Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/AS205432.roa
File:                     AS205432.roa (raw, json)
Hash identifier:          789R7eZwRg2SvuKYLj9Gc/y9Vlt37XGwr/phJZWMoaA=
Subject key identifier:   74:15:C5:2A:89:A7:04:1F:89:43:B4:5D:70:C3:19:B4:E8:EC:0D:E9
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       4465831FF2B1DBF6AB9F43105359BEA0223DF76B
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/AS205432.roa
Signing time:             Wed 20 Dec 2023 16:21:33 +0000
ROA not before:           Wed 20 Dec 2023 16:16:33 +0000
ROA not after:            Wed 18 Dec 2024 16:21:33 +0000
asID:                     205432
IP address blocks:        2a13:df82:ff00::/40 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:65:83:1f:f2:b1:db:f6:ab:9f:43:10:53:59:be:a0:22:3d:f7:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Dec 20 16:16:33 2023 GMT
            Not After : Dec 18 16:21:33 2024 GMT
        Subject: CN=7415C52A89A7041F8943B45D70C319B4E8EC0DE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:13:a1:a9:f8:46:05:64:c9:44:a9:9e:bd:eb:
                    df:ca:4b:37:4d:6d:93:f2:1a:86:e3:11:4f:0d:de:
                    c0:a1:83:9d:fe:2a:d4:b7:bc:0d:23:ee:bf:b2:e7:
                    26:56:85:f7:d4:7d:5e:5b:47:96:4a:bc:6b:d4:d2:
                    0d:95:2d:47:1f:62:78:c3:26:75:d7:b9:28:8d:b8:
                    5b:48:ec:cc:30:61:c5:13:c2:55:e3:16:22:f5:c6:
                    8d:bf:a7:fc:d5:40:8e:05:c8:92:45:b6:50:3e:7b:
                    31:0d:ad:87:51:53:5e:42:f3:90:a7:c6:3e:d5:03:
                    a8:d8:44:df:f7:5a:dc:62:a1:e3:ae:95:09:2d:43:
                    0c:89:d9:ca:26:18:fc:e7:fc:16:38:5b:b0:82:c0:
                    7c:a9:49:fc:9f:ef:a7:02:c9:86:b0:6b:ee:c9:21:
                    e8:a6:f6:f8:4f:a6:ec:ba:b3:63:47:30:c6:11:d4:
                    f4:76:9d:39:9d:48:1c:24:ed:cc:bf:90:80:57:40:
                    61:f4:c3:1f:28:a4:65:71:ae:91:6c:87:b2:62:72:
                    a0:8f:87:fc:c7:63:71:28:22:2f:5c:42:f9:09:cf:
                    44:6f:28:80:81:57:45:79:b7:b1:18:bb:44:03:bd:
                    5e:d6:61:85:4d:33:0a:53:65:53:9b:1e:20:6c:a5:
                    6e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:15:C5:2A:89:A7:04:1F:89:43:B4:5D:70:C3:19:B4:E8:EC:0D:E9
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/AS205432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df82:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         ca:9a:fe:94:b5:22:9e:e1:ba:13:da:6f:94:57:b5:33:bc:e4:
         35:df:ae:1f:54:0d:b9:a9:0d:6c:ac:78:88:b7:eb:11:cb:9a:
         66:5d:39:56:47:f5:13:05:77:47:d9:d4:a2:28:31:e6:55:32:
         7b:ba:9e:8d:41:36:eb:3b:f6:37:63:05:6d:3a:ab:cf:f4:97:
         6c:e4:0b:5d:c4:00:1c:31:94:5c:8e:d0:85:be:68:a7:13:9f:
         7a:b9:83:e4:a3:35:ea:c9:31:ea:ef:ac:3d:35:f1:24:d0:00:
         dc:c0:6c:30:d8:a5:be:97:f1:cb:37:7a:71:93:ae:b5:d4:ae:
         03:5b:0a:65:02:61:a3:06:28:da:42:74:15:ae:e9:c1:ad:f9:
         cf:4a:b0:2c:50:be:82:ab:1b:bb:d3:d3:2a:16:4e:b1:76:1b:
         ff:43:48:3a:f0:09:06:43:fb:0c:1c:ff:b8:d7:49:aa:c9:5c:
         e0:3a:af:ae:04:ee:88:1f:c7:f8:58:44:4a:42:3a:d9:e2:bc:
         f2:79:f0:49:1a:89:a5:f6:7c:92:e4:ad:67:32:50:bb:99:9e:
         9d:15:ca:5f:7a:83:a7:6a:9a:36:ea:28:6b:20:67:48:7b:2f:
         17:f8:8a:45:a2:3a:e6:54:76:7b:c3:93:03:55:24:d2:6a:1a:
         01:1d:2d:d6
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIURGWDH/Kx2/arn0MQU1m+oCI992swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDVjM2Q1ZTcwZmM5YWQxMGJhOTBkNDVkYzY2NDU0ZTll
M2ExNDZhODAeFw0yMzEyMjAxNjE2MzNaFw0yNDEyMTgxNjIxMzNaMDMxMTAvBgNV
BAMTKDc0MTVDNTJBODlBNzA0MUY4OTQzQjQ1RDcwQzMxOUI0RThFQzBERTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/E6Gp+EYFZMlEqZ6969/KSzdN
bZPyGobjEU8N3sChg53+KtS3vA0j7r+y5yZWhffUfV5bR5ZKvGvU0g2VLUcfYnjD
JnXXuSiNuFtI7MwwYcUTwlXjFiL1xo2/p/zVQI4FyJJFtlA+ezENrYdRU15C85Cn
xj7VA6jYRN/3WtxioeOulQktQwyJ2comGPzn/BY4W7CCwHypSfyf76cCyYawa+7J
Ieim9vhPpuy6s2NHMMYR1PR2nTmdSBwk7cy/kIBXQGH0wx8opGVxrpFsh7JicqCP
h/zHY3EoIi9cQvkJz0RvKICBV0V5t7EYu0QDvV7WYYVNMwpTZVObHiBspW47AgMB
AAGjggIMMIICCDAdBgNVHQ4EFgQUdBXFKomnBB+JQ7RdcMMZtOjsDekwHwYDVR0j
BBgwFoAU1cPV5w/JrRC6kNRdxmRU6eOhRqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYtMWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYx
NjdkLzAvRDVDM0Q1RTcwRkM5QUQxMEJBOTBENDVEQzY2NDU0RTlFM0ExNDZBOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjUFY1d19KclJDNmtOUmR4bVJVNmVP
aFJxZy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA0MDMyYzhmLTFkNTct
NGMzYi05MDQzLWEwZTdmZWJmMTY3ZC8wL0FTMjA1NDMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhPf
gv8wDQYJKoZIhvcNAQELBQADggEBAMqa/pS1Ip7huhPab5RXtTO85DXfrh9UDbmp
DWyseIi36xHLmmZdOVZH9RMFd0fZ1KIoMeZVMnu6no1BNus79jdjBW06q8/0l2zk
C13EABwxlFyO0IW+aKcTn3q5g+SjNerJMervrD018STQANzAbDDYpb6X8cs3enGT
rrXUrgNbCmUCYaMGKNpCdBWu6cGt+c9KsCxQvoKrG7vT0yoWTrF2G/9DSDrwCQZD
+wwc/7jXSarJXOA6r64E7ogfx/hYREpCOtnivPJ58EkaiaX2fJLkrWcyULuZnp0V
yl96g6dqmjbqKGsgZ0h7Lxf4ikWiOuZUdnvDkwNVJNJqGgEdLdY=
-----END CERTIFICATE-----