Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/326130613a363034343a626230333a3a2f34382d3438203d3e20323135393536.roa
File:                     326130613a363034343a626230333a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          dUZWwdjkDPs7Q1c/4uJfTUhosaSqFfkJ1BLb/hyJ6ec=
Subject key identifier:   77:ED:3F:95:EA:2C:1A:8F:F4:14:1E:26:EB:49:81:B3:32:E2:27:9C
Certificate issuer:       /CN=D7D838DED871774D2E875C9CB99B810DC1B38301
Certificate serial:       6EFD05B79901767CD7F861C4ADD239DDBAFEE7E9
Authority key identifier: D7:D8:38:DE:D8:71:77:4D:2E:87:5C:9C:B9:9B:81:0D:C1:B3:83:01
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/D7D838DED871774D2E875C9CB99B810DC1B38301.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/326130613a363034343a626230333a3a2f34382d3438203d3e20323135393536.roa
Signing time:             Sun 07 Jul 2024 00:14:37 +0000
ROA not before:           Sun 07 Jul 2024 00:09:37 +0000
ROA not after:            Sun 06 Jul 2025 00:14:37 +0000
asID:                     215956
IP address blocks:        2a0a:6044:bb03::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:fd:05:b7:99:01:76:7c:d7:f8:61:c4:ad:d2:39:dd:ba:fe:e7:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7D838DED871774D2E875C9CB99B810DC1B38301
        Validity
            Not Before: Jul  7 00:09:37 2024 GMT
            Not After : Jul  6 00:14:37 2025 GMT
        Subject: CN=77ED3F95EA2C1A8FF4141E26EB4981B332E2279C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:97:a8:76:7b:6b:41:c5:d4:ef:e7:38:a2:83:
                    01:92:7d:f6:07:2b:e4:81:a3:0e:0e:64:4d:bf:ed:
                    b3:eb:0a:1c:ec:19:50:9b:bf:2e:54:5f:39:c7:ba:
                    f1:5c:cb:b8:a9:ec:92:21:c0:ba:9f:d5:08:86:79:
                    e2:f1:d9:9f:2e:81:3c:ef:14:64:54:90:47:db:4e:
                    53:36:6c:92:52:f8:1b:96:45:b2:c8:51:ff:2d:90:
                    b3:5d:f4:42:e2:2d:03:6d:f4:1b:65:3c:f0:78:43:
                    da:b4:73:a2:41:fb:e4:d9:0d:96:87:5b:3e:65:a3:
                    ef:e5:43:17:cd:51:f3:f7:6b:05:bf:2f:9b:8e:f3:
                    b2:3a:7f:ee:e3:72:8a:e4:b6:ee:4c:6c:68:ab:d8:
                    ff:df:8c:ae:66:91:ba:35:9f:d6:f2:0c:29:04:43:
                    fd:c4:82:57:c7:8e:b2:2a:42:71:a8:5b:0f:b1:c9:
                    e6:83:92:37:d0:76:c3:28:17:38:6e:07:20:56:4d:
                    b3:a1:75:22:b0:fa:ff:66:81:00:fe:72:29:d6:4c:
                    2e:de:87:0b:33:22:82:3d:6c:8b:d2:f6:25:93:51:
                    93:d4:c1:d1:00:d2:7d:0c:a7:e9:bb:26:9a:42:eb:
                    87:5a:eb:2a:fd:4b:b4:39:45:1c:bc:89:04:fc:ca:
                    77:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:ED:3F:95:EA:2C:1A:8F:F4:14:1E:26:EB:49:81:B3:32:E2:27:9C
            X509v3 Authority Key Identifier:
                keyid:D7:D8:38:DE:D8:71:77:4D:2E:87:5C:9C:B9:9B:81:0D:C1:B3:83:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/D7D838DED871774D2E875C9CB99B810DC1B38301.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/D7D838DED871774D2E875C9CB99B810DC1B38301.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/326130613a363034343a626230333a3a2f34382d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:bb03::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:bd:76:44:aa:1f:3e:40:98:57:bc:e3:2d:c5:f1:61:f8:43:
         23:dc:cc:b4:f4:c1:c1:a0:20:11:04:30:a1:11:d7:79:a3:4f:
         d9:12:41:8d:25:c5:ee:2e:f5:fe:9c:86:bd:44:0a:1f:6f:5e:
         a1:63:72:4b:9b:ef:6a:bc:f5:13:b7:89:4c:3e:10:46:e9:c9:
         50:f6:a6:ca:30:f1:65:6c:f1:00:c7:f1:4f:7e:57:5c:bb:22:
         be:b7:61:a5:a5:38:c6:2e:0d:f8:93:fb:b8:40:82:74:04:00:
         2c:d7:b2:56:74:5c:cf:b0:7e:53:3a:df:38:c1:72:0f:8e:9e:
         5d:b5:0e:de:1a:c9:fc:46:54:78:9c:a3:ae:07:ef:c9:b5:4a:
         75:62:a0:35:20:eb:8e:d5:f9:d0:e6:10:99:33:d9:33:ed:8a:
         3c:dd:23:f4:54:b3:c6:98:eb:1a:20:a8:bd:e2:69:b0:3a:ca:
         9b:10:1c:10:e5:45:0e:6e:85:c6:2b:d3:5a:69:f9:13:7a:82:
         20:c8:de:46:5b:44:90:96:bd:e6:dc:bc:de:d7:94:ed:f4:fb:
         97:0a:20:1b:fa:03:32:42:e8:18:1a:38:12:da:0c:88:05:9e:
         b6:da:f8:45:66:66:1b:05:e5:c9:f2:4d:d8:4f:67:fa:6e:47:
         5c:31:ce:07
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUbv0Ft5kBdnzX+GHErdI53br+5+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdEODM4REVEODcxNzc0RDJFODc1QzlDQjk5QjgxMERD
MUIzODMwMTAeFw0yNDA3MDcwMDA5MzdaFw0yNTA3MDYwMDE0MzdaMDMxMTAvBgNV
BAMTKDc3RUQzRjk1RUEyQzFBOEZGNDE0MUUyNkVCNDk4MUIzMzJFMjI3OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCil6h2e2tBxdTv5ziigwGSffYH
K+SBow4OZE2/7bPrChzsGVCbvy5UXznHuvFcy7ip7JIhwLqf1QiGeeLx2Z8ugTzv
FGRUkEfbTlM2bJJS+BuWRbLIUf8tkLNd9ELiLQNt9BtlPPB4Q9q0c6JB++TZDZaH
Wz5lo+/lQxfNUfP3awW/L5uO87I6f+7jcorktu5MbGir2P/fjK5mkbo1n9byDCkE
Q/3EglfHjrIqQnGoWw+xyeaDkjfQdsMoFzhuByBWTbOhdSKw+v9mgQD+cinWTC7e
hwszIoI9bIvS9iWTUZPUwdEA0n0Mp+m7JppC64da6yr9S7Q5RRy8iQT8ync1AgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUd+0/leosGo/0FB4m60mBszLiJ5wwHwYDVR0j
BBgwFoAU19g43thxd00uh1ycuZuBDcGzgwEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmM2MTVlYmQtNWMyOC00MzM0LThkMmMtZWMzMTU4YWZk
YzhjLzAvRDdEODM4REVEODcxNzc0RDJFODc1QzlDQjk5QjgxMERDMUIzODMwMS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9EN0Q4MzhERUQ4NzE3NzREMkU4NzVDOUNC
OTlCODEwREMxQjM4MzAxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9mYzYxNWViZC01YzI4LTQzMzQtOGQyYy1lYzMxNThhZmRjOGMvMC8zMjYxMzA2
MTNhMzYzMDM0MzQzYTYyNjIzMDMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRLsDMA0GCSqGSIb3DQEBCwUAA4IBAQCk
vXZEqh8+QJhXvOMtxfFh+EMj3My09MHBoCARBDChEdd5o0/ZEkGNJcXuLvX+nIa9
RAofb16hY3JLm+9qvPUTt4lMPhBG6clQ9qbKMPFlbPEAx/FPfldcuyK+t2GlpTjG
Lg34k/u4QIJ0BAAs17JWdFzPsH5TOt84wXIPjp5dtQ7eGsn8RlR4nKOuB+/JtUp1
YqA1IOuO1fnQ5hCZM9kz7Yo83SP0VLPGmOsaIKi94mmwOsqbEBwQ5UUOboXGK9Na
afkTeoIgyN5GW0SQlr3m3Lze15Tt9PuXCiAb+gMyQugYGjgS2gyIBZ622vhFZmYb
BeXJ8k3YT2f6bkdcMc4H
-----END CERTIFICATE-----