Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136332e302f32342d3234203d3e20323034383433.roa
File:                     39332e3132372e3136332e302f32342d3234203d3e20323034383433.roa (raw, json)
Hash identifier:          TARSr7a0LPWu5Xe+KZyNCilYEJjS4lPa2hjbiAfUCSI=
Subject key identifier:   A0:49:10:FD:7B:76:0D:0C:89:7B:15:D2:5F:FC:B1:F3:26:7E:E9:12
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       3E7B2D0D0BF4B537ACBF278B75DAC385503D28B5
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136332e302f32342d3234203d3e20323034383433.roa
Signing time:             Thu 30 Mar 2023 14:33:21 +0000
ROA not before:           Thu 30 Mar 2023 14:28:21 +0000
ROA not after:            Thu 28 Mar 2024 14:33:21 +0000
asID:                     204843
IP address blocks:        93.127.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7b:2d:0d:0b:f4:b5:37:ac:bf:27:8b:75:da:c3:85:50:3d:28:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Mar 30 14:28:21 2023 GMT
            Not After : Mar 28 14:33:21 2024 GMT
        Subject: CN=A04910FD7B760D0C897B15D25FFCB1F3267EE912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a9:b8:5c:2b:97:78:d7:3c:28:1e:f9:51:aa:
                    92:b6:50:1f:3e:6b:99:25:98:6c:91:a9:4b:8f:ed:
                    3f:49:71:29:e6:1e:3c:75:9c:04:04:6b:73:06:af:
                    aa:5b:44:81:15:bd:5a:a3:90:17:d4:11:09:b9:05:
                    5d:95:c3:c7:ce:d2:55:d0:da:e7:99:d4:51:f4:cd:
                    a2:80:ef:b2:c4:c6:dc:59:85:56:fc:ef:d8:c8:92:
                    31:8c:5a:9e:e1:6e:c2:b9:d6:50:e0:65:e1:83:35:
                    b3:4d:17:5e:75:9c:3f:d0:16:51:6b:2d:cf:47:52:
                    c6:b4:65:d8:8f:36:6e:b4:0f:5d:7d:bd:5c:53:b9:
                    e4:8d:c8:9e:01:bc:3e:8a:27:3b:22:84:69:1c:76:
                    d4:b6:31:a7:64:2b:75:a5:ec:8e:04:37:35:bc:0d:
                    3b:27:1b:21:16:da:07:4c:ed:58:86:46:47:02:48:
                    34:9d:cf:84:b5:8f:25:37:2a:01:9d:ff:4d:27:a3:
                    a0:2a:f0:e7:ea:76:99:76:4e:1c:77:71:c2:ff:11:
                    20:c9:5f:d3:75:2d:11:6e:f3:1a:3d:e8:64:47:8d:
                    07:d2:e7:00:44:06:c9:b1:13:c9:85:de:9d:71:0f:
                    2e:b9:70:65:b9:ff:72:50:a8:b0:a0:15:b9:7c:d4:
                    50:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:49:10:FD:7B:76:0D:0C:89:7B:15:D2:5F:FC:B1:F3:26:7E:E9:12
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136332e302f32342d3234203d3e20323034383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:7e:e8:5c:f7:98:f9:c0:12:c7:e6:c4:71:7b:96:d7:ff:75:
         5d:4b:89:5b:18:21:57:68:c3:d7:56:cf:5b:d2:24:b3:12:39:
         68:be:f5:65:3b:c8:4b:9f:85:83:ab:f0:02:de:71:f0:62:73:
         48:ee:f2:79:21:5a:ef:7d:14:d2:63:ae:91:bc:70:53:ca:08:
         ee:01:6e:f8:23:3e:8e:6d:53:6b:51:e0:d6:70:94:f0:da:89:
         cd:d7:85:08:0f:f2:d7:fd:59:7e:2a:40:7a:b4:a3:1d:7a:61:
         17:5c:0b:3d:28:f6:3c:b3:b5:73:8c:9d:66:b8:53:0e:fa:c6:
         51:7b:73:01:d0:a2:6d:81:32:ae:cd:31:4f:40:e5:98:1b:a3:
         0b:21:aa:7a:87:0b:88:20:bc:d5:ac:9d:b6:9d:4f:aa:10:7f:
         79:f1:de:b7:7a:02:10:fb:3d:89:3d:71:36:ed:de:66:0b:5e:
         d3:00:37:11:1c:cb:8c:ce:a2:5b:28:eb:1b:92:2f:ed:51:4a:
         65:06:81:13:76:b6:18:6f:a7:f9:6e:94:68:5f:dc:9f:be:a3:
         e4:44:1c:37:73:bb:ee:aa:d7:9a:b6:c9:6b:64:14:c6:dd:27:
         50:84:0b:66:1e:ce:02:0c:50:99:e3:b5:20:8c:c1:ec:ab:05:
         48:62:74:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org