Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/3/326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa
File:                     326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa (raw, json)
Hash identifier:          jmsk0cmae1euOXniUnzZ5okm831w0dKpO+hP+uBAmCo=
Subject key identifier:   CC:5C:15:88:B0:2E:C1:95:DD:08:6E:35:60:0E:22:A9:FB:ED:67:56
Certificate issuer:       /CN=6085227D041EE38A5046749BFCC9B1327B980374
Certificate serial:       648705EC4F45C10D9601DCD531207BB6CD2241E5
Authority key identifier: 60:85:22:7D:04:1E:E3:8A:50:46:74:9B:FC:C9:B1:32:7B:98:03:74
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/6085227D041EE38A5046749BFCC9B1327B980374.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/3/326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa
Signing time:             Thu 26 Oct 2023 12:03:12 +0000
ROA not before:           Thu 26 Oct 2023 11:58:12 +0000
ROA not after:            Thu 24 Oct 2024 12:03:12 +0000
asID:                     47496
IP address blocks:        2a05:dfc1:c423::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:87:05:ec:4f:45:c1:0d:96:01:dc:d5:31:20:7b:b6:cd:22:41:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6085227D041EE38A5046749BFCC9B1327B980374
        Validity
            Not Before: Oct 26 11:58:12 2023 GMT
            Not After : Oct 24 12:03:12 2024 GMT
        Subject: CN=CC5C1588B02EC195DD086E35600E22A9FBED6756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:84:f3:8e:65:31:35:c4:95:85:f0:84:d7:d6:
                    2f:92:85:8a:89:2b:77:7c:03:86:ad:0c:24:fa:f4:
                    8c:f6:79:29:6c:9b:44:6e:4e:b9:33:6e:a8:70:9c:
                    cb:c9:89:a6:bf:3c:f4:79:a9:ba:2a:b0:02:7c:ff:
                    ca:41:a1:ce:7d:c4:09:4b:4b:00:e5:92:06:0d:d3:
                    27:a0:b0:a4:23:88:e9:16:98:4b:54:ec:e0:4e:df:
                    15:d0:75:96:eb:59:4d:d0:58:23:9f:23:aa:38:53:
                    d5:1f:43:18:0e:96:f0:b9:f5:c5:7f:a3:99:0e:81:
                    c0:cf:a9:a0:72:3c:cf:89:26:d2:99:ce:de:f5:1d:
                    98:4f:94:5f:05:c1:78:cc:72:04:fe:68:4c:ee:69:
                    93:4e:21:9c:c2:8f:14:bf:6d:39:e8:ba:22:36:3f:
                    8d:2e:c6:e1:8d:c8:11:10:ba:02:b8:f3:71:3a:21:
                    a7:22:9e:13:3a:2f:f6:07:33:1b:37:b7:57:0a:97:
                    26:18:c0:a9:07:28:37:32:e4:22:09:61:0f:08:bc:
                    d3:4f:3d:51:e8:a1:ec:d1:38:f8:9d:40:4c:eb:93:
                    9a:d0:49:1d:a5:2a:9a:29:9c:9a:29:c8:c4:ea:a5:
                    01:06:21:aa:07:82:d2:0e:d3:97:9e:74:3b:5f:5c:
                    1d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5C:15:88:B0:2E:C1:95:DD:08:6E:35:60:0E:22:A9:FB:ED:67:56
            X509v3 Authority Key Identifier:
                keyid:60:85:22:7D:04:1E:E3:8A:50:46:74:9B:FC:C9:B1:32:7B:98:03:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/3/6085227D041EE38A5046749BFCC9B1327B980374.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/6085227D041EE38A5046749BFCC9B1327B980374.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/3/326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:c423::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:dd:5f:5a:5a:cc:21:4a:64:17:c8:01:79:00:a8:17:07:ec:
         46:34:6a:b2:7f:ee:b9:cc:87:6f:73:16:fd:28:49:10:f7:27:
         62:a4:26:a0:6f:52:15:47:e2:95:1e:02:ea:a2:bd:c0:a8:a8:
         48:ab:1a:11:61:33:08:8d:5b:6b:7c:6a:e5:0f:24:b6:94:bb:
         ee:c7:3e:e5:70:4f:cc:97:da:94:b2:40:e1:ff:d0:a9:3d:39:
         50:59:38:82:a5:5d:9f:7e:e7:46:48:24:da:cb:84:ee:32:aa:
         ce:4e:58:87:4d:36:70:7f:f7:d6:8a:0b:72:68:68:7e:f7:ae:
         53:a9:ad:e7:b0:12:27:f6:8d:1e:47:3e:05:3d:cc:00:c3:d0:
         88:96:90:12:75:e7:61:b9:8f:e3:d9:d7:a7:67:0a:26:0d:57:
         c9:e9:ee:2f:0b:ff:5f:6b:d2:69:0c:37:a3:13:ff:33:28:06:
         63:07:67:8d:bf:4e:e8:b8:9f:5c:08:9d:06:07:ca:71:77:24:
         f9:8a:e1:5c:0f:05:6d:99:ad:b6:df:14:3a:63:b7:0a:21:96:
         e7:b8:a6:69:fe:68:70:75:12:36:26:17:50:da:90:e7:7f:3b:
         c1:ce:37:35:d0:73:1e:39:cc:04:46:01:9f:6e:c4:46:bc:f1:
         ef:60:18:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org