Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463363a3a2f33322d3438203d3e203537383730.roa
File:                     326130373a353463363a3a2f33322d3438203d3e203537383730.roa (raw, json)
Hash identifier:          J0vAM0DCb7sx8FLtwTQn5br/FSyk/AvhnaRm3zvP5bY=
Subject key identifier:   16:44:7F:52:09:83:7A:EA:B5:28:AE:F6:BE:98:62:96:CC:1F:A0:DF
Certificate issuer:       /CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
Certificate serial:       7148D419418D2120270FEA2D7C36FA15EAF283F4
Authority key identifier: B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463363a3a2f33322d3438203d3e203537383730.roa
Signing time:             Wed 19 Apr 2023 00:19:36 +0000
ROA not before:           Wed 19 Apr 2023 00:14:36 +0000
ROA not after:            Wed 17 Apr 2024 00:19:36 +0000
asID:                     57870
IP address blocks:        2a07:54c6::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:48:d4:19:41:8d:21:20:27:0f:ea:2d:7c:36:fa:15:ea:f2:83:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
        Validity
            Not Before: Apr 19 00:14:36 2023 GMT
            Not After : Apr 17 00:19:36 2024 GMT
        Subject: CN=16447F5209837AEAB528AEF6BE986296CC1FA0DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e4:93:04:d6:7e:8b:a7:c5:9b:41:0d:78:b0:
                    03:88:b5:43:b3:8b:b5:93:13:f0:ce:a2:7d:67:66:
                    ac:11:c6:69:84:55:4b:43:4b:9f:85:c5:6e:99:a5:
                    c4:b4:17:ce:d2:6c:96:c3:38:68:0a:4b:fc:2c:6d:
                    b5:4f:fc:cf:0a:f0:33:43:5e:05:95:07:2c:1a:7a:
                    66:f1:10:f2:88:05:33:c4:9a:c5:70:6c:31:64:83:
                    81:53:c2:9f:a0:58:f0:b7:6c:88:b2:45:d8:43:a1:
                    d7:b8:ae:04:39:c2:68:b9:7b:af:e5:4a:76:9d:4e:
                    0d:a4:ab:81:39:a4:ab:d6:b1:f0:5a:1b:d8:62:96:
                    48:d7:6b:0d:b5:c3:c4:c9:d8:09:07:43:5d:a6:5f:
                    b9:b0:c1:26:9f:0c:f9:09:69:8f:94:9a:72:58:aa:
                    7c:bc:d3:6b:60:2f:22:3e:07:e7:15:c1:4f:bc:b7:
                    6e:3c:9c:cd:69:1a:18:e6:cc:61:79:e3:0f:e9:e9:
                    1f:d2:67:da:4b:e5:5f:70:86:d3:b6:2f:45:0b:be:
                    ec:c0:58:64:c9:bd:bf:ef:ba:32:9e:38:61:52:63:
                    03:b3:a2:42:10:03:eb:54:ef:7b:9b:94:1f:a2:84:
                    b8:ad:12:8b:6c:0d:07:d3:1b:88:91:3f:a2:7e:4f:
                    bb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:44:7F:52:09:83:7A:EA:B5:28:AE:F6:BE:98:62:96:CC:1F:A0:DF
            X509v3 Authority Key Identifier:
                keyid:B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463363a3a2f33322d3438203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c6::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:d7:b1:77:25:a9:40:05:2f:3f:b3:e9:ed:00:cd:45:95:b2:
         80:63:23:dc:8a:cb:ef:42:4b:27:ad:83:ee:28:bc:fd:6a:9e:
         c9:69:d1:92:26:d2:5d:bc:a4:f9:1c:2f:96:70:1a:fa:78:1d:
         cd:1e:11:87:c5:ef:55:89:69:46:1e:67:10:2d:7a:75:fd:2c:
         26:90:73:4a:56:62:26:6b:4b:09:0b:6e:fc:70:18:12:63:e1:
         91:f2:41:4d:3a:c9:76:ea:c7:55:fc:36:ee:c7:89:3f:66:08:
         60:0e:fb:c2:49:2f:86:3f:69:e1:67:3e:86:2e:c5:d5:5c:69:
         97:f2:87:e2:e1:54:06:df:ce:45:b1:8c:da:89:a2:a0:41:e1:
         e9:22:4d:cd:df:7a:29:b0:ea:5a:b1:77:2e:bf:aa:87:c9:9d:
         88:2a:33:64:bf:50:43:77:9d:94:fb:c1:c6:5d:86:e8:bd:31:
         8f:89:6f:0d:d3:bd:3d:76:46:65:56:d0:00:7a:1e:91:3f:03:
         38:95:9d:c0:8e:e3:25:2a:69:b2:72:43:1c:27:06:dc:9a:24:
         a1:c1:93:bf:b3:40:44:7b:ee:a5:f1:d5:ae:79:5b:b8:b0:fc:
         e0:81:21:9d:80:1b:17:91:b0:bb:55:c4:37:d0:86:43:87:b1:
         46:9f:c1:20
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcUjUGUGNISAnD+otfDb6Feryg/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlCN0NCNkMyRDgxODBGMzQ1MkI0QTRGOTNENDEwNUJB
REZGMjQzMTAeFw0yMzA0MTkwMDE0MzZaFw0yNDA0MTcwMDE5MzZaMDMxMTAvBgNV
BAMTKDE2NDQ3RjUyMDk4MzdBRUFCNTI4QUVGNkJFOTg2Mjk2Q0MxRkEwREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw5JME1n6Lp8WbQQ14sAOItUOz
i7WTE/DOon1nZqwRxmmEVUtDS5+FxW6ZpcS0F87SbJbDOGgKS/wsbbVP/M8K8DND
XgWVBywaembxEPKIBTPEmsVwbDFkg4FTwp+gWPC3bIiyRdhDode4rgQ5wmi5e6/l
SnadTg2kq4E5pKvWsfBaG9hilkjXaw21w8TJ2AkHQ12mX7mwwSafDPkJaY+UmnJY
qny802tgLyI+B+cVwU+8t248nM1pGhjmzGF54w/p6R/SZ9pL5V9whtO2L0ULvuzA
WGTJvb/vujKeOGFSYwOzokIQA+tU73ublB+ihLitEotsDQfTG4iRP6J+T7tNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUFkR/UgmDeuq1KK72vphilswfoN8wHwYDVR0j
BBgwFoAUubfLbC2BgPNFK0pPk9QQW63/JDEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzc0MTFkNmItMzYxNS00YTg2LTg2NzMtMzQwY2UyZjIy
NmVlLzEvQjlCN0NCNkMyRDgxODBGMzQ1MkI0QTRGOTNENDEwNUJBREZGMjQzMS5j
cmwwgYAGCCsGAQUFBwEBBHQwcjBwBggrBgEFBQcwAoZkcnN5bmM6Ly9ycGtpLnph
cHBpZWhvc3QuY29tL3JlcG8vTk9SVEhMQVlFUl9VSURfMTM4NjQvMC9COUI3Q0I2
QzJEODE4MEYzNDUyQjRBNEY5M0Q0MTA1QkFERkYyNDMxLmNlcjCBqwYIKwYBBQUH
AQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS8zNzQxMWQ2Yi0zNjE1LTRhODYtODY3My0zNDBj
ZTJmMjI2ZWUvMS8zMjYxMzAzNzNhMzUzNDYzMzYzYTNhMmYzMzMyMmQzNDM4MjAz
ZDNlMjAzNTM3MzgzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAG
CCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgdUxjANBgkqhkiG9w0BAQsFAAOC
AQEAd9exdyWpQAUvP7Pp7QDNRZWygGMj3IrL70JLJ62D7ii8/WqeyWnRkibSXbyk
+RwvlnAa+ngdzR4Rh8XvVYlpRh5nEC16df0sJpBzSlZiJmtLCQtu/HAYEmPhkfJB
TTrJdurHVfw27seJP2YIYA77wkkvhj9p4Wc+hi7F1Vxpl/KH4uFUBt/ORbGM2omi
oEHh6SJNzd96KbDqWrF3Lr+qh8mdiCozZL9QQ3edlPvBxl2G6L0xj4lvDdO9PXZG
ZVbQAHoekT8DOJWdwI7jJSppsnJDHCcG3JokocGTv7NARHvupfHVrnlbuLD84IEh
nYAbF5Gwu1XEN9CGQ4exRp/BIA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:20 2025 by rpki-client