Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a666330303a3a2f33382d3438203d3e20313938303136.roa
File:                     326131333a646638373a666330303a3a2f33382d3438203d3e20313938303136.roa (raw, json)
Hash identifier:          VdQ8Nm2j19ldJwyTKBIEG8kz10OZKTtuxguLTCSJLXY=
Subject key identifier:   B9:50:03:5A:97:25:61:EA:BC:76:50:D9:F9:B6:23:C1:1D:B5:80:35
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       0B38B942D87FA907991C88BC8355E4DAB0F80AC9
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a666330303a3a2f33382d3438203d3e20313938303136.roa
Signing time:             Tue 19 Sep 2023 14:17:22 +0000
ROA not before:           Tue 19 Sep 2023 14:12:22 +0000
ROA not after:            Tue 17 Sep 2024 14:17:22 +0000
asID:                     198016
IP address blocks:        2a13:df87:fc00::/38 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:38:b9:42:d8:7f:a9:07:99:1c:88:bc:83:55:e4:da:b0:f8:0a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Sep 19 14:12:22 2023 GMT
            Not After : Sep 17 14:17:22 2024 GMT
        Subject: CN=B950035A972561EABC7650D9F9B623C11DB58035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e5:ea:9d:f5:9d:1d:65:28:48:cf:84:79:17:
                    0d:2b:5c:8f:7e:83:de:b8:d7:40:9c:cc:50:16:0f:
                    57:31:ca:9a:83:66:86:d7:f3:80:06:20:f7:4d:2a:
                    12:b7:28:9f:4f:65:ab:8c:fd:6d:a0:c8:0a:20:ed:
                    02:1d:07:55:a4:0f:55:1c:d2:34:c2:47:e3:07:23:
                    99:2c:40:e2:ec:1e:07:3e:f7:7c:97:93:9a:ff:b9:
                    a8:e4:58:65:57:2d:1a:6f:1c:5b:c9:53:cc:e2:58:
                    3a:3c:e2:84:79:84:a9:50:ab:bb:5f:23:4a:78:f6:
                    b5:3d:8c:20:2d:aa:61:0e:0a:6e:db:0a:d9:54:6a:
                    eb:eb:b8:cb:fb:ab:21:55:49:34:83:e3:c7:94:2f:
                    9e:f8:ed:a6:2d:4b:bc:22:2b:8a:8d:8f:f1:2a:b0:
                    45:d1:a7:6e:55:89:64:ba:66:56:7a:95:51:05:35:
                    40:0f:51:1d:a6:14:60:e7:3a:40:5e:65:a9:f4:8c:
                    b8:4f:59:73:b5:8d:74:ce:76:d2:b3:ca:64:1e:b6:
                    d3:3f:7e:fb:7e:3d:71:90:76:1e:80:92:7d:13:3c:
                    34:dc:b9:90:69:3b:aa:36:6b:d1:52:89:48:a7:5a:
                    19:df:fa:3f:e8:d0:63:b7:33:f1:8e:f3:64:a4:18:
                    b9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:50:03:5A:97:25:61:EA:BC:76:50:D9:F9:B6:23:C1:1D:B5:80:35
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a666330303a3a2f33382d3438203d3e20313938303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87:fc00::/38

    Signature Algorithm: sha256WithRSAEncryption
         05:b8:34:7c:be:11:ce:65:eb:9a:c9:fb:f2:de:94:56:9f:67:
         43:91:d1:7c:a9:b6:b3:be:4c:8f:8d:be:6f:8d:4e:17:5c:d6:
         7d:99:f4:28:85:8d:e9:f2:82:c2:5c:1b:25:46:f8:66:f2:b7:
         91:f7:55:61:ce:5f:2f:1f:2f:da:25:9e:0f:77:0a:59:30:09:
         a7:aa:64:b2:f5:41:52:58:1f:5b:ed:83:0b:41:c1:b6:de:c0:
         41:49:fb:b8:ef:db:2f:1f:d7:7d:48:0f:07:22:35:e2:44:fc:
         8e:2a:89:92:30:a2:ec:c5:0b:ee:0f:44:ec:d5:a7:71:de:d1:
         be:c1:78:d8:95:2e:0b:55:24:cb:70:b1:2a:41:40:09:33:39:
         6d:16:52:39:8f:7a:dd:69:09:18:3c:f5:f5:17:a8:ad:39:27:
         a8:16:dd:60:6e:95:62:49:03:53:5f:4f:02:73:d8:43:44:2a:
         12:43:b7:1b:83:1b:75:dc:fc:a9:35:7b:5b:f8:a4:d1:4c:3b:
         e8:05:42:4d:16:1d:90:e1:2e:0f:5b:bd:2c:25:ac:69:d7:3e:
         3c:3a:ba:4c:c5:a3:3b:64:ec:9b:59:a6:0a:f3:fa:66:47:ce:
         08:d6:16:25:43:2d:9e:a8:84:d3:34:33:4d:dd:97:27:12:85:
         b2:83:6c:ea
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUCzi5Qth/qQeZHIi8g1Xk2rD4CskwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDVjM2Q1ZTcwZmM5YWQxMGJhOTBkNDVkYzY2NDU0ZTll
M2ExNDZhODAeFw0yMzA5MTkxNDEyMjJaFw0yNDA5MTcxNDE3MjJaMDMxMTAvBgNV
BAMTKEI5NTAwMzVBOTcyNTYxRUFCQzc2NTBEOUY5QjYyM0MxMURCNTgwMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR5eqd9Z0dZShIz4R5Fw0rXI9+
g96410CczFAWD1cxypqDZobX84AGIPdNKhK3KJ9PZauM/W2gyAog7QIdB1WkD1Uc
0jTCR+MHI5ksQOLsHgc+93yXk5r/uajkWGVXLRpvHFvJU8ziWDo84oR5hKlQq7tf
I0p49rU9jCAtqmEOCm7bCtlUauvruMv7qyFVSTSD48eUL5747aYtS7wiK4qNj/Eq
sEXRp25ViWS6ZlZ6lVEFNUAPUR2mFGDnOkBeZan0jLhPWXO1jXTOdtKzymQettM/
fvt+PXGQdh6Akn0TPDTcuZBpO6o2a9FSiUinWhnf+j/o0GO3M/GO82SkGLlpAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQUuVADWpclYeq8dlDZ+bYjwR21gDUwHwYDVR0j
BBgwFoAU1cPV5w/JrRC6kNRdxmRU6eOhRqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYtMWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYx
NjdkLzAvRDVDM0Q1RTcwRkM5QUQxMEJBOTBENDVEQzY2NDU0RTlFM0ExNDZBOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjUFY1d19KclJDNmtOUmR4bVJVNmVP
aFJxZy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYt
MWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYxNjdkLzAvMzI2MTMxMzMzYTY0NjYzODM3
M2E2NjYzMzAzMDNhM2EyZjMzMzgyZDM0MzgyMDNkM2UyMDMxMzkzODMwMzEzNi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGAioT34f8MA0GCSqGSIb3DQEBCwUAA4IBAQAFuDR8vhHOZeuayfvy
3pRWn2dDkdF8qbazvkyPjb5vjU4XXNZ9mfQohY3p8oLCXBslRvhm8reR91Vhzl8v
Hy/aJZ4PdwpZMAmnqmSy9UFSWB9b7YMLQcG23sBBSfu479svH9d9SA8HIjXiRPyO
KomSMKLsxQvuD0Ts1adx3tG+wXjYlS4LVSTLcLEqQUAJMzltFlI5j3rdaQkYPPX1
F6itOSeoFt1gbpViSQNTX08Cc9hDRCoSQ7cbgxt13PypNXtb+KTRTDvoBUJNFh2Q
4S4PW70sJaxp1z48OrpMxaM7ZOybWaYK8/pmR84I1hYlQy2eqITTNDNN3ZcnEoWy
g2zq
-----END CERTIFICATE-----