Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530313a3a2f34382d3438203d3e20323135393536.roa
File:                     326131343a373538303a656530313a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          Tw8Ho1Ax+rX71ynqo3HbwRr2vu/t7DVFS5wyxNxWzTU=
Subject key identifier:   30:0B:C6:9E:CD:B6:5D:2B:A0:51:AF:24:05:09:1B:BA:C7:7E:14:AD
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       782B059C4F885050BB859060FE90EED3FF2F452E
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530313a3a2f34382d3438203d3e20323135393536.roa
Signing time:             Sun 29 Mar 2026 19:22:09 +0000
ROA not before:           Sun 29 Mar 2026 19:17:09 +0000
ROA not after:            Sun 28 Mar 2027 19:22:09 +0000
asID:                     215956
IP address blocks:        2a14:7580:ee01::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:2b:05:9c:4f:88:50:50:bb:85:90:60:fe:90:ee:d3:ff:2f:45:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar 29 19:17:09 2026 GMT
            Not After : Mar 28 19:22:09 2027 GMT
        Subject: CN=300BC69ECDB65D2BA051AF2405091BBAC77E14AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:42:8b:1d:c2:fe:93:52:67:f3:e6:61:44:e1:
                    54:e5:e6:50:55:25:5f:ef:14:73:05:a8:23:6b:13:
                    10:54:9c:ad:95:50:df:cc:e0:dd:3b:71:b9:88:bb:
                    02:f5:5f:29:9c:fa:52:4f:ff:b6:4f:c7:f2:3d:ab:
                    48:a1:75:c6:07:34:2a:0d:60:84:ab:76:d8:7d:9b:
                    b9:d1:5c:14:a4:23:dc:4f:79:f3:e0:06:39:c4:b9:
                    54:c8:c3:36:11:ad:22:52:55:d6:b9:1a:81:1e:30:
                    4e:ef:56:4b:27:74:7e:ab:97:95:4c:d4:b4:1a:9b:
                    ef:f5:65:fa:2b:1d:b7:e0:00:07:ef:ec:8f:81:67:
                    e3:2d:55:3f:f3:e5:86:de:f1:0c:30:56:85:b1:27:
                    67:cd:ac:9a:df:a9:a9:35:25:20:0b:f7:42:fc:de:
                    be:7a:0e:ac:32:8c:3e:bd:d1:e3:5f:6d:5d:25:69:
                    6f:da:fd:37:7a:54:d7:a3:be:23:de:ee:04:dc:6a:
                    4f:8e:99:57:2a:14:9c:ae:6c:ea:46:cc:3d:69:05:
                    c1:83:c1:c6:00:16:db:c6:ee:a0:18:40:3f:a4:ef:
                    18:d3:5c:ce:95:b4:2f:56:95:12:d7:fa:27:ec:0a:
                    a6:dd:12:61:e6:d5:66:ab:7e:41:ad:cb:ae:0f:c0:
                    ef:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:0B:C6:9E:CD:B6:5D:2B:A0:51:AF:24:05:09:1B:BA:C7:7E:14:AD
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530313a3a2f34382d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ee01::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:cc:07:4f:78:97:8d:56:84:91:1a:0e:33:43:dc:88:b5:64:
         b3:57:a5:81:af:3a:ad:cd:9f:7a:81:bc:2d:9a:7e:e7:d1:79:
         c4:87:3f:46:81:76:63:87:ed:41:db:6d:af:26:9a:4c:ca:2a:
         6d:9b:43:27:28:de:67:ab:95:48:1d:02:f3:c9:1d:c6:94:94:
         6f:77:b9:60:90:5a:d4:c5:cf:eb:99:ec:a0:91:a7:96:67:ae:
         22:e3:1f:e6:5b:8f:29:44:db:20:90:07:0f:23:a0:b2:b0:c5:
         58:36:2c:2b:48:c1:a2:cd:aa:1e:c3:3d:8b:d1:0d:68:3d:46:
         a7:66:f3:e8:2a:a6:ab:24:d2:29:04:aa:18:8d:a5:2e:c1:c1:
         40:3b:9d:5f:14:fd:28:c4:08:c6:22:97:aa:96:ab:a9:c2:f1:
         d6:77:ee:5b:5a:19:fd:2c:22:06:7e:a6:e0:9d:a5:98:b5:28:
         19:0a:97:9d:d9:6e:3e:a0:23:d5:9f:a2:c7:84:18:3e:d0:f1:
         69:6e:44:29:e0:10:87:ad:de:48:e4:b3:84:7b:8b:51:0a:ce:
         c7:17:27:40:06:92:38:88:60:7b:75:e8:ab:af:c5:b6:85:63:
         b4:c2:50:2a:76:a1:1f:d3:cf:57:2b:b4:35:9a:62:5d:0f:11:
         dc:28:2a:20
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUeCsFnE+IUFC7hZBg/pDu0/8vRS4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5
QjhEOTAyQjAeFw0yNjAzMjkxOTE3MDlaFw0yNzAzMjgxOTIyMDlaMDMxMTAvBgNV
BAMTKDMwMEJDNjlFQ0RCNjVEMkJBMDUxQUYyNDA1MDkxQkJBQzc3RTE0QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYQosdwv6TUmfz5mFE4VTl5lBV
JV/vFHMFqCNrExBUnK2VUN/M4N07cbmIuwL1Xymc+lJP/7ZPx/I9q0ihdcYHNCoN
YISrdth9m7nRXBSkI9xPefPgBjnEuVTIwzYRrSJSVda5GoEeME7vVksndH6rl5VM
1LQam+/1ZforHbfgAAfv7I+BZ+MtVT/z5Ybe8QwwVoWxJ2fNrJrfqak1JSAL90L8
3r56DqwyjD690eNfbV0laW/a/Td6VNejviPe7gTcak+OmVcqFJyubOpGzD1pBcGD
wcYAFtvG7qAYQD+k7xjTXM6VtC9WlRLX+ifsCqbdEmHm1WarfkGty64PwO+xAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUMAvGns22XSugUa8kBQkbusd+FK0wHwYDVR0j
BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj
OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz
REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz
NDNhMzczNTM4MzAzYTY1NjUzMDMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gO4BMA0GCSqGSIb3DQEBCwUAA4IBAQBc
zAdPeJeNVoSRGg4zQ9yItWSzV6WBrzqtzZ96gbwtmn7n0XnEhz9GgXZjh+1B222v
JppMyiptm0MnKN5nq5VIHQLzyR3GlJRvd7lgkFrUxc/rmeygkaeWZ64i4x/mW48p
RNsgkAcPI6CysMVYNiwrSMGizaoewz2L0Q1oPUanZvPoKqarJNIpBKoYjaUuwcFA
O51fFP0oxAjGIpeqlqupwvHWd+5bWhn9LCIGfqbgnaWYtSgZCped2W4+oCPVn6LH
hBg+0PFpbkQp4BCHrd5I5LOEe4tRCs7HFydABpI4iGB7deirr8W2hWO0wlAqdqEf
089XK7Q1mmJdDxHcKCog
-----END CERTIFICATE-----