Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/326130363a396638343a313930303a3a2f34302d3438203d3e203630393030.roa
File:                     326130363a396638343a313930303a3a2f34302d3438203d3e203630393030.roa (raw, json)
Hash identifier:          ORYK2Gw+ahKZ8UjzCTeCja24NIygbWylecbxxFsZbbQ=
Subject key identifier:   06:07:50:6D:F9:A8:82:92:65:9E:C7:7D:CB:09:1C:58:D6:60:74:CA
Certificate issuer:       /CN=C2270557E13BAA7CE7C4A8E0820CDFE3EA322249
Certificate serial:       231FB63564DAC9F0C9B1DC919B0C5350F40F2B5E
Authority key identifier: C2:27:05:57:E1:3B:AA:7C:E7:C4:A8:E0:82:0C:DF:E3:EA:32:22:49
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C2270557E13BAA7CE7C4A8E0820CDFE3EA322249.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/326130363a396638343a313930303a3a2f34302d3438203d3e203630393030.roa
Signing time:             Fri 26 May 2023 02:02:10 +0000
ROA not before:           Fri 26 May 2023 01:57:10 +0000
ROA not after:            Fri 24 May 2024 02:02:10 +0000
asID:                     60900
IP address blocks:        2a06:9f84:1900::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:1f:b6:35:64:da:c9:f0:c9:b1:dc:91:9b:0c:53:50:f4:0f:2b:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2270557E13BAA7CE7C4A8E0820CDFE3EA322249
        Validity
            Not Before: May 26 01:57:10 2023 GMT
            Not After : May 24 02:02:10 2024 GMT
        Subject: CN=0607506DF9A88292659EC77DCB091C58D66074CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:94:25:f5:44:0d:df:1d:2b:38:1f:3c:e2:7c:
                    0e:2f:01:0c:d1:8c:2d:a4:b4:6e:83:51:43:44:a9:
                    69:59:90:93:f2:b2:90:c4:47:0f:36:db:37:19:9e:
                    ea:aa:4e:5f:b2:bc:38:ef:02:22:a9:5a:3c:77:b6:
                    4c:50:ab:12:f4:dc:ce:a5:d2:dc:42:1f:9c:8c:0b:
                    b5:b3:fb:d2:dc:61:43:cd:57:16:53:36:b4:a1:ad:
                    f5:dc:8f:51:dc:6c:28:1c:7f:7b:be:95:c5:4b:1f:
                    bf:ee:48:29:14:1d:88:7e:20:37:a9:0e:60:8f:2d:
                    5a:6d:e1:59:34:b0:7a:aa:70:62:7b:39:8d:89:6b:
                    39:07:59:77:b1:b5:6e:a2:7d:96:4f:5d:3c:bb:d5:
                    5b:f4:94:9b:58:42:79:83:df:54:40:4c:18:25:b2:
                    17:74:93:8d:7c:fd:bc:b9:0a:d6:5e:f3:0f:30:38:
                    e6:4f:b2:ba:29:b6:03:e6:b4:d9:bd:e7:72:58:12:
                    ba:ac:fc:3a:55:b7:3c:d6:44:52:49:fe:da:bf:e7:
                    03:5e:b7:c8:b4:46:65:3a:e8:f4:5f:bc:ac:2a:d8:
                    67:99:3f:8a:30:73:91:97:1a:77:3f:90:7c:b9:93:
                    88:5e:3b:6a:db:09:cc:e6:68:84:55:40:26:5a:3d:
                    be:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:07:50:6D:F9:A8:82:92:65:9E:C7:7D:CB:09:1C:58:D6:60:74:CA
            X509v3 Authority Key Identifier:
                keyid:C2:27:05:57:E1:3B:AA:7C:E7:C4:A8:E0:82:0C:DF:E3:EA:32:22:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/C2270557E13BAA7CE7C4A8E0820CDFE3EA322249.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C2270557E13BAA7CE7C4A8E0820CDFE3EA322249.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/6/326130363a396638343a313930303a3a2f34302d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f84:1900::/40

    Signature Algorithm: sha256WithRSAEncryption
         72:89:13:4d:f1:91:f6:8f:ef:20:4f:8b:22:1d:b1:d0:53:f9:
         20:9a:37:b5:ed:9d:95:c8:29:59:cd:18:09:dc:2d:a8:9a:4c:
         7a:b9:78:1c:3d:50:fe:13:3a:74:06:20:eb:73:b7:68:61:5c:
         61:01:37:a2:2e:af:88:72:1d:3b:b0:43:9e:3a:92:25:7a:bc:
         eb:ea:1c:ac:fd:b8:ae:c8:78:3b:43:a6:92:ec:9b:59:75:f9:
         50:56:43:b1:a3:62:ba:67:c1:1b:1a:76:ab:d2:d2:4a:e8:8c:
         05:3b:40:b0:05:0a:71:3b:ca:3e:dc:75:c1:91:a7:59:61:49:
         fe:15:ed:fd:d4:c4:37:cf:de:6a:6c:e3:3b:73:41:50:bf:57:
         5d:1e:10:aa:c4:b7:04:c7:ef:2f:9e:e5:59:0d:77:de:b2:35:
         5d:27:1a:ab:56:51:ac:ff:0c:50:65:8d:08:b3:10:58:a8:87:
         b0:f4:d7:a3:14:95:64:d1:06:6f:1b:ff:83:c7:35:97:85:6a:
         8f:4e:84:93:36:22:9c:01:e9:fc:13:ef:c6:78:9a:9b:c6:ad:
         76:7f:8c:8c:52:7d:c8:98:4d:19:17:f5:12:7f:72:55:1f:c4:
         0e:87:5c:ad:8c:94:4b:13:3a:a1:5d:35:ae:50:13:9d:45:5b:
         bf:28:88:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:21 2025 by rpki-client