Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/AS21738.roa
File:                     AS21738.roa (raw, json)
Hash identifier:          jhn31LoH/ITvimNfet+lZAqS6+VKLtKQXeFxcJq92gg=
Subject key identifier:   3C:0C:96:6E:96:0E:6D:6B:02:5D:F0:5D:A5:07:D3:01:19:FC:3F:7D
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       4FEF334B6C0A9789E2BE6E1110D8BCD61C307D14
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/AS21738.roa
Signing time:             Thu 08 Feb 2024 20:38:57 +0000
ROA not before:           Thu 08 Feb 2024 20:33:57 +0000
ROA not after:            Thu 06 Feb 2025 20:38:57 +0000
asID:                     21738
IP address blocks:        2a13:df86::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ef:33:4b:6c:0a:97:89:e2:be:6e:11:10:d8:bc:d6:1c:30:7d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Feb  8 20:33:57 2024 GMT
            Not After : Feb  6 20:38:57 2025 GMT
        Subject: CN=3C0C966E960E6D6B025DF05DA507D30119FC3F7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:12:4f:64:c5:45:e9:aa:dd:38:ee:5e:77:96:
                    10:32:ad:bd:e5:b4:db:d7:50:78:e2:c3:5c:05:87:
                    07:78:0b:b3:c8:72:33:9c:d9:b3:2a:0d:c6:16:48:
                    7b:26:40:92:7d:23:3c:c3:5c:7c:19:97:02:a9:12:
                    8c:ab:df:63:29:1c:6e:92:fc:a3:f6:15:48:c8:6b:
                    15:ac:a0:0a:9e:3c:27:26:d7:a4:35:18:7d:5c:bc:
                    e5:1d:f2:59:e9:a5:bf:6f:00:01:62:c1:02:d0:58:
                    fa:c4:67:b3:92:26:76:54:76:5c:e5:8e:c6:82:1a:
                    29:c7:17:c3:8e:3e:81:d4:92:fe:52:86:f7:fd:50:
                    f5:c4:e1:16:cf:46:ea:52:55:91:1a:a7:65:4d:2c:
                    1f:9e:49:d2:44:81:14:62:0b:f0:b9:0c:39:05:c6:
                    aa:22:c2:c9:24:db:8c:b8:69:68:34:64:0c:88:8b:
                    74:9b:f2:f8:28:8d:a2:f3:74:04:63:be:b0:4c:01:
                    cd:95:cc:75:b9:43:a4:cd:9b:1b:d9:45:af:c9:0d:
                    2f:5f:da:df:a2:18:47:13:fd:09:19:8a:07:bb:da:
                    d2:0b:03:c8:dd:6b:41:d4:59:4e:b0:43:dc:97:93:
                    20:28:20:1d:ee:5f:a0:89:05:eb:a5:a5:8e:3c:99:
                    f6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:0C:96:6E:96:0E:6D:6B:02:5D:F0:5D:A5:07:D3:01:19:FC:3F:7D
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/AS21738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df86::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:8b:fa:e5:99:44:7b:d6:b6:8d:b5:58:7f:0e:db:8a:c5:b4:
         82:7f:b1:46:17:43:95:3c:09:7a:b3:aa:c2:8c:6d:df:77:17:
         b8:b1:3e:88:22:79:c6:9a:d3:f2:bd:b2:ee:34:e9:62:ae:f0:
         04:15:c2:3a:f3:6a:be:db:7f:b0:61:2c:ba:ec:78:d5:08:e5:
         96:38:51:c4:6b:a5:c2:cc:d9:56:6b:92:c1:52:e9:53:25:22:
         f1:4b:40:34:c5:98:44:ca:67:77:90:10:60:31:7d:5a:4b:da:
         4b:4f:4b:99:00:39:72:5e:39:1f:69:32:72:4f:15:6e:29:ed:
         a3:06:59:4d:78:30:3f:ed:a3:c6:9f:94:85:f2:e7:b1:c4:b5:
         f0:77:8e:79:43:8f:4e:8c:68:2a:43:27:b0:50:7a:9d:cb:0a:
         c7:1f:e6:71:aa:ad:75:61:41:ba:1c:58:c4:7b:b9:ef:4e:2f:
         10:a6:b9:a8:0d:04:fd:19:e2:1a:4e:ea:61:0c:a2:de:b5:8a:
         6f:30:af:f4:c0:2b:11:8e:f1:3b:c3:15:df:ec:12:5b:46:aa:
         9b:ea:5e:78:9e:01:cb:8c:9f:97:49:6c:14:e0:6f:d6:3d:d6:
         d0:ab:d5:8b:2d:43:2f:6a:6e:b2:ca:51:1d:a0:83:41:10:50:
         43:c2:c8:8a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUT+8zS2wKl4nivm4RENi81hwwfRQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDVjM2Q1ZTcwZmM5YWQxMGJhOTBkNDVkYzY2NDU0ZTll
M2ExNDZhODAeFw0yNDAyMDgyMDMzNTdaFw0yNTAyMDYyMDM4NTdaMDMxMTAvBgNV
BAMTKDNDMEM5NjZFOTYwRTZENkIwMjVERjA1REE1MDdEMzAxMTlGQzNGN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Ek9kxUXpqt047l53lhAyrb3l
tNvXUHjiw1wFhwd4C7PIcjOc2bMqDcYWSHsmQJJ9IzzDXHwZlwKpEoyr32MpHG6S
/KP2FUjIaxWsoAqePCcm16Q1GH1cvOUd8lnppb9vAAFiwQLQWPrEZ7OSJnZUdlzl
jsaCGinHF8OOPoHUkv5Shvf9UPXE4RbPRupSVZEap2VNLB+eSdJEgRRiC/C5DDkF
xqoiwskk24y4aWg0ZAyIi3Sb8vgojaLzdARjvrBMAc2VzHW5Q6TNmxvZRa/JDS9f
2t+iGEcT/QkZige72tILA8jda0HUWU6wQ9yXkyAoIB3uX6CJBeulpY48mfZNAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUPAyWbpYObWsCXfBdpQfTARn8P30wHwYDVR0j
BBgwFoAU1cPV5w/JrRC6kNRdxmRU6eOhRqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDQwMzJjOGYtMWQ1Ny00YzNiLTkwNDMtYTBlN2ZlYmYx
NjdkLzAvRDVDM0Q1RTcwRkM5QUQxMEJBOTBENDVEQzY2NDU0RTlFM0ExNDZBOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjUFY1d19KclJDNmtOUmR4bVJVNmVP
aFJxZy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA0MDMyYzhmLTFkNTct
NGMzYi05MDQzLWEwZTdmZWJmMTY3ZC8wL0FTMjE3Mzgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAqE9+G
MA0GCSqGSIb3DQEBCwUAA4IBAQB/i/rlmUR71raNtVh/DtuKxbSCf7FGF0OVPAl6
s6rCjG3fdxe4sT6IInnGmtPyvbLuNOlirvAEFcI682q+23+wYSy67HjVCOWWOFHE
a6XCzNlWa5LBUulTJSLxS0A0xZhEymd3kBBgMX1aS9pLT0uZADlyXjkfaTJyTxVu
Ke2jBllNeDA/7aPGn5SF8uexxLXwd455Q49OjGgqQyewUHqdywrHH+Zxqq11YUG6
HFjEe7nvTi8QprmoDQT9GeIaTuphDKLetYpvMK/0wCsRjvE7wxXf7BJbRqqb6l54
ngHLjJ+XSWwU4G/WPdbQq9WLLUMvam6yylEdoINBEFBDwsiK
-----END CERTIFICATE-----