Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a313030303a3a2f33362d3336203d3e20323130393132.roa
File:                     326131333a646638373a313030303a3a2f33362d3336203d3e20323130393132.roa (raw, json)
Hash identifier:          eD4vB0OCnlMWpV8RFZjaGDA95qXtxlkHZRN3OtjXbpE=
Subject key identifier:   E5:AD:17:61:C0:C4:F3:71:FF:54:70:20:7F:CD:39:16:7D:0B:30:1C
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       626B6B728F1D57A648A75959997977ECE89D5A4B
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a313030303a3a2f33362d3336203d3e20323130393132.roa
Signing time:             Sat 30 Sep 2023 14:16:25 +0000
ROA not before:           Sat 30 Sep 2023 14:11:25 +0000
ROA not after:            Sat 28 Sep 2024 14:16:25 +0000
asID:                     210912
IP address blocks:        2a13:df87:1000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:6b:6b:72:8f:1d:57:a6:48:a7:59:59:99:79:77:ec:e8:9d:5a:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Sep 30 14:11:25 2023 GMT
            Not After : Sep 28 14:16:25 2024 GMT
        Subject: CN=E5AD1761C0C4F371FF5470207FCD39167D0B301C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7f:84:a6:50:d5:3c:09:d7:5f:a7:33:dc:6c:
                    2c:f0:01:24:fd:b2:ab:b6:fb:95:f2:8e:1b:65:31:
                    e0:ca:48:14:e6:36:94:ac:36:bf:5f:62:9e:01:da:
                    f4:54:c3:c6:94:97:3c:e7:eb:60:05:cb:87:0b:03:
                    4a:87:5b:69:17:87:7f:ad:b5:70:44:40:6b:82:ce:
                    c8:fb:48:71:65:df:df:a4:fb:00:70:d5:5d:84:64:
                    69:cb:d3:10:bf:2f:68:74:64:4a:34:a7:dc:4b:60:
                    e5:d5:b7:83:df:f5:0d:98:78:67:93:b5:22:51:a4:
                    0e:81:27:a7:54:a0:64:48:f2:dc:7d:4b:f1:3f:36:
                    85:99:1a:40:f4:a5:47:f7:d4:3b:3b:c6:23:f2:96:
                    22:98:12:14:0c:82:13:c2:f0:60:4b:93:77:c6:b0:
                    62:fd:4c:ce:3e:1a:33:da:2e:ad:df:dd:83:b2:e4:
                    15:b9:07:a0:f9:d2:96:d3:75:dd:3a:6e:10:d3:e6:
                    66:0e:33:e1:c6:09:c0:8c:e8:5d:d0:d9:84:66:b4:
                    84:bc:7e:64:a0:44:4c:0b:6b:e1:d4:d5:c8:da:0b:
                    42:49:2b:d8:90:21:f7:cf:3c:6a:ca:f5:c7:59:95:
                    ff:e3:5d:4d:2f:78:33:f1:81:c3:5f:00:ec:f3:46:
                    17:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AD:17:61:C0:C4:F3:71:FF:54:70:20:7F:CD:39:16:7D:0B:30:1C
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638373a313030303a3a2f33362d3336203d3e20323130393132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         74:36:c9:04:5f:b2:c7:84:be:aa:d7:92:5e:4d:ef:6e:2f:fe:
         a2:1e:7a:5e:88:d9:1d:95:e9:e3:74:f3:aa:61:77:c6:49:48:
         cd:3b:8e:9c:f7:51:7b:47:d1:d6:48:c9:9f:81:3e:ce:09:d9:
         53:cd:9c:93:96:75:88:03:6a:99:f1:45:95:e0:a8:da:7f:b0:
         e7:0a:17:9e:51:8b:c2:e9:70:37:4e:43:04:f7:5a:8e:ae:f9:
         c5:fc:f9:2a:3f:d5:4b:77:55:8d:7a:d4:32:ac:fa:82:a0:49:
         a9:92:5a:85:e7:8c:c9:14:67:86:96:91:69:dc:56:81:67:e1:
         28:a7:ad:a4:5f:ac:d4:f6:9a:0c:a0:42:86:8d:64:de:ef:54:
         98:1a:8d:f4:5d:11:b5:c2:b8:ad:66:9d:77:81:66:7e:d7:b6:
         da:08:2f:e3:6a:84:ec:4e:ee:5a:2f:0a:b0:78:31:3b:81:c3:
         5a:bb:c3:e9:35:31:d1:fd:ea:5d:41:ad:82:b1:a8:52:a2:82:
         b7:4f:b0:c0:f7:7d:b5:d1:76:6c:03:ba:9e:b6:71:d8:c8:76:
         24:85:8b:8a:4a:98:8c:b9:e3:88:a3:14:dc:87:d1:a0:c7:b7:
         46:a0:82:da:43:f2:2c:d3:21:f2:5e:de:cd:b8:24:68:91:bb:
         6a:29:cb:36
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUYmtrco8dV6ZIp1lZmXl37OidWkswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDVjM2Q1ZTcwZmM5YWQxMGJhOTBkNDVkYzY2NDU0ZTll
M2ExNDZhODAeFw0yMzA5MzAxNDExMjVaFw0yNDA5MjgxNDE2MjVaMDMxMTAvBgNV
BAMTKEU1QUQxNzYxQzBDNEYzNzFGRjU0NzAyMDdGQ0QzOTE2N0QwQjMwMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClf4SmUNU8CddfpzPcbCzwAST9
squ2+5XyjhtlMeDKSBTmNpSsNr9fYp4B2vRUw8aUlzzn62AFy4cLA0qHW2kXh3+t
tXBEQGuCzsj7SHFl39+k+wBw1V2EZGnL0xC/L2h0ZEo0p9xLYOXVt4Pf9Q2YeGeT
tSJRpA6BJ6dUoGRI8tx9S/E/NoWZGkD0pUf31Ds7xiPyliKYEhQMghPC8GBLk3fG
sGL9TM4+GjPaLq3f3YOy5BW5B6D50pbTdd06bhDT5mYOM+HGCcCM6F3Q2YRmtIS8
fmSgREwLa+HU1cjaC0JJK9iQIffPPGrK9cdZlf/jXU0veDPxgcNfAOzzRhf3AgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQU5a0XYcDE83H/VHAgf805Fn0LMBwwHwYDVR0j
BBgwFoAU1cPV5w/JrRC6kNRdxmRU6eOhRqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYtMWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYx
NjdkLzAvRDVDM0Q1RTcwRkM5QUQxMEJBOTBENDVEQzY2NDU0RTlFM0ExNDZBOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjUFY1d19KclJDNmtOUmR4bVJVNmVP
aFJxZy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYt
MWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYxNjdkLzAvMzI2MTMxMzMzYTY0NjYzODM3
M2EzMTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDMyMzEzMDM5MzEzMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGBCoT34cQMA0GCSqGSIb3DQEBCwUAA4IBAQB0NskEX7LHhL6q15Je
Te9uL/6iHnpeiNkdlenjdPOqYXfGSUjNO46c91F7R9HWSMmfgT7OCdlTzZyTlnWI
A2qZ8UWV4Kjaf7DnCheeUYvC6XA3TkME91qOrvnF/PkqP9VLd1WNetQyrPqCoEmp
klqF54zJFGeGlpFp3FaBZ+Eop62kX6zU9poMoEKGjWTe71SYGo30XRG1writZp13
gWZ+17baCC/jaoTsTu5aLwqweDE7gcNau8PpNTHR/epdQa2CsahSooK3T7DA9321
0XZsA7qetnHYyHYkhYuKSpiMueOIoxTch9Ggx7dGoILaQ/Is0yHyXt7NuCRokbtq
Kcs2
-----END CERTIFICATE-----