Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3230342e302f32342d3234203d3e20323036353035.roa
File:                     3139342e3135302e3230342e302f32342d3234203d3e20323036353035.roa (raw, json)
Hash identifier:          81Kswwli9GpNr1E1R1NaFbcT4UcKlfnR35TFtRhxHTI=
Subject key identifier:   DE:16:F5:59:21:BF:97:04:BF:A4:FA:CA:9B:D8:8B:A7:3F:41:67:75
Certificate issuer:       /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial:       7552F81409D8B84F28905F74E36B03C9B7500F55
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3230342e302f32342d3234203d3e20323036353035.roa
Signing time:             Wed 28 Jun 2023 08:36:02 +0000
ROA not before:           Wed 28 Jun 2023 08:31:02 +0000
ROA not after:            Wed 26 Jun 2024 08:36:02 +0000
asID:                     206505
IP address blocks:        194.150.204.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:52:f8:14:09:d8:b8:4f:28:90:5f:74:e3:6b:03:c9:b7:50:0f:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
        Validity
            Not Before: Jun 28 08:31:02 2023 GMT
            Not After : Jun 26 08:36:02 2024 GMT
        Subject: CN=DE16F55921BF9704BFA4FACA9BD88BA73F416775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8e:1c:1d:14:98:22:b6:fb:5e:2b:30:33:0e:
                    92:a2:f4:03:02:63:be:40:8c:ba:83:2c:79:34:67:
                    2e:3a:a6:08:bf:03:e7:e1:7a:13:9d:82:b2:0d:91:
                    4a:91:6f:4b:eb:dd:b8:29:69:1e:39:f2:0a:ff:4e:
                    1a:a4:13:1b:e7:9f:2a:cb:00:53:01:cb:2e:83:61:
                    3b:ed:9e:28:86:da:74:19:a6:23:28:64:67:1c:a5:
                    a4:f3:60:01:38:78:bc:d8:8d:95:6c:bc:78:1c:6e:
                    27:e2:3c:92:50:65:94:cb:8b:98:6a:9c:4f:bb:44:
                    6a:8c:9b:11:a3:c8:44:6e:7d:b4:42:1d:73:cf:40:
                    56:a3:0a:e6:21:49:a8:81:96:07:74:00:d9:56:24:
                    69:b3:f5:6b:56:83:3d:78:88:95:34:5d:a2:54:e6:
                    6e:ec:10:76:0d:5e:1e:70:87:7c:ae:b3:9f:0c:89:
                    1c:d9:33:d0:44:42:71:76:26:16:64:7e:84:8d:24:
                    36:d9:e5:c8:41:1e:2c:22:a6:9f:87:d4:2e:d3:b9:
                    b0:a4:47:c2:8b:40:db:88:bd:b8:77:37:9f:72:49:
                    ff:e9:c9:1a:3e:10:78:32:e7:84:92:d6:41:b4:48:
                    bf:45:3f:76:80:38:0c:7c:18:72:b8:7f:ee:a8:ec:
                    80:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:16:F5:59:21:BF:97:04:BF:A4:FA:CA:9B:D8:8B:A7:3F:41:67:75
            X509v3 Authority Key Identifier:
                keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3230342e302f32342d3234203d3e20323036353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.150.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:e5:ef:70:f4:2d:8c:7a:3d:29:6a:4c:db:a6:ac:71:4e:ef:
         e4:c7:0f:bc:a4:26:6f:99:49:71:b6:3d:92:d9:dc:25:ba:5d:
         1f:32:53:df:37:fc:be:dc:4a:ff:b6:96:bc:83:cb:c6:1a:16:
         60:65:03:b2:09:e6:a5:c1:63:82:17:bd:1c:38:ef:84:30:0f:
         7d:bb:c0:9d:03:22:00:07:86:47:53:95:4c:fc:b6:67:ea:cd:
         19:ca:64:9e:a5:6d:c6:94:0b:c5:88:3e:87:1d:45:40:e3:e4:
         fe:80:d3:8b:73:6d:a3:23:4d:df:80:01:c9:2d:ac:ca:e0:36:
         83:73:78:e9:ff:a1:d3:08:4e:63:a9:33:fe:35:52:54:36:80:
         dd:47:9c:a3:e5:ad:9f:cb:d4:09:c0:c5:f3:62:e7:8e:5e:44:
         d0:8c:fb:e0:d3:d8:d8:f5:be:55:a8:c3:1f:e9:5e:a0:b6:e5:
         f1:d1:be:bd:3c:29:ba:1c:10:34:4f:71:b1:67:00:43:21:e4:
         f1:d4:d9:be:a6:86:1c:8b:aa:e9:7f:58:4c:40:f5:f0:84:34:
         1f:99:53:ca:35:96:af:96:c0:dc:4d:9f:8d:26:32:07:d0:9f:
         d8:f6:19:e7:ce:0e:6c:f7:21:73:c7:8a:fb:34:6e:72:7e:08:
         75:03:12:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 23 10:11:28 2023 by rpki-client on console-ams.rpki-client.org