Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3132382e302f31372d3137203d3e203331343030.roa
File:                     39332e3132372e3132382e302f31372d3137203d3e203331343030.roa (raw, json)
Hash identifier:          eGaVgFG1xDeSq2ALHI2fugs90hSQiYXCrDzkvVCClOs=
Subject key identifier:   B9:E5:66:F2:1D:BE:56:76:C9:6F:D0:C4:19:1D:BE:25:FA:05:43:8E
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       1F5FB2CA1CF6AC372B58F737B69DEB16B44ED9FC
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3132382e302f31372d3137203d3e203331343030.roa
Signing time:             Fri 20 Jan 2023 06:26:11 +0000
ROA not before:           Fri 20 Jan 2023 06:21:11 +0000
ROA not after:            Fri 19 Jan 2024 06:26:11 +0000
asID:                     31400
IP address blocks:        93.127.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:5f:b2:ca:1c:f6:ac:37:2b:58:f7:37:b6:9d:eb:16:b4:4e:d9:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Jan 20 06:21:11 2023 GMT
            Not After : Jan 19 06:26:11 2024 GMT
        Subject: CN=B9E566F21DBE5676C96FD0C4191DBE25FA05438E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:61:9c:36:ae:71:02:73:47:c1:8f:90:ba:a4:
                    96:dc:a7:c4:da:1a:cd:01:33:7d:a3:77:2a:b3:26:
                    a3:6d:90:40:d2:d3:8e:10:34:75:f6:7e:b2:20:d6:
                    a2:78:ad:3a:4a:cc:b0:e5:cc:18:54:f6:03:3b:28:
                    26:b2:16:62:09:98:de:47:a7:91:c3:5b:d0:f3:57:
                    8c:7d:b3:b1:24:11:d4:d7:2e:56:12:75:ac:ce:8b:
                    3c:02:2b:c0:d1:87:91:97:31:29:2b:f7:35:aa:a2:
                    7e:25:87:d2:d3:b6:97:cc:bd:95:5b:c8:dd:91:fb:
                    f7:b0:14:c1:74:3e:33:f1:4f:2d:6d:45:4f:51:af:
                    70:3c:c3:31:62:e5:6c:74:32:79:ff:6d:bb:b6:fd:
                    05:53:a1:68:53:b8:36:fa:5a:a5:7c:ec:33:64:c5:
                    69:b8:0b:54:c9:8f:bb:1b:77:d5:00:8b:7b:7a:ae:
                    96:2f:ee:a2:c8:b1:23:b2:c3:e1:24:61:aa:1c:aa:
                    4c:b2:99:91:b6:a3:69:6d:6b:fb:0e:c4:5c:5d:7c:
                    9d:9d:22:1e:7d:c2:c4:55:8a:85:cb:9f:b2:c1:8d:
                    96:11:ff:a4:c9:4a:39:5a:26:0f:94:ab:47:53:e2:
                    e3:ad:70:73:fb:31:91:bc:2a:84:b8:58:97:f1:1e:
                    50:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E5:66:F2:1D:BE:56:76:C9:6F:D0:C4:19:1D:BE:25:FA:05:43:8E
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3132382e302f31372d3137203d3e203331343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         61:59:de:1d:9a:99:f2:c5:9f:43:48:2f:35:47:46:37:13:9a:
         ed:ee:29:34:fa:b7:f1:95:4e:cf:ea:85:d0:c3:f5:35:78:7f:
         1b:1e:e4:31:0d:2b:cd:7a:ba:e8:a8:f4:63:cf:be:bd:6e:31:
         96:96:d4:84:7d:2b:3e:72:67:d8:42:57:fb:54:32:4a:91:c0:
         36:4a:86:b8:10:ec:14:4b:3a:33:3f:ef:7d:bb:86:fb:42:44:
         6c:f5:dc:e3:84:f4:73:92:45:b1:0f:68:5f:79:1f:35:1c:0b:
         1a:99:76:1d:51:fa:8c:5c:58:10:c4:02:bf:9e:68:a2:3c:ce:
         64:43:ba:f7:de:a9:01:53:89:36:79:b8:2c:c1:52:b4:eb:c9:
         84:39:a7:8c:9c:7b:4a:b5:51:5d:64:21:d4:80:d2:5d:2b:99:
         25:ae:0c:d7:f5:e9:66:19:13:03:f3:ba:4f:79:64:85:c9:4b:
         74:be:29:08:c7:f8:db:2f:1e:6d:ef:57:51:55:05:51:77:59:
         78:0b:64:d7:95:12:63:38:5c:17:41:b7:07:a7:53:a3:cb:65:
         1e:f5:9e:e6:11:b3:b1:85:97:51:0f:1c:f8:65:f0:43:46:5c:
         e6:86:4e:33:cc:1b:7f:9a:8b:e5:50:e9:91:b5:a7:70:76:7c:
         de:d1:bc:5d
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUH1+yyhz2rDcrWPc3tp3rFrRO2fwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgwNGQxZTJiMTI2MDA2YmZlNTA3OTYzNmE2YThkZGU1
YjdmZDlhNjAeFw0yMzAxMjAwNjIxMTFaFw0yNDAxMTkwNjI2MTFaMDMxMTAvBgNV
BAMTKEI5RTU2NkYyMURCRTU2NzZDOTZGRDBDNDE5MURCRTI1RkEwNTQzOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxYZw2rnECc0fBj5C6pJbcp8Ta
Gs0BM32jdyqzJqNtkEDS044QNHX2frIg1qJ4rTpKzLDlzBhU9gM7KCayFmIJmN5H
p5HDW9DzV4x9s7EkEdTXLlYSdazOizwCK8DRh5GXMSkr9zWqon4lh9LTtpfMvZVb
yN2R+/ewFMF0PjPxTy1tRU9Rr3A8wzFi5Wx0Mnn/bbu2/QVToWhTuDb6WqV87DNk
xWm4C1TJj7sbd9UAi3t6rpYv7qLIsSOyw+EkYaocqkyymZG2o2lta/sOxFxdfJ2d
Ih59wsRVioXLn7LBjZYR/6TJSjlaJg+Uq0dT4uOtcHP7MZG8KoS4WJfxHlD/AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUueVm8h2+VnbJb9DEGR2+JfoFQ44wHwYDVR0j
BBgwFoAUWATR4rEmAGv+UHljamqN3lt/2aYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMtNTczNy00YmVmLTljMzUtM2QxMTNjNmVl
ZTM3LzAvNTgwNEQxRTJCMTI2MDA2QkZFNTA3OTYzNkE2QThEREU1QjdGRDlBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dBVFI0ckVtQUd2LVVIbGphbXFOM2x0
XzJhWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMt
NTczNy00YmVmLTljMzUtM2QxMTNjNmVlZTM3LzAvMzkzMzJlMzEzMjM3MmUzMTMy
MzgyZTMwMmYzMTM3MmQzMTM3MjAzZDNlMjAzMzMxMzQzMDMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH
XX+AMA0GCSqGSIb3DQEBCwUAA4IBAQBhWd4dmpnyxZ9DSC81R0Y3E5rt7ik0+rfx
lU7P6oXQw/U1eH8bHuQxDSvNerroqPRjz769bjGWltSEfSs+cmfYQlf7VDJKkcA2
Soa4EOwUSzozP+99u4b7QkRs9dzjhPRzkkWxD2hfeR81HAsamXYdUfqMXFgQxAK/
nmiiPM5kQ7r33qkBU4k2ebgswVK068mEOaeMnHtKtVFdZCHUgNJdK5klrgzX9elm
GRMD87pPeWSFyUt0vikIx/jbLx5t71dRVQVRd1l4C2TXlRJjOFwXQbcHp1Ojy2Ue
9Z7mEbOxhZdRDxz4ZfBDRlzmhk4zzBt/movlUOmRtadwdnze0bxd
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org