Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333066653a3a2f34382d3438203d3e20323135303837.roa
File:                     326130363a396638313a333066653a3a2f34382d3438203d3e20323135303837.roa (raw, json)
Hash identifier:          T+UH26QLW0J9fvaMsqSHI81YN8u6D4igl4Tf3/9pyH8=
Subject key identifier:   0F:53:76:93:B6:BA:C6:85:5A:63:7B:77:B2:88:4F:BD:1C:CD:91:53
Certificate issuer:       /CN=ADD73B35695BB3BF25B467196329EFCAAC867E5E
Certificate serial:       412657609DBAD36C6698DFC7757679EA28A63FB6
Authority key identifier: AD:D7:3B:35:69:5B:B3:BF:25:B4:67:19:63:29:EF:CA:AC:86:7E:5E
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333066653a3a2f34382d3438203d3e20323135303837.roa
Signing time:             Mon 29 Apr 2024 03:15:55 +0000
ROA not before:           Mon 29 Apr 2024 03:10:55 +0000
ROA not after:            Mon 28 Apr 2025 03:15:55 +0000
asID:                     215087
IP address blocks:        2a06:9f81:30fe::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:26:57:60:9d:ba:d3:6c:66:98:df:c7:75:76:79:ea:28:a6:3f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADD73B35695BB3BF25B467196329EFCAAC867E5E
        Validity
            Not Before: Apr 29 03:10:55 2024 GMT
            Not After : Apr 28 03:15:55 2025 GMT
        Subject: CN=0F537693B6BAC6855A637B77B2884FBD1CCD9153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a3:6f:bc:86:03:44:ed:84:a7:03:db:11:7b:
                    06:32:8d:3b:8d:91:53:72:ec:32:46:e0:ef:76:5e:
                    28:f2:65:61:59:69:15:c3:f7:7e:3a:c7:b2:80:81:
                    ed:56:b3:e0:9b:92:2c:8b:f5:85:0d:cf:c9:d4:69:
                    42:cc:93:fe:84:06:4b:06:80:9a:a0:be:7b:89:35:
                    dd:46:e8:a8:07:9d:83:3d:65:55:33:5d:5a:00:80:
                    16:6f:77:b9:03:ac:a0:42:48:3d:85:b6:32:de:d7:
                    80:1f:d7:a8:79:81:41:d2:25:2d:2f:f3:4e:e9:cd:
                    f6:6a:de:5b:8d:68:e0:69:a2:a6:80:aa:55:0d:d4:
                    f9:af:f4:9f:b5:c6:e2:e6:dd:99:22:0b:69:8d:28:
                    90:1f:da:e4:43:f1:74:4c:2f:58:c5:f2:d5:b3:dc:
                    ed:d3:3a:16:f9:51:fb:85:3b:e5:8e:2d:d6:d4:6d:
                    fa:77:b5:29:02:8e:96:d4:b8:27:db:2f:1f:e0:c8:
                    b9:23:04:73:78:d4:7d:f8:1d:9c:0e:64:0b:17:52:
                    34:b2:4a:81:96:74:8d:67:31:cc:56:32:46:32:f0:
                    c7:68:31:81:31:7a:64:a0:9a:ff:f1:78:09:87:58:
                    6a:a2:0e:7f:22:7a:9b:9a:c4:74:3e:8f:a8:f4:c4:
                    8b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:53:76:93:B6:BA:C6:85:5A:63:7B:77:B2:88:4F:BD:1C:CD:91:53
            X509v3 Authority Key Identifier:
                keyid:AD:D7:3B:35:69:5B:B3:BF:25:B4:67:19:63:29:EF:CA:AC:86:7E:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333066653a3a2f34382d3438203d3e20323135303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:30fe::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:74:18:72:dd:2d:fe:73:59:f4:d0:bb:a2:a9:75:29:46:16:
         5d:22:ab:54:53:75:2c:06:57:00:a4:f2:b6:d1:86:5d:e3:82:
         15:94:a5:d8:45:d9:53:6a:be:79:97:fb:30:86:4b:d1:3b:86:
         b5:bc:1f:8e:8c:64:8e:ea:1d:e1:ee:0a:b8:22:20:78:a9:a7:
         bf:02:2f:30:7c:45:39:cb:c2:ae:3b:2d:8c:3c:79:53:49:da:
         b3:0c:83:10:ca:b3:a5:65:91:70:d7:a1:8c:16:21:79:73:5e:
         c0:ad:32:ad:e8:1c:20:6d:bb:16:ab:69:50:49:c1:be:ef:02:
         0d:e2:44:cd:f9:fa:20:cd:68:73:b9:5c:08:45:76:15:ea:8f:
         40:95:af:a1:62:77:77:c2:9c:fb:02:e6:de:89:b6:d4:9c:c4:
         b1:9c:aa:d6:4a:13:e4:2e:12:35:a3:44:54:15:ac:e9:d0:ee:
         59:e4:aa:ab:ee:12:6d:bf:30:47:76:62:24:31:d6:52:9f:0f:
         a2:f8:53:0e:34:a2:33:56:87:da:cd:45:4f:ad:4d:49:e0:84:
         ea:47:38:c8:20:e7:40:d8:9e:d4:1d:33:e8:13:a4:d1:d7:ea:
         79:d9:f0:4f:6d:b6:e7:1a:5c:e2:9a:98:84:3f:3f:93:d0:29:
         56:b3:a2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 18:29:29 2024 by rpki-client on console-ams.rpki-client.org