Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131382e302f32342d3234203d3e2039303837.roa
File:                     34352e36352e3131382e302f32342d3234203d3e2039303837.roa (raw, json)
Hash identifier:          ryK7901ZYVRGuAyY3zHOJBXOAR63rQA06MKgGRn4kQs=
Subject key identifier:   C6:D9:4E:DF:4F:60:05:4B:85:7C:23:E6:CE:6D:B1:17:61:6D:C8:1D
Certificate issuer:       /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial:       46121F0C4D29E1B00F4B417D1635F8E8A4EB00A7
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131382e302f32342d3234203d3e2039303837.roa
Signing time:             Sat 07 Oct 2023 23:55:56 +0000
ROA not before:           Sat 07 Oct 2023 23:50:56 +0000
ROA not after:            Sat 05 Oct 2024 23:55:56 +0000
asID:                     9087
IP address blocks:        45.65.118.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:12:1f:0c:4d:29:e1:b0:0f:4b:41:7d:16:35:f8:e8:a4:eb:00:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
        Validity
            Not Before: Oct  7 23:50:56 2023 GMT
            Not After : Oct  5 23:55:56 2024 GMT
        Subject: CN=C6D94EDF4F60054B857C23E6CE6DB117616DC81D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:32:16:4b:f6:50:74:74:82:5c:35:f5:9c:a9:
                    bc:63:ad:c2:55:cb:3a:9c:ed:24:3f:82:06:80:1c:
                    ca:a4:0e:0a:21:69:df:99:23:cc:af:41:18:6f:e4:
                    93:8c:02:6d:dd:d2:85:c4:6a:2f:06:fe:36:95:71:
                    32:29:e7:98:a6:21:ea:93:e4:17:21:c4:6d:55:03:
                    83:9f:3e:be:3b:ea:11:42:19:5a:05:23:59:60:68:
                    9c:f1:e5:45:2e:11:36:43:60:b2:c9:b7:09:7c:5a:
                    d5:53:78:31:64:bd:ee:d3:ce:f8:f1:8f:57:ea:d6:
                    f6:39:36:9f:26:4c:42:79:e9:58:46:58:73:d7:f9:
                    2f:b3:14:4e:b8:5d:7a:57:db:2d:d7:e7:25:9d:f8:
                    62:05:96:b8:a6:62:ae:ff:2f:de:4e:e8:29:cd:9d:
                    20:a6:cc:35:be:62:85:dc:4e:24:fa:8c:19:0d:60:
                    cd:8c:b3:ce:80:d2:5c:2a:bf:06:07:a7:d7:f4:34:
                    e0:c8:8c:96:9e:37:b0:7f:1a:c9:d4:56:79:d7:b2:
                    c7:01:42:fe:6c:39:53:16:19:ba:52:3f:4d:2f:75:
                    08:53:2b:42:15:15:2c:5b:44:40:dc:6b:e7:d4:77:
                    50:cb:96:fc:a8:ec:70:e8:a5:d6:9b:9a:34:24:20:
                    e7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D9:4E:DF:4F:60:05:4B:85:7C:23:E6:CE:6D:B1:17:61:6D:C8:1D
            X509v3 Authority Key Identifier:
                keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131382e302f32342d3234203d3e2039303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:00:c2:74:6e:96:88:e1:33:84:96:25:6e:88:a7:dd:1f:63:
         d1:07:3f:87:cd:0a:18:77:c4:f3:4c:a0:3f:db:a5:f6:f4:40:
         eb:ad:48:cd:77:b0:35:02:b0:ab:4d:b1:ff:9a:da:73:4a:c2:
         07:32:2c:64:b6:99:34:84:12:97:3a:c8:3b:a0:8e:08:f4:9d:
         65:82:ae:cc:a4:42:4b:65:fb:17:8c:ff:f9:54:09:83:8c:ef:
         2b:e0:6c:40:0f:d9:91:b0:be:9f:28:09:4b:1f:fd:b5:53:a7:
         d8:b4:ec:91:87:f7:fb:ff:f2:41:8a:12:89:8f:32:d3:71:c1:
         6a:eb:9f:e4:45:3e:e0:cb:9b:37:98:10:89:6c:5f:1a:92:fd:
         b0:e4:86:33:79:9e:7d:0d:41:8d:3b:64:b8:89:ec:e2:ec:aa:
         53:93:7f:f0:6e:87:d5:d8:38:2b:cf:9d:4a:0a:09:ad:a7:60:
         0f:82:94:4b:c2:8b:d5:96:05:4f:61:d9:ce:41:22:1d:36:76:
         2c:de:0f:ac:9a:75:8c:20:25:da:a8:8d:5f:1b:84:20:f3:f0:
         09:96:68:57:73:e1:af:2a:70:7a:3e:9d:0b:9c:9d:97:c0:f2:
         8f:f1:e2:45:b3:37:c2:ef:df:2e:55:29:5e:8b:c6:40:f2:d4:
         9d:87:af:2a
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIURhIfDE0p4bAPS0F9FjX46KTrAKcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGE4ZDM2MGNlZTY1MTY1MjdmZDU0OTJjMzdjYWM0NDQx
ZTExOWMwMDAeFw0yMzEwMDcyMzUwNTZaFw0yNDEwMDUyMzU1NTZaMDMxMTAvBgNV
BAMTKEM2RDk0RURGNEY2MDA1NEI4NTdDMjNFNkNFNkRCMTE3NjE2REM4MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMMhZL9lB0dIJcNfWcqbxjrcJV
yzqc7SQ/ggaAHMqkDgohad+ZI8yvQRhv5JOMAm3d0oXEai8G/jaVcTIp55imIeqT
5BchxG1VA4OfPr476hFCGVoFI1lgaJzx5UUuETZDYLLJtwl8WtVTeDFkve7Tzvjx
j1fq1vY5Np8mTEJ56VhGWHPX+S+zFE64XXpX2y3X5yWd+GIFlrimYq7/L95O6CnN
nSCmzDW+YoXcTiT6jBkNYM2Ms86A0lwqvwYHp9f0NODIjJaeN7B/GsnUVnnXsscB
Qv5sOVMWGbpSP00vdQhTK0IVFSxbREDca+fUd1DLlvyo7HDopdabmjQkIOcJAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUxtlO309gBUuFfCPmzm2xF2FtyB0wHwYDVR0j
BBgwFoAUSo02DO5lFlJ/1UksN8rERB4RnAAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzUxNzhmOTUtODgwYy00MmIyLTgyMTMtZjIwYTUwNWVi
OTdlLzEvNEE4RDM2MENFRTY1MTY1MjdGRDU0OTJDMzdDQUM0NDQxRTExOUMwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1NvMDJETzVsRmxKXzFVa3NOOHJFUkI0
Um5BQS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzUxNzhmOTUt
ODgwYy00MmIyLTgyMTMtZjIwYTUwNWViOTdlLzEvMzQzNTJlMzYzNTJlMzEzMTM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzkzMDM4Mzcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtQXYw
DQYJKoZIhvcNAQELBQADggEBAGoAwnRulojhM4SWJW6Ip90fY9EHP4fNChh3xPNM
oD/bpfb0QOutSM13sDUCsKtNsf+a2nNKwgcyLGS2mTSEEpc6yDugjgj0nWWCrsyk
Qktl+xeM//lUCYOM7yvgbEAP2ZGwvp8oCUsf/bVTp9i07JGH9/v/8kGKEomPMtNx
wWrrn+RFPuDLmzeYEIlsXxqS/bDkhjN5nn0NQY07ZLiJ7OLsqlOTf/Buh9XYOCvP
nUoKCa2nYA+ClEvCi9WWBU9h2c5BIh02dizeD6yadYwgJdqojV8bhCDz8AmWaFdz
4a8qcHo+nQucnZfA8o/x4kWzN8Lv3y5VKV6LxkDy1J2Hryo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:59 2024 by rpki-client on console-ams.rpki-client.org