Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/0/326130613a363034303a613130303a3a2f34302d3430203d3e20323033383433.roa
File:                     326130613a363034303a613130303a3a2f34302d3430203d3e20323033383433.roa (raw, json)
Hash identifier:          nBKzk+J6Wz15GDGW7LX4vqOLbQJ9jMO2IWjbH/0dgvo=
Subject key identifier:   90:76:EA:4D:D0:9E:6B:F9:00:7B:BB:39:AA:01:A2:11:49:5F:F5:C2
Certificate issuer:       /CN=498074B32285FE33C7B5A4A2FBB588257F5871A7
Certificate serial:       70A886A580D315707765436B385809A4DB91D96E
Authority key identifier: 49:80:74:B3:22:85:FE:33:C7:B5:A4:A2:FB:B5:88:25:7F:58:71:A7
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/498074B32285FE33C7B5A4A2FBB588257F5871A7.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/0/326130613a363034303a613130303a3a2f34302d3430203d3e20323033383433.roa
Signing time:             Mon 16 Oct 2023 13:21:19 +0000
ROA not before:           Mon 16 Oct 2023 13:16:19 +0000
ROA not after:            Mon 14 Oct 2024 13:21:19 +0000
asID:                     203843
IP address blocks:        2a0a:6040:a100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a8:86:a5:80:d3:15:70:77:65:43:6b:38:58:09:a4:db:91:d9:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=498074B32285FE33C7B5A4A2FBB588257F5871A7
        Validity
            Not Before: Oct 16 13:16:19 2023 GMT
            Not After : Oct 14 13:21:19 2024 GMT
        Subject: CN=9076EA4DD09E6BF9007BBB39AA01A211495FF5C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:91:d3:52:e9:65:56:ca:83:40:e7:7d:7d:17:
                    58:dc:6b:5e:af:b6:d7:5d:75:db:a5:ed:8f:8e:1f:
                    80:e7:1d:00:c5:25:2d:70:08:f5:ba:e7:55:25:5a:
                    73:64:90:f8:2b:64:55:eb:d1:c9:ae:0e:e3:43:3e:
                    05:64:6a:3d:6d:5d:f4:34:aa:44:7f:10:c8:c9:96:
                    40:a4:d2:54:24:95:b3:48:4a:6d:0d:6e:4a:34:12:
                    05:01:dc:18:2f:01:f7:8a:41:d0:2f:eb:b0:fb:e4:
                    47:d4:61:69:d1:84:a3:0e:41:29:85:6a:8f:2d:c2:
                    32:ab:d2:26:38:47:f7:5c:65:b5:fd:28:e4:a3:4e:
                    b9:72:75:66:4e:07:91:1c:45:94:44:fe:a4:39:3c:
                    3d:8c:28:f9:b7:88:2f:11:24:b0:90:0f:38:48:18:
                    bb:89:0b:ee:5c:c0:a9:2f:cb:9b:6a:4f:bf:b4:55:
                    3a:87:ef:c5:bf:91:82:8a:c7:85:f9:53:2d:4d:53:
                    b6:8a:1d:5e:5e:00:79:a4:72:3b:07:e2:95:01:09:
                    fa:e8:d3:ec:d3:e1:58:e8:4d:66:9b:cb:0a:31:c4:
                    bd:84:b2:d0:1a:f1:17:73:ae:b4:0c:7b:df:0d:e4:
                    4c:00:7f:0b:bb:6e:98:14:6f:f6:e5:f6:cf:67:be:
                    d6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:76:EA:4D:D0:9E:6B:F9:00:7B:BB:39:AA:01:A2:11:49:5F:F5:C2
            X509v3 Authority Key Identifier:
                keyid:49:80:74:B3:22:85:FE:33:C7:B5:A4:A2:FB:B5:88:25:7F:58:71:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/0/498074B32285FE33C7B5A4A2FBB588257F5871A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/498074B32285FE33C7B5A4A2FBB588257F5871A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/0/326130613a363034303a613130303a3a2f34302d3430203d3e20323033383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:a100::/40

    Signature Algorithm: sha256WithRSAEncryption
         6d:8f:41:c8:03:d2:12:6d:35:3b:e0:0e:53:35:86:0b:8a:31:
         fc:c3:cb:50:fa:9a:2d:38:9f:79:00:52:59:b9:19:25:ed:16:
         82:8d:1c:13:f9:86:93:b4:a4:5b:b6:17:57:4b:0c:ae:d9:1c:
         df:5e:a3:4b:48:e3:c7:27:09:10:1f:39:e4:fd:5f:7c:d9:e8:
         4f:b4:23:d8:c4:70:5d:df:cf:1b:d8:22:f3:20:cc:b2:36:1f:
         d6:fd:fe:59:27:36:89:62:20:a4:02:55:fb:d2:45:ce:06:db:
         22:4e:c5:a7:80:1b:e1:12:51:60:20:b9:bd:8e:19:85:76:df:
         81:80:ce:1f:d9:c5:72:c5:ad:a4:0c:02:a4:75:d1:c8:48:8a:
         8a:cb:ec:50:97:e7:21:f3:02:49:02:46:6c:d8:b8:ec:8e:c8:
         62:6f:26:94:17:36:de:c4:30:25:a5:20:e0:88:bc:e7:d0:fe:
         c5:53:33:56:88:82:c6:16:cb:d9:b6:f9:6d:ef:58:75:e7:5d:
         4b:2e:e1:be:03:58:34:ca:91:1b:40:f8:c4:99:d3:8a:c6:56:
         51:9e:11:fd:98:9d:c5:47:e5:a7:55:4c:39:79:bf:33:ba:19:
         7f:c1:75:9d:8d:54:ca:4d:03:e5:9f:3a:b5:6c:7b:44:9e:67:
         e0:88:96:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org