Route Origin Authorization

$ rpki-client -vvf rpki1.rpki-test.sit.fraunhofer.de/repo/rpki1_fraunhofer/0/3139332e3136322e3133372e302f32342d3234203d3e20323132373935.roa
File:                     3139332e3136322e3133372e302f32342d3234203d3e20323132373935.roa (raw, json)
Hash identifier:          tWRXOPAIbbwMsj2npnHdrtA2FjoIVvJYiCirI2yw5JI=
Subject key identifier:   57:21:4F:2C:7B:7A:0C:18:F9:64:0E:A8:11:89:6A:0C:B6:E1:76:04
Certificate issuer:       /CN=df5a31e54915eb10eb015ed8f0476d8c3f64fff1
Certificate serial:       740FE0F75683CC400E87B20BC60875D721E097AB
Authority key identifier: DF:5A:31:E5:49:15:EB:10:EB:01:5E:D8:F0:47:6D:8C:3F:64:FF:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/31ox5UkV6xDrAV7Y8EdtjD9k__E.cer
Subject info access:      rsync://rpki1.rpki-test.sit.fraunhofer.de/repo/rpki1_fraunhofer/0/3139332e3136322e3133372e302f32342d3234203d3e20323132373935.roa
Signing time:             Sun 05 Jun 2022 16:00:00 +0000
ROA not before:           Sun 05 Jun 2022 15:55:00 +0000
ROA not after:            Sun 04 Jun 2023 16:00:00 +0000
asID:                     212795
IP address blocks:        193.162.137.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:0f:e0:f7:56:83:cc:40:0e:87:b2:0b:c6:08:75:d7:21:e0:97:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df5a31e54915eb10eb015ed8f0476d8c3f64fff1
        Validity
            Not Before: Jun  5 15:55:00 2022 GMT
            Not After : Jun  4 16:00:00 2023 GMT
        Subject: CN=3082010A0282010100E5333A76CF6F99890E7A950B28871BBD69F6FE486160D15E6BD7DCD251B6534E8F685DFD8FF9C08419A642F978FF34C41D47E5BAC0922915A5C78D1F132C0717735FCED6EF8156CE10670DB52FAA59DFC531B8CD8E39F3DA9EB5A61E1E0265A5DFF209FCBF2CF792B4F613E4B31694750C3EBB64922CD977C84A46440D6AC313107670E0401E91DEA5C7C52C7FAE8FF189EBDE4C53D5C896393A2252235739F0E8DEF9D5B9F8BFA2F55A1D9C9A0626888F66149BF8F251DDFB6F1DB5E8903E508011FD4A88406E60030D6588370A051F702CE710682195120768EA6BCBC891FF76059F2038B4C7EF7BF077842087375740AE73F252FAD57144AE1398DD3A5ED50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:33:3a:76:cf:6f:99:89:0e:7a:95:0b:28:87:
                    1b:bd:69:f6:fe:48:61:60:d1:5e:6b:d7:dc:d2:51:
                    b6:53:4e:8f:68:5d:fd:8f:f9:c0:84:19:a6:42:f9:
                    78:ff:34:c4:1d:47:e5:ba:c0:92:29:15:a5:c7:8d:
                    1f:13:2c:07:17:73:5f:ce:d6:ef:81:56:ce:10:67:
                    0d:b5:2f:aa:59:df:c5:31:b8:cd:8e:39:f3:da:9e:
                    b5:a6:1e:1e:02:65:a5:df:f2:09:fc:bf:2c:f7:92:
                    b4:f6:13:e4:b3:16:94:75:0c:3e:bb:64:92:2c:d9:
                    77:c8:4a:46:44:0d:6a:c3:13:10:76:70:e0:40:1e:
                    91:de:a5:c7:c5:2c:7f:ae:8f:f1:89:eb:de:4c:53:
                    d5:c8:96:39:3a:22:52:23:57:39:f0:e8:de:f9:d5:
                    b9:f8:bf:a2:f5:5a:1d:9c:9a:06:26:88:8f:66:14:
                    9b:f8:f2:51:dd:fb:6f:1d:b5:e8:90:3e:50:80:11:
                    fd:4a:88:40:6e:60:03:0d:65:88:37:0a:05:1f:70:
                    2c:e7:10:68:21:95:12:07:68:ea:6b:cb:c8:91:ff:
                    76:05:9f:20:38:b4:c7:ef:7b:f0:77:84:20:87:37:
                    57:40:ae:73:f2:52:fa:d5:71:44:ae:13:98:dd:3a:
                    5e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:21:4F:2C:7B:7A:0C:18:F9:64:0E:A8:11:89:6A:0C:B6:E1:76:04
            X509v3 Authority Key Identifier:
                keyid:DF:5A:31:E5:49:15:EB:10:EB:01:5E:D8:F0:47:6D:8C:3F:64:FF:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.rpki-test.sit.fraunhofer.de/repo/rpki1_fraunhofer/0/DF5A31E54915EB10EB015ED8F0476D8C3F64FFF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31ox5UkV6xDrAV7Y8EdtjD9k__E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.rpki-test.sit.fraunhofer.de/repo/rpki1_fraunhofer/0/3139332e3136322e3133372e302f32342d3234203d3e20323132373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.162.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:1e:be:6d:04:fd:b1:18:d3:59:5d:db:5c:ab:2c:e9:1c:90:
         90:39:ff:22:c4:2b:06:54:c2:8d:d8:fe:5c:be:4e:fa:2d:20:
         9f:57:53:7d:a3:9b:0f:53:f2:c7:a2:da:ef:2b:93:bd:37:6b:
         32:1e:6b:2e:ac:86:85:75:15:5f:8c:90:50:b3:09:44:d0:e2:
         ee:09:e0:5f:85:3b:0a:28:85:29:17:f1:0d:26:2d:e6:54:f4:
         aa:22:27:59:02:73:c8:1d:47:97:b8:0e:3d:73:7c:38:ae:dd:
         5d:b2:18:ab:05:10:49:f1:dc:51:9b:f2:70:a8:b4:d8:dc:7f:
         08:47:fc:c7:57:d7:b2:f3:69:f3:a4:2d:50:45:0d:d2:12:d6:
         8b:c1:bf:b5:c3:fc:88:e7:7f:a5:36:04:4e:17:21:65:e9:57:
         32:a5:87:f8:8a:b3:6a:f9:71:fb:66:b5:3a:ab:4c:f9:db:59:
         7f:01:0a:fe:bf:0e:eb:d2:09:94:02:27:31:68:3e:43:ab:de:
         06:58:ff:5a:28:1e:a9:ff:7d:b7:6a:ee:fb:0e:96:d2:51:c5:
         98:3d:42:be:dd:41:03:f7:27:8f:c5:6d:18:36:c7:fa:30:8d:
         b2:8a:40:2f:b8:e4:0f:bd:d7:2e:97:af:97:23:70:2d:b7:e0:
         16:c0:18:2c
-----BEGIN CERTIFICATE-----
MIIHCzCCBfOgAwIBAgIUdA/g91aDzEAOh7ILxgh11yHgl6swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY1YTMxZTU0OTE1ZWIxMGViMDE1ZWQ4ZjA0NzZkOGMz
ZjY0ZmZmMTAeFw0yMjA2MDUxNTU1MDBaFw0yMzA2MDQxNjAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTUzMzNBNzZDRjZGOTk4OTBF
N0E5NTBCMjg4NzFCQkQ2OUY2RkU0ODYxNjBEMTVFNkJEN0RDRDI1MUI2NTM0RThG
Njg1REZEOEZGOUMwODQxOUE2NDJGOTc4RkYzNEM0MUQ0N0U1QkFDMDkyMjkxNUE1
Qzc4RDFGMTMyQzA3MTc3MzVGQ0VENkVGODE1NkNFMTA2NzBEQjUyRkFBNTlERkM1
MzFCOENEOEUzOUYzREE5RUI1QTYxRTFFMDI2NUE1REZGMjA5RkNCRjJDRjc5MkI0
RjYxM0U0QjMxNjk0NzUwQzNFQkI2NDkyMkNEOTc3Qzg0QTQ2NDQwRDZBQzMxMzEw
NzY3MEUwNDAxRTkxREVBNUM3QzUyQzdGQUU4RkYxODlFQkRFNEM1M0Q1Qzg5NjM5
M0EyMjUyMjM1NzM5RjBFOERFRjlENUI5RjhCRkEyRjU1QTFEOUM5QTA2MjY4ODhG
NjYxNDlCRjhGMjUxRERGQjZGMURCNUU4OTAzRTUwODAxMUZENEE4ODQwNkU2MDAz
MEQ2NTg4MzcwQTA1MUY3MDJDRTcxMDY4MjE5NTEyMDc2OEVBNkJDQkM4OTFGRjc2
MDU5RjIwMzhCNEM3RUY3QkYwNzc4NDIwODczNzU3NDBBRTczRjI1MkZBRDU3MTQ0
QUUxMzk4REQzQTVFRDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5TM6ds9vmYkOepULKIcbvWn2/khhYNFea9fc0lG2U06PaF39j/nA
hBmmQvl4/zTEHUflusCSKRWlx40fEywHF3NfztbvgVbOEGcNtS+qWd/FMbjNjjnz
2p61ph4eAmWl3/IJ/L8s95K09hPksxaUdQw+u2SSLNl3yEpGRA1qwxMQdnDgQB6R
3qXHxSx/ro/xieveTFPVyJY5OiJSI1c58Oje+dW5+L+i9VodnJoGJoiPZhSb+PJR
3ftvHbXokD5QgBH9SohAbmADDWWINwoFH3As5xBoIZUSB2jqa8vIkf92BZ8gOLTH
73vwd4QghzdXQK5z8lL61XFErhOY3Tpe1QIDAQABo4ICGTCCAhUwHQYDVR0OBBYE
FFchTyx7egwY+WQOqBGJagy24XYEMB8GA1UdIwQYMBaAFN9aMeVJFesQ6wFe2PBH
bYw/ZP/xMA4GA1UdDwEB/wQEAwIHgDB/BgNVHR8EeDB2MHSgcqBwhm5yc3luYzov
L3Jwa2kxLnJwa2ktdGVzdC5zaXQuZnJhdW5ob2Zlci5kZS9yZXBvL3Jwa2kxX2Zy
YXVuaG9mZXIvMC9ERjVBMzFFNTQ5MTVFQjEwRUIwMTVFRDhGMDQ3NkQ4QzNGNjRG
RkYxLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzFveDVVa1Y2eERyQVY3WThF
ZHRqRDlrX19FLmNlcjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGA
cnN5bmM6Ly9ycGtpMS5ycGtpLXRlc3Quc2l0LmZyYXVuaG9mZXIuZGUvcmVwby9y
cGtpMV9mcmF1bmhvZmVyLzAvMzEzOTMzMmUzMTM2MzIyZTMxMzMzNzJlMzAyZjMy
MzQyZDMyMzQyMDNkM2UyMDMyMzEzMjM3MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMGiiTANBgkq
hkiG9w0BAQsFAAOCAQEAQB6+bQT9sRjTWV3bXKss6RyQkDn/IsQrBlTCjdj+XL5O
+i0gn1dTfaObD1Pyx6La7yuTvTdrMh5rLqyGhXUVX4yQULMJRNDi7gngX4U7CiiF
KRfxDSYt5lT0qiInWQJzyB1Hl7gOPXN8OK7dXbIYqwUQSfHcUZvycKi02Nx/CEf8
x1fXsvNp86QtUEUN0hLWi8G/tcP8iOd/pTYEThchZelXMqWH+Iqzavlx+2a1OqtM
+dtZfwEK/r8O69IJlAInMWg+Q6veBlj/Wigeqf99t2ru+w6W0lHFmD1Cvt1BA/cn
j8VtGDbH+jCNsopAL7jkD73XLpevlyNwLbfgFsAYLA==
-----END CERTIFICATE-----