Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530323a3a2f34382d3438203d3e20323135393536.roa
File:                     326131343a373538303a656530323a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          MPjfkMTrNazIKtS4li6hyuL1eBKeAz3eydIrEvpl14I=
Subject key identifier:   97:3D:07:0D:E8:4D:76:01:52:73:F2:85:33:AB:E1:3A:AA:4C:95:7D
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       F346BFB76826A55347B6746FEF67C047A3A6B5
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530323a3a2f34382d3438203d3e20323135393536.roa
Signing time:             Sun 29 Mar 2026 19:22:11 +0000
ROA not before:           Sun 29 Mar 2026 19:17:11 +0000
ROA not after:            Sun 28 Mar 2027 19:22:11 +0000
asID:                     215956
IP address blocks:        2a14:7580:ee02::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f3:46:bf:b7:68:26:a5:53:47:b6:74:6f:ef:67:c0:47:a3:a6:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar 29 19:17:11 2026 GMT
            Not After : Mar 28 19:22:11 2027 GMT
        Subject: CN=973D070DE84D76015273F28533ABE13AAA4C957D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:aa:10:fb:25:21:f2:ec:17:eb:9c:aa:fc:83:
                    d9:ad:9c:60:d9:f9:e5:8c:3e:5b:58:f3:52:53:f6:
                    46:0d:24:96:fb:95:47:7b:00:78:38:b0:81:4e:94:
                    c2:59:e9:3d:6a:b5:81:e9:20:4b:87:f7:ce:9a:b9:
                    bd:ad:f0:9e:c3:62:e1:72:85:e1:6d:6e:5c:21:ad:
                    bf:b6:bd:e7:f7:48:de:0b:76:47:e0:0f:a3:bc:bc:
                    e6:7c:a4:b5:02:4d:2c:bf:e1:89:71:61:03:9e:af:
                    a9:5b:60:32:60:dd:7b:cb:ec:d7:29:1e:e5:8d:d8:
                    c1:d2:4f:c5:fd:d1:fc:2a:b1:8d:ab:d4:27:c2:19:
                    9a:8f:73:37:89:6e:40:ae:bb:71:c0:35:b6:70:03:
                    e2:8b:3f:2c:4b:a2:f7:82:06:d8:72:a3:0e:d3:47:
                    48:fe:7f:21:c0:f6:f4:77:9c:19:9b:42:b6:31:ee:
                    05:e8:4f:b1:cd:80:db:12:d8:fc:66:4c:ef:1b:00:
                    97:a2:42:3b:9a:62:85:e6:e1:2d:b7:d7:ba:9e:29:
                    22:fa:97:70:77:63:78:b0:cf:8d:25:7b:a9:1a:55:
                    2b:3a:70:72:60:c8:81:8a:03:bb:a9:4e:47:ac:e8:
                    65:74:06:c1:ea:44:77:fe:7b:10:72:23:d2:e7:fe:
                    2a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3D:07:0D:E8:4D:76:01:52:73:F2:85:33:AB:E1:3A:AA:4C:95:7D
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530323a3a2f34382d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ee02::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:5c:49:b1:ba:43:9f:7f:18:e4:4b:af:7f:55:14:dc:13:11:
         82:a3:c0:11:ec:85:33:d5:02:1a:94:a3:e9:55:6b:1a:a4:1a:
         eb:bd:f7:d2:73:70:e7:2b:65:57:50:f9:1e:76:b9:62:eb:9b:
         25:5e:22:08:af:f2:98:58:36:7e:ac:e9:db:7a:7a:e0:c4:71:
         f8:0d:38:77:7f:5c:56:80:49:d6:39:66:72:66:2d:0b:fa:d3:
         47:b4:ef:1c:e2:8a:03:8d:7d:3d:76:51:b0:90:67:f4:d3:b5:
         3c:26:7d:6b:45:fa:80:c6:fd:dc:54:2f:bb:8b:0f:b8:a5:d4:
         ce:8f:a8:59:bb:eb:9b:b6:57:1a:3f:df:b0:51:cc:61:68:85:
         85:37:41:b0:e8:3c:e6:da:1e:62:a8:5f:a1:3e:95:20:55:c2:
         2b:9f:39:df:77:9a:cc:cd:53:61:2c:41:a3:14:f4:af:13:9f:
         11:b9:fc:19:28:a1:02:fa:cd:aa:0b:73:f3:ce:66:43:71:6c:
         bc:d9:d0:cc:c4:56:62:0e:1b:54:0d:0b:9d:19:01:c5:3f:5a:
         78:06:a8:8a:fa:63:cd:97:62:54:38:da:d3:77:2a:bd:d6:9e:
         f6:41:ca:42:b0:bd:f1:b9:73:48:b9:ef:87:fc:28:1d:07:f0:
         a2:ad:81:ed
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUAPNGv7doJqVTR7Z0b+9nwEejprUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5
QjhEOTAyQjAeFw0yNjAzMjkxOTE3MTFaFw0yNzAzMjgxOTIyMTFaMDMxMTAvBgNV
BAMTKDk3M0QwNzBERTg0RDc2MDE1MjczRjI4NTMzQUJFMTNBQUE0Qzk1N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGqhD7JSHy7BfrnKr8g9mtnGDZ
+eWMPltY81JT9kYNJJb7lUd7AHg4sIFOlMJZ6T1qtYHpIEuH986aub2t8J7DYuFy
heFtblwhrb+2vef3SN4LdkfgD6O8vOZ8pLUCTSy/4YlxYQOer6lbYDJg3XvL7Ncp
HuWN2MHST8X90fwqsY2r1CfCGZqPczeJbkCuu3HANbZwA+KLPyxLoveCBthyow7T
R0j+fyHA9vR3nBmbQrYx7gXoT7HNgNsS2PxmTO8bAJeiQjuaYoXm4S2317qeKSL6
l3B3Y3iwz40le6kaVSs6cHJgyIGKA7upTkes6GV0BsHqRHf+exByI9Ln/ir/AgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUlz0HDehNdgFSc/KFM6vhOqpMlX0wHwYDVR0j
BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj
OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz
REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz
NDNhMzczNTM4MzAzYTY1NjUzMDMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gO4CMA0GCSqGSIb3DQEBCwUAA4IBAQAV
XEmxukOffxjkS69/VRTcExGCo8AR7IUz1QIalKPpVWsapBrrvffSc3DnK2VXUPke
drli65slXiIIr/KYWDZ+rOnbenrgxHH4DTh3f1xWgEnWOWZyZi0L+tNHtO8c4ooD
jX09dlGwkGf007U8Jn1rRfqAxv3cVC+7iw+4pdTOj6hZu+ubtlcaP9+wUcxhaIWF
N0Gw6Dzm2h5iqF+hPpUgVcIrnznfd5rMzVNhLEGjFPSvE58RufwZKKEC+s2qC3Pz
zmZDcWy82dDMxFZiDhtUDQudGQHFP1p4BqiK+mPNl2JUONrTdyq91p72QcpCsL3x
uXNIue+H/CgdB/CirYHt
-----END CERTIFICATE-----