Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/5/323630323a666332333a3132303a3a2f34342d3438203d3e20323033303639.roa
File:                     323630323a666332333a3132303a3a2f34342d3438203d3e20323033303639.roa (raw, json)
Hash identifier:          BTdLY9YdKZ6hsIPTpO/GbgQEXRbARGQP/Y8pWRV6taI=
Subject key identifier:   F5:04:F4:90:EB:DC:AA:81:6F:31:FF:53:CE:7D:EB:34:78:A2:E7:79
Certificate issuer:       /CN=52E8DFFC6F676D33CB89DE115CEEF286B5017228
Certificate serial:       5D298334422EAB244397494DECCA738E844F1329
Authority key identifier: 52:E8:DF:FC:6F:67:6D:33:CB:89:DE:11:5C:EE:F2:86:B5:01:72:28
Authority info access:    rsync://rpki.co/repo/AS945/2/52E8DFFC6F676D33CB89DE115CEEF286B5017228.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/5/323630323a666332333a3132303a3a2f34342d3438203d3e20323033303639.roa
Signing time:             Tue 12 Mar 2024 01:46:51 +0000
ROA not before:           Tue 12 Mar 2024 01:41:51 +0000
ROA not after:            Tue 11 Mar 2025 01:46:51 +0000
asID:                     203069
IP address blocks:        2602:fc23:120::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:29:83:34:42:2e:ab:24:43:97:49:4d:ec:ca:73:8e:84:4f:13:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52E8DFFC6F676D33CB89DE115CEEF286B5017228
        Validity
            Not Before: Mar 12 01:41:51 2024 GMT
            Not After : Mar 11 01:46:51 2025 GMT
        Subject: CN=F504F490EBDCAA816F31FF53CE7DEB3478A2E779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:aa:43:16:0a:28:ea:db:2c:64:00:e8:c8:a2:
                    aa:fc:a3:dd:3f:35:a9:3d:d1:09:b0:33:92:d3:77:
                    7a:4b:f7:61:56:86:ca:09:40:c0:55:b3:38:51:55:
                    9e:9c:55:ff:c3:ac:db:2c:79:3b:f9:b7:3a:04:82:
                    b8:35:98:13:54:a5:d6:ea:98:9c:ec:b1:e5:f9:73:
                    3a:72:9d:ce:60:27:08:52:5b:89:44:0a:0d:7a:61:
                    9b:29:cb:ec:77:15:2b:2a:00:ab:69:d0:9a:b8:30:
                    08:b5:1a:24:ec:63:c3:59:9c:a5:8b:e8:30:47:f0:
                    f7:ed:96:6b:cd:47:9a:9f:a7:15:5c:0b:a7:8c:3a:
                    63:bc:2c:09:a1:ef:d6:76:31:1c:a3:e1:88:bc:9a:
                    39:8e:2f:8b:fb:2a:3c:37:06:3c:93:22:5d:5a:8f:
                    dd:c9:2e:09:70:3d:ec:60:e8:5c:47:29:50:f4:5c:
                    9c:67:a0:8a:ca:f1:7f:0a:65:92:a5:65:dd:39:0b:
                    9b:3f:52:25:8e:42:47:51:63:04:48:87:46:16:84:
                    5b:5e:8b:8f:ce:c2:cd:62:e8:6a:8a:12:5f:70:8f:
                    e6:96:3e:a5:50:12:d2:c9:49:b8:fa:fa:0a:f1:32:
                    3a:94:f5:93:d5:27:ce:b6:12:61:c3:7f:2f:45:dc:
                    72:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:04:F4:90:EB:DC:AA:81:6F:31:FF:53:CE:7D:EB:34:78:A2:E7:79
            X509v3 Authority Key Identifier:
                keyid:52:E8:DF:FC:6F:67:6D:33:CB:89:DE:11:5C:EE:F2:86:B5:01:72:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/5/52E8DFFC6F676D33CB89DE115CEEF286B5017228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/2/52E8DFFC6F676D33CB89DE115CEEF286B5017228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/5/323630323a666332333a3132303a3a2f34342d3438203d3e20323033303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:120::/44

    Signature Algorithm: sha256WithRSAEncryption
         17:57:14:07:84:83:a6:26:cb:d9:b7:0c:60:8a:8e:60:f7:72:
         36:4a:d1:f8:88:29:9c:e5:a0:ba:7e:03:2e:9c:dd:49:f7:90:
         c3:99:de:69:ce:ad:31:b0:9e:66:39:9e:4c:02:8e:2c:88:4b:
         fd:2d:ac:b3:f2:12:50:a6:51:9f:b0:23:71:3e:4a:e8:d1:d4:
         2a:71:2b:c2:3d:45:8f:05:b1:36:d2:23:dc:a5:7f:76:ac:31:
         9f:8c:77:6d:96:60:53:81:42:db:39:6b:49:09:76:e8:a5:a5:
         b3:ab:45:fb:0e:23:9d:65:87:27:4a:e7:27:ce:51:43:1f:3b:
         5c:e2:ba:83:68:a9:b2:ea:20:d5:ba:be:cc:10:36:31:1f:25:
         e6:79:8a:d9:64:8a:c6:cd:4f:bd:20:97:5d:2c:18:a6:ba:2b:
         44:61:ed:01:41:c0:17:03:8c:2d:27:8e:e6:a7:a8:dc:1c:1d:
         30:c6:23:a9:e7:15:b6:52:2a:2f:30:94:ed:d0:84:69:df:47:
         73:3d:b2:75:fe:62:41:a6:d1:96:af:48:48:10:0e:65:02:3d:
         5f:f4:70:05:50:84:49:3b:8a:73:4c:a9:ef:74:22:65:4c:c6:
         32:3a:52:4f:a2:1e:4a:cc:d7:6e:04:a2:ea:f9:ff:76:cb:a6:
         18:41:34:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----