Route Origin Authorization

$ rpki-client -vvf rpki1.rpki-test.sit.fraunhofer.de/repo/rpki1_fraunhofer/0/34352e3135352e3132392e302f32342d3234203d3e20323038313632.roa
File:                     34352e3135352e3132392e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          MTMu483F5NLgw3n13jjfbv1mYs2h8VZlHAH75kIfhUE=
Subject key identifier:   A8:4A:32:33:02:09:8F:A7:17:54:46:2D:60:80:9C:7A:20:85:B8:D0
Certificate issuer:       /CN=df5a31e54915eb10eb015ed8f0476d8c3f64fff1
Certificate serial:       0C25271C1ABCEF895BF93FA01C87007F2827F6FA
Authority key identifier: DF:5A:31:E5:49:15:EB:10:EB:01:5E:D8:F0:47:6D:8C:3F:64:FF:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/31ox5UkV6xDrAV7Y8EdtjD9k__E.cer
Subject info access:      rsync://rpki1.rpki-test.sit.fraunhofer.de/repo/rpki1_fraunhofer/0/34352e3135352e3132392e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 08 Jun 2022 07:41:54 +0000
ROA not before:           Wed 08 Jun 2022 07:36:54 +0000
ROA not after:            Wed 07 Jun 2023 07:41:54 +0000
asID:                     208162
IP address blocks:        45.155.129.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:25:27:1c:1a:bc:ef:89:5b:f9:3f:a0:1c:87:00:7f:28:27:f6:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df5a31e54915eb10eb015ed8f0476d8c3f64fff1
        Validity
            Not Before: Jun  8 07:36:54 2022 GMT
            Not After : Jun  7 07:41:54 2023 GMT
        Subject: CN=3082010A0282010100C8D9A0B5D48463F904342DE1FD99F132988F78240E23F3156E07707E7BC3A2C08DFA40573447DA4941F4BF32FC74E538350FC4D1F8805AE5F2D001D86550DD65E648AF344561199A8793A3B5F4BD900129D55F20B97DB35A888339272927575CB3C9B4CD557C13B91E1DC885DD801453D20A450925E944EB998F8222E3193413C8A05F3B9AA818B3A5F6DF7407A8A61FF9AAA9D0538D6BD6EE33DBB34FCCD5479B493DA229FFA7439DB886ED0F8C0D6C7B9CB81EBD20EDC60758F2DD8D6BB4E7B4AB6CCEB616CD17E6129F4AC4AC18B4074EAB91410CF01E3E99F2C30674EDC40598E49E1582DF444B577A355842C37A524B79AF2E0ED69E620B28F8814594530203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d9:a0:b5:d4:84:63:f9:04:34:2d:e1:fd:99:
                    f1:32:98:8f:78:24:0e:23:f3:15:6e:07:70:7e:7b:
                    c3:a2:c0:8d:fa:40:57:34:47:da:49:41:f4:bf:32:
                    fc:74:e5:38:35:0f:c4:d1:f8:80:5a:e5:f2:d0:01:
                    d8:65:50:dd:65:e6:48:af:34:45:61:19:9a:87:93:
                    a3:b5:f4:bd:90:01:29:d5:5f:20:b9:7d:b3:5a:88:
                    83:39:27:29:27:57:5c:b3:c9:b4:cd:55:7c:13:b9:
                    1e:1d:c8:85:dd:80:14:53:d2:0a:45:09:25:e9:44:
                    eb:99:8f:82:22:e3:19:34:13:c8:a0:5f:3b:9a:a8:
                    18:b3:a5:f6:df:74:07:a8:a6:1f:f9:aa:a9:d0:53:
                    8d:6b:d6:ee:33:db:b3:4f:cc:d5:47:9b:49:3d:a2:
                    29:ff:a7:43:9d:b8:86:ed:0f:8c:0d:6c:7b:9c:b8:
                    1e:bd:20:ed:c6:07:58:f2:dd:8d:6b:b4:e7:b4:ab:
                    6c:ce:b6:16:cd:17:e6:12:9f:4a:c4:ac:18:b4:07:
                    4e:ab:91:41:0c:f0:1e:3e:99:f2:c3:06:74:ed:c4:
                    05:98:e4:9e:15:82:df:44:4b:57:7a:35:58:42:c3:
                    7a:52:4b:79:af:2e:0e:d6:9e:62:0b:28:f8:81:45:
                    94:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4A:32:33:02:09:8F:A7:17:54:46:2D:60:80:9C:7A:20:85:B8:D0
            X509v3 Authority Key Identifier:
                keyid:DF:5A:31:E5:49:15:EB:10:EB:01:5E:D8:F0:47:6D:8C:3F:64:FF:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.rpki-test.sit.fraunhofer.de/repo/rpki1_fraunhofer/0/DF5A31E54915EB10EB015ED8F0476D8C3F64FFF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31ox5UkV6xDrAV7Y8EdtjD9k__E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.rpki-test.sit.fraunhofer.de/repo/rpki1_fraunhofer/0/34352e3135352e3132392e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:fb:17:07:48:83:32:68:ea:d1:59:02:cc:e7:7a:2f:c2:5b:
         f0:5d:71:e2:c9:d9:55:44:d5:47:2a:43:7d:14:91:0e:22:ad:
         9c:75:84:92:ce:4c:3d:0b:eb:2d:d5:d8:0a:f4:2c:e4:65:42:
         6b:67:81:f1:1b:a1:8c:f1:70:59:ce:21:bb:3c:88:58:30:47:
         1b:99:50:90:8d:a6:df:ff:74:8b:25:65:69:f0:a1:48:fd:e2:
         c4:1f:c0:64:dd:6b:8a:1e:4d:da:d2:ac:68:43:42:d3:7d:a2:
         dd:2e:f1:05:db:a0:eb:6b:63:32:c7:41:35:0a:59:c7:74:5f:
         fd:f1:39:a0:a3:07:b3:90:e4:f8:98:e4:b4:94:8d:70:65:4e:
         d8:9b:bb:2a:c9:aa:a4:39:70:1b:0f:66:0c:1d:ef:aa:2d:38:
         2e:30:93:7a:14:6a:d1:58:20:38:39:6b:15:a6:03:f6:47:53:
         2c:82:ee:0b:0d:02:6d:90:57:22:e6:d5:32:7f:21:0e:2b:60:
         15:0b:af:d1:67:f4:38:e2:ff:79:9a:27:c1:da:12:42:39:f5:
         78:75:43:82:f2:7f:2a:ff:c6:55:a2:8c:aa:b3:73:82:77:91:
         15:8b:88:79:63:1e:a0:8d:f3:d6:43:ec:99:fb:b2:19:0c:b5:
         db:f7:fc:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:43 2023 by rpki-client on console-fra.rpki-client.org