Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/326130363a396638343a313730303a3a2f34302d3438203d3e203630393030.roa
File:                     326130363a396638343a313730303a3a2f34302d3438203d3e203630393030.roa (raw, json)
Hash identifier:          m0KVx+mLJXQpPZ9z9AzZrffzmdiU/NplehPgcVWuVm0=
Subject key identifier:   2D:49:41:F0:91:AB:E1:00:23:58:2C:82:B2:06:99:34:31:55:B1:06
Certificate issuer:       /CN=C2270557E13BAA7CE7C4A8E0820CDFE3EA322249
Certificate serial:       5B1BF5AC456FA2F5725237327AB99D722CB10723
Authority key identifier: C2:27:05:57:E1:3B:AA:7C:E7:C4:A8:E0:82:0C:DF:E3:EA:32:22:49
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C2270557E13BAA7CE7C4A8E0820CDFE3EA322249.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/326130363a396638343a313730303a3a2f34302d3438203d3e203630393030.roa
Signing time:             Fri 26 May 2023 02:01:48 +0000
ROA not before:           Fri 26 May 2023 01:56:48 +0000
ROA not after:            Fri 24 May 2024 02:01:48 +0000
asID:                     60900
IP address blocks:        2a06:9f84:1700::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:1b:f5:ac:45:6f:a2:f5:72:52:37:32:7a:b9:9d:72:2c:b1:07:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2270557E13BAA7CE7C4A8E0820CDFE3EA322249
        Validity
            Not Before: May 26 01:56:48 2023 GMT
            Not After : May 24 02:01:48 2024 GMT
        Subject: CN=2D4941F091ABE10023582C82B20699343155B106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e5:0a:d1:7a:b1:0b:a9:38:e9:b2:20:9a:88:
                    06:f2:82:8d:69:4a:17:f1:46:e7:f8:ef:a4:2a:2f:
                    a5:f7:ee:0a:18:2b:49:54:3d:04:a8:cf:a3:0c:7c:
                    87:7b:12:8c:36:70:9c:f9:11:d9:47:c8:ab:76:21:
                    89:e7:1a:ff:7c:40:57:04:86:6d:13:36:24:dd:4f:
                    0d:16:ad:e9:71:be:a3:3a:b8:bf:24:c6:11:b8:5b:
                    d2:f2:2c:7e:0c:e5:75:4c:80:9f:11:5e:3e:d8:cb:
                    62:22:1e:08:de:57:28:02:c1:bd:e9:28:90:d1:18:
                    cc:d8:23:b4:b5:9a:c5:81:cf:43:0c:b5:77:74:3e:
                    5d:de:fb:3f:c4:a8:ea:3f:10:99:b2:3f:8f:df:14:
                    88:03:1a:10:52:af:f0:6c:1a:86:d1:e1:a0:d9:ad:
                    52:78:c8:91:66:55:c0:01:48:cb:9e:53:19:fc:6a:
                    64:0c:0f:dd:0e:da:75:a3:71:93:93:41:21:a5:26:
                    6f:4c:39:97:e7:57:b3:ce:f5:5d:29:d7:0a:07:e9:
                    13:cf:4f:46:ab:25:15:55:61:78:31:ce:7f:8f:e2:
                    e6:5c:53:1c:58:f3:7e:50:7b:e5:85:00:55:a2:97:
                    a4:6c:36:a4:d5:31:ad:f5:92:cc:12:35:91:e0:0c:
                    ec:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:49:41:F0:91:AB:E1:00:23:58:2C:82:B2:06:99:34:31:55:B1:06
            X509v3 Authority Key Identifier:
                keyid:C2:27:05:57:E1:3B:AA:7C:E7:C4:A8:E0:82:0C:DF:E3:EA:32:22:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/C2270557E13BAA7CE7C4A8E0820CDFE3EA322249.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C2270557E13BAA7CE7C4A8E0820CDFE3EA322249.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/326130363a396638343a313730303a3a2f34302d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f84:1700::/40

    Signature Algorithm: sha256WithRSAEncryption
         ae:38:f5:97:d1:66:00:8c:37:c5:07:49:08:76:71:7f:b7:9c:
         fe:5a:15:45:2b:0b:5a:42:21:76:55:4d:66:be:16:9e:ef:88:
         3a:3a:05:82:df:26:01:d2:90:d2:2c:97:af:f7:f9:a1:38:6e:
         8d:80:5b:74:e0:1a:b0:68:71:64:25:ac:52:7b:8c:4f:6f:24:
         63:4e:48:83:25:8e:32:e9:0f:bf:a5:27:b9:f0:db:07:d8:5b:
         78:45:6d:ae:7d:d3:f3:8d:5c:26:3e:a6:f2:a4:94:61:ba:7a:
         9e:0d:e1:e9:66:e8:89:df:d9:9e:18:25:bf:53:ca:dc:db:a6:
         b2:43:3f:f6:84:0c:36:a0:03:9b:4b:0f:62:39:03:09:c4:35:
         f2:5b:51:37:35:e5:2f:4d:43:59:80:a5:90:0a:38:df:01:51:
         f9:4d:e9:6a:75:05:e0:a8:8b:12:45:c2:9e:ac:41:2e:ed:d2:
         b2:3b:6a:a9:73:08:40:2a:a7:24:54:07:23:e1:dc:bf:96:64:
         34:c9:b6:45:92:b5:ef:09:49:e2:40:54:f2:4e:78:47:f5:00:
         e6:31:d7:c4:f5:36:6f:cd:77:28:26:53:02:c7:96:6b:6b:b0:
         a1:0e:6e:bc:c5:6f:cb:8f:09:e5:6c:62:b5:ef:03:4f:54:f3:
         df:59:04:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:28:10 2025 by rpki-client