Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656431343a3a2f34362d3438203d3e20323135393536.roa
File:                     326131343a373538303a656431343a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          wuw6aCCzZqD4zYig3TtPgyKg4WZZjvlsiok7gpqJ+mY=
Subject key identifier:   B1:82:C9:C3:A0:FB:E4:0B:29:09:E8:D6:EC:3E:AC:BA:E3:B6:D6:78
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       0EB3016C1D3010942AAD2FA255F789A66F8CF006
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656431343a3a2f34362d3438203d3e20323135393536.roa
Signing time:             Sun 29 Mar 2026 19:22:10 +0000
ROA not before:           Sun 29 Mar 2026 19:17:10 +0000
ROA not after:            Sun 28 Mar 2027 19:22:10 +0000
asID:                     215956
IP address blocks:        2a14:7580:ed14::/46 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b3:01:6c:1d:30:10:94:2a:ad:2f:a2:55:f7:89:a6:6f:8c:f0:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar 29 19:17:10 2026 GMT
            Not After : Mar 28 19:22:10 2027 GMT
        Subject: CN=B182C9C3A0FBE40B2909E8D6EC3EACBAE3B6D678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ec:d8:8d:a6:1d:5a:b8:98:7c:42:1b:ef:2c:
                    90:4c:dd:40:55:5e:f8:8d:0f:1c:7b:60:82:90:34:
                    31:9b:d8:1b:14:37:a1:8a:3f:9f:a5:26:d5:d2:29:
                    2b:e7:91:b0:6e:3a:a5:f8:fc:64:3e:8c:b4:d5:1a:
                    c0:36:cc:db:09:36:c2:72:11:98:3d:6e:57:e3:ef:
                    76:97:b8:69:6c:6d:d4:45:ff:7f:29:20:58:a7:ea:
                    c7:6e:c1:be:8a:14:f5:21:bf:48:aa:77:e1:4c:d8:
                    d9:84:bb:fd:fd:49:2d:b9:79:a2:68:59:42:89:1d:
                    d9:55:79:eb:6d:bc:33:a9:a1:1a:1f:97:34:53:cb:
                    5f:c9:34:53:6b:30:30:73:13:3f:09:bf:52:40:6e:
                    e5:8b:7c:25:be:ec:d9:1e:e0:b1:85:77:3f:f9:a9:
                    39:ff:d8:10:24:e9:10:4a:4a:07:97:87:d5:01:65:
                    d5:b0:33:7f:34:6a:6b:cb:90:81:ef:b7:5b:e7:13:
                    b7:99:3f:a7:ed:c3:c1:27:3e:42:b6:12:2d:02:12:
                    72:f7:de:86:f2:75:b9:d0:1b:5e:40:af:35:45:07:
                    b4:18:b6:56:03:2f:f3:ab:13:fc:78:45:d9:77:49:
                    37:ef:d9:96:fa:b4:43:8c:22:2b:fd:eb:2d:15:75:
                    21:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:82:C9:C3:A0:FB:E4:0B:29:09:E8:D6:EC:3E:AC:BA:E3:B6:D6:78
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656431343a3a2f34362d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ed14::/46

    Signature Algorithm: sha256WithRSAEncryption
         a2:c5:01:89:e9:f7:e9:af:32:74:22:d7:28:90:22:fa:5a:67:
         2d:9d:b7:a7:79:3e:9f:21:96:89:24:e9:1c:b5:f2:7f:3e:d3:
         56:e7:de:cb:6a:21:48:37:41:64:13:45:d5:d6:68:7d:d4:c0:
         b9:72:e0:43:a6:dc:e1:0b:ce:b1:ef:c6:2f:c4:9f:8e:b0:58:
         25:b7:c4:b7:0e:92:42:29:a1:2c:be:72:d6:5f:24:bc:78:f8:
         a1:ab:bc:fb:c6:3c:99:43:0d:4e:cb:c9:d2:56:83:4c:7d:84:
         b4:39:82:86:4e:8f:07:e3:07:83:30:da:6f:cc:9f:4b:74:15:
         67:61:01:42:3c:e7:a7:a9:e0:dc:02:74:1e:5f:c3:ab:01:51:
         98:59:77:82:cd:25:47:9b:59:69:5d:93:ed:71:3e:a4:54:e0:
         76:98:19:40:d0:3d:41:ad:0f:2f:a6:58:2e:f6:d5:af:ca:16:
         39:46:54:35:6b:90:c5:a3:e3:f1:61:cb:89:19:9d:1c:f3:9a:
         8a:36:6b:4d:60:ad:83:11:a8:52:6c:5e:34:05:ac:b0:19:f9:
         31:a1:57:a4:7b:60:97:ed:59:f5:e2:93:78:bb:a7:26:95:9b:
         78:d6:4b:81:1d:c6:28:dd:28:e1:46:cb:79:78:68:50:13:07:
         be:2b:09:5b
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUDrMBbB0wEJQqrS+iVfeJpm+M8AYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5
QjhEOTAyQjAeFw0yNjAzMjkxOTE3MTBaFw0yNzAzMjgxOTIyMTBaMDMxMTAvBgNV
BAMTKEIxODJDOUMzQTBGQkU0MEIyOTA5RThENkVDM0VBQ0JBRTNCNkQ2NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL7NiNph1auJh8QhvvLJBM3UBV
XviNDxx7YIKQNDGb2BsUN6GKP5+lJtXSKSvnkbBuOqX4/GQ+jLTVGsA2zNsJNsJy
EZg9blfj73aXuGlsbdRF/38pIFin6sduwb6KFPUhv0iqd+FM2NmEu/39SS25eaJo
WUKJHdlVeettvDOpoRoflzRTy1/JNFNrMDBzEz8Jv1JAbuWLfCW+7Nke4LGFdz/5
qTn/2BAk6RBKSgeXh9UBZdWwM380amvLkIHvt1vnE7eZP6ftw8EnPkK2Ei0CEnL3
3obydbnQG15ArzVFB7QYtlYDL/OrE/x4Rdl3STfv2Zb6tEOMIiv96y0VdSGnAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUsYLJw6D75AspCejW7D6suuO21ngwHwYDVR0j
BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj
OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz
REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz
NDNhMzczNTM4MzAzYTY1NjQzMTM0M2EzYTJmMzQzNjJkMzQzODIwM2QzZTIwMzIz
MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcCKhR1gO0UMA0GCSqGSIb3DQEBCwUAA4IBAQCi
xQGJ6ffprzJ0ItcokCL6WmctnbeneT6fIZaJJOkctfJ/PtNW597LaiFIN0FkE0XV
1mh91MC5cuBDptzhC86x78YvxJ+OsFglt8S3DpJCKaEsvnLWXyS8ePihq7z7xjyZ
Qw1Oy8nSVoNMfYS0OYKGTo8H4weDMNpvzJ9LdBVnYQFCPOenqeDcAnQeX8OrAVGY
WXeCzSVHm1lpXZPtcT6kVOB2mBlA0D1BrQ8vplgu9tWvyhY5RlQ1a5DFo+PxYcuJ
GZ0c85qKNmtNYK2DEahSbF40BaywGfkxoVeke2CX7Vn14pN4u6cmlZt41kuBHcYo
3SjhRst5eGhQEwe+Kwlb
-----END CERTIFICATE-----