Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/326130363a396634343a663030313a3a2f34382d3438203d3e203437333131.roa
File:                     326130363a396634343a663030313a3a2f34382d3438203d3e203437333131.roa (raw, json)
Hash identifier:          FeCctPg683Pajv+26WOqWKaYZyZv3Xm/ADono1GUP2A=
Subject key identifier:   7F:05:31:60:CF:4A:C8:5A:62:49:DD:C6:32:B4:6D:15:70:87:9A:1F
Certificate issuer:       /CN=B72956867F19F825FD8FD7FBC976E87C1A97B5A5
Certificate serial:       126C0D51F7DAC278D1E22A37E578F4EB1AE943DA
Authority key identifier: B7:29:56:86:7F:19:F8:25:FD:8F:D7:FB:C9:76:E8:7C:1A:97:B5:A5
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B72956867F19F825FD8FD7FBC976E87C1A97B5A5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/326130363a396634343a663030313a3a2f34382d3438203d3e203437333131.roa
Signing time:             Mon 04 Dec 2023 06:00:44 +0000
ROA not before:           Mon 04 Dec 2023 05:55:44 +0000
ROA not after:            Mon 02 Dec 2024 06:00:44 +0000
asID:                     47311
IP address blocks:        2a06:9f44:f001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:6c:0d:51:f7:da:c2:78:d1:e2:2a:37:e5:78:f4:eb:1a:e9:43:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B72956867F19F825FD8FD7FBC976E87C1A97B5A5
        Validity
            Not Before: Dec  4 05:55:44 2023 GMT
            Not After : Dec  2 06:00:44 2024 GMT
        Subject: CN=7F053160CF4AC85A6249DDC632B46D1570879A1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2a:56:4e:61:43:b6:7b:73:bb:4d:d3:64:fb:
                    1b:d8:b4:ff:df:64:9b:cb:f4:45:df:f6:98:7f:03:
                    ae:3f:fd:4b:3d:53:8d:cc:de:85:7b:7b:d3:61:8a:
                    4f:b7:46:ac:e0:eb:d3:64:13:52:1a:2f:7b:81:d2:
                    25:52:d0:a2:b6:b7:6a:54:a2:3c:14:71:7b:f7:87:
                    7f:10:4f:90:65:e5:25:37:71:88:81:64:23:e5:da:
                    27:87:24:35:f7:25:6e:ee:6f:f3:dd:41:08:98:5d:
                    92:2c:38:33:32:f0:89:17:a5:49:55:32:90:36:7d:
                    07:9c:52:99:e8:9d:42:3d:1a:14:22:fd:00:b3:41:
                    f4:43:3d:4e:af:f7:68:ab:62:75:8c:34:62:78:a7:
                    3f:0a:27:a5:cd:ce:f1:87:41:28:a5:6b:09:65:5e:
                    d1:60:4b:0e:fb:fb:ab:27:ac:26:cd:b9:64:26:d7:
                    24:29:f7:2d:7f:b9:38:a0:af:6a:d2:e0:f5:f5:da:
                    6b:b4:f6:af:8d:88:3f:20:d2:62:2f:4c:4f:1b:3c:
                    af:e1:6b:15:c5:c8:4b:1a:c0:40:c5:d3:b9:2f:94:
                    79:ea:88:4d:7e:43:86:96:27:ab:5b:46:ec:13:28:
                    5a:ef:d9:15:70:3e:34:6b:e6:f0:58:9d:7f:75:ab:
                    4c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:05:31:60:CF:4A:C8:5A:62:49:DD:C6:32:B4:6D:15:70:87:9A:1F
            X509v3 Authority Key Identifier:
                keyid:B7:29:56:86:7F:19:F8:25:FD:8F:D7:FB:C9:76:E8:7C:1A:97:B5:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/B72956867F19F825FD8FD7FBC976E87C1A97B5A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B72956867F19F825FD8FD7FBC976E87C1A97B5A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0ecedb9d-2891-4374-b608-bffeb63513c9/1/326130363a396634343a663030313a3a2f34382d3438203d3e203437333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f44:f001::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:68:13:72:51:33:8d:e3:a9:4a:38:9a:3d:ae:c9:cf:84:61:
         1e:00:ac:a4:34:95:dd:ff:b5:9d:63:36:b2:86:ae:68:b1:f3:
         af:63:a1:cf:1c:ec:a0:ff:81:cc:f1:b8:ad:fc:9f:41:a6:a5:
         f9:3f:d6:fd:9c:e6:5a:59:b7:d4:dd:39:84:5f:15:43:72:31:
         00:d2:98:0c:99:08:cf:98:c2:7c:7e:b5:65:0c:f8:e5:c3:a7:
         1f:4b:61:9c:ec:64:d0:96:7e:03:89:9b:c5:2d:95:a3:49:fa:
         7d:51:90:f1:5b:ea:5b:76:68:68:dd:7a:0e:88:8d:23:be:d3:
         bc:4f:14:c2:8a:17:7a:75:3c:57:fe:56:ae:1f:12:27:08:dc:
         ba:cf:e1:d9:5b:5a:db:6b:1d:5a:40:01:53:9b:ea:b0:29:1c:
         ef:42:ba:65:a3:a9:92:63:31:74:45:bd:dc:70:5c:74:cf:b3:
         fc:d3:1b:23:80:d8:b8:51:f6:38:54:3f:67:45:88:db:7a:45:
         06:32:b6:19:c4:66:ca:81:c7:3c:f8:74:39:fc:24:05:bd:60:
         c2:cc:77:d9:dd:23:23:8d:8c:15:73:08:53:5c:e0:2b:13:ba:
         62:ce:a7:3d:ca:77:25:16:89:d7:e1:b1:39:da:36:14:48:26:
         94:ba:1b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org