Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f5c020-e1d7-4fe9-83c0-a3be63b8572f/1/CjDWHsxdvR8Zk6bd48GV6LkKCKo.roa
File:                     CjDWHsxdvR8Zk6bd48GV6LkKCKo.roa (raw, json)
Hash identifier:          L6ebY4sU08KNzCFkjr2wDQT+RZQQZa1NEjrxijwLThs=
Subject key identifier:   0A:30:D6:1E:CC:5D:BD:1F:19:93:A6:DD:E3:C1:95:E8:B9:0A:08:AA
Certificate issuer:       /CN=6b85894a84baa0eca0e6ef44a992fc2ba00f5277
Certificate serial:       01934448245EAD8ACE89FBE6E791DA13BF30
Authority key identifier: 6B:85:89:4A:84:BA:A0:EC:A0:E6:EF:44:A9:92:FC:2B:A0:0F:52:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a4WJSoS6oOyg5u9EqZL8K6APUnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/f5c020-e1d7-4fe9-83c0-a3be63b8572f/1/CjDWHsxdvR8Zk6bd48GV6LkKCKo.roa
Signing time:             Tue 19 Nov 2024 11:56:38 +0000
ROA not before:           Tue 19 Nov 2024 11:56:38 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     39582
IP address blocks:        2a02:4300::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:44:48:24:5e:ad:8a:ce:89:fb:e6:e7:91:da:13:bf:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b85894a84baa0eca0e6ef44a992fc2ba00f5277
        Validity
            Not Before: Nov 19 11:56:38 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0a30d61ecc5dbd1f1993a6dde3c195e8b90a08aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a0:56:bc:33:7a:29:2a:8a:23:36:a9:ae:c2:
                    a8:88:eb:a3:5b:2d:21:75:c1:a2:d2:c3:47:ef:6a:
                    b6:8e:45:31:a4:0a:87:a5:95:50:c2:87:86:5e:0b:
                    98:05:f5:98:8f:06:97:00:5c:fd:a5:be:4b:6b:8b:
                    b1:5a:d4:9b:9b:82:d9:29:59:3b:38:47:b8:93:0d:
                    df:31:6b:a8:4b:fb:fa:b6:bb:f6:62:76:ce:d2:eb:
                    e2:ba:53:8f:06:f5:a2:75:88:57:72:66:43:a4:59:
                    5b:e7:17:e9:73:6e:ac:cc:1a:65:11:7f:83:0b:4c:
                    b7:7a:1a:9b:86:ab:6a:65:46:78:c9:1c:48:32:8c:
                    ea:9a:79:c1:e5:e7:e1:ee:6f:ba:71:a0:10:77:e1:
                    5c:e1:fd:ff:a3:c7:88:18:f2:fb:a6:28:7f:f5:be:
                    47:8a:71:53:e5:48:68:9e:57:b3:19:0c:3e:bd:47:
                    53:db:ab:66:4a:7a:83:04:f1:bb:c2:5b:d2:d7:f4:
                    05:8b:80:45:d9:cb:d8:ec:28:1d:ce:82:61:8a:29:
                    2d:22:80:f0:b8:ae:f4:c9:93:dd:b4:80:57:0b:c4:
                    89:fe:70:4e:f8:0c:16:1d:aa:71:5e:2c:99:d8:82:
                    19:e6:3e:d5:5a:d2:17:ea:fa:f9:d5:e6:f6:ee:0a:
                    8b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:30:D6:1E:CC:5D:BD:1F:19:93:A6:DD:E3:C1:95:E8:B9:0A:08:AA
            X509v3 Authority Key Identifier:
                keyid:6B:85:89:4A:84:BA:A0:EC:A0:E6:EF:44:A9:92:FC:2B:A0:0F:52:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4WJSoS6oOyg5u9EqZL8K6APUnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f5c020-e1d7-4fe9-83c0-a3be63b8572f/1/CjDWHsxdvR8Zk6bd48GV6LkKCKo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f5c020-e1d7-4fe9-83c0-a3be63b8572f/1/a4WJSoS6oOyg5u9EqZL8K6APUnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:4300::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:af:25:06:d9:79:70:1f:4a:a7:09:9d:f4:bb:12:5d:41:ed:
         10:20:39:31:47:85:b2:47:83:f8:8a:d1:c8:b7:6f:22:b9:0b:
         d2:16:17:fe:6c:69:79:58:7a:16:51:aa:be:08:bc:1a:f9:85:
         e0:9b:fc:00:2a:c2:49:c5:ae:18:8a:c6:ac:c3:7e:a3:e0:b2:
         74:7b:cb:b9:12:10:56:94:65:16:e0:04:63:7e:5a:5e:94:83:
         52:bd:b2:43:e5:7f:cb:31:71:a6:fe:53:e1:c0:ed:e2:0d:b8:
         3b:06:82:77:3f:12:ea:9a:80:c4:5b:8d:17:2c:d2:6e:fa:b3:
         86:e4:b6:b8:74:57:67:d4:1e:a0:90:18:83:07:1c:8a:f7:17:
         50:e7:cb:f1:29:05:8f:d1:3c:b3:85:3e:c6:e0:1f:30:15:6d:
         a5:38:97:0a:33:c4:24:1d:f4:45:40:c8:12:86:9c:ab:bd:c4:
         0b:89:81:88:2b:31:f4:5d:12:3f:6b:5a:a5:6d:e8:f7:88:2d:
         96:db:2f:e0:8b:37:7e:2f:94:92:36:b8:12:59:3f:36:45:70:
         c5:8f:39:af:3b:8a:e4:f0:7e:1e:a0:1a:98:60:eb:48:6c:b9:
         ea:8c:e8:76:6e:15:7a:f6:9f:61:23:6d:5a:1d:6a:42:17:a8:
         b4:83:13:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----