5KTH4ZFsabqw62No44
pYObfVjZJfktAHz9yhZj
-----END CERTIFICATE-----