Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136352e302f32342d3234203d3e203531353539.roa
File:                     39332e3132372e3136352e302f32342d3234203d3e203531353539.roa (raw, json)
Hash identifier:          A78yGObARpJYtQ2I7hW3S7NjRC+ziFkT3qzj1hQSXvM=
Subject key identifier:   A9:E9:F7:6C:0A:EB:38:ED:20:7D:26:3A:14:E2:25:68:59:48:17:57
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       11873D66AF91FC93CD0336A47D4290B8FA9FB538
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136352e302f32342d3234203d3e203531353539.roa
Signing time:             Mon 10 Apr 2023 21:58:33 +0000
ROA not before:           Mon 10 Apr 2023 21:53:33 +0000
ROA not after:            Mon 08 Apr 2024 21:58:33 +0000
asID:                     51559
IP address blocks:        93.127.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:87:3d:66:af:91:fc:93:cd:03:36:a4:7d:42:90:b8:fa:9f:b5:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Apr 10 21:53:33 2023 GMT
            Not After : Apr  8 21:58:33 2024 GMT
        Subject: CN=A9E9F76C0AEB38ED207D263A14E2256859481757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:08:c0:eb:e6:10:5d:59:e3:2d:95:51:b5:35:
                    d0:9f:85:6f:53:b6:c6:4c:72:cc:59:1f:7e:0d:96:
                    41:93:a9:d2:70:fe:d2:fc:43:6e:2c:52:18:74:b5:
                    10:03:ee:79:c2:cd:24:2b:8e:52:24:8a:9e:d3:35:
                    aa:2e:da:8f:9e:31:3c:9e:f3:e9:da:3b:2a:39:03:
                    47:04:8c:ad:ea:ef:20:c2:0b:92:5a:c0:48:ce:e6:
                    f1:c7:33:4b:8f:9b:dc:b0:88:37:9a:00:e3:d4:f6:
                    95:ae:2c:33:50:63:37:f1:29:fa:4f:f4:24:96:df:
                    9d:c4:7b:53:54:6a:fd:85:61:32:6a:b8:a3:87:26:
                    e1:df:05:81:9c:8c:21:c3:e8:46:64:70:36:00:65:
                    aa:57:b4:80:88:02:85:4e:43:11:0e:10:b7:a6:37:
                    f8:45:a8:b6:b2:52:c4:ca:09:e0:b9:ce:2a:d9:d5:
                    cb:e4:eb:55:d2:19:20:dd:62:e7:44:a6:dc:52:2d:
                    fb:61:21:9d:c5:d3:5e:83:bf:60:df:7c:0b:a4:75:
                    67:e2:d5:c2:4a:ec:ca:e9:85:cb:b9:6c:f3:ca:d6:
                    8c:76:f1:05:73:a7:41:af:92:35:63:c5:f3:38:ad:
                    a6:0b:e8:84:9d:df:ae:0f:5b:de:82:0b:ba:46:fa:
                    69:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E9:F7:6C:0A:EB:38:ED:20:7D:26:3A:14:E2:25:68:59:48:17:57
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3136352e302f32342d3234203d3e203531353539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:0e:5e:8b:c6:46:a2:25:c1:95:79:7a:ab:fc:db:49:e2:33:
         46:af:a2:54:21:8c:fd:cb:2d:25:09:a0:4a:48:c0:84:ce:46:
         59:00:88:89:b5:d0:83:01:68:dd:7f:73:55:3a:3d:cb:ea:4a:
         b0:18:6c:13:b5:b8:0c:e1:79:0c:2d:b5:90:ff:78:ff:b2:39:
         49:9a:79:f0:1d:71:f8:99:0d:ef:4c:d1:88:25:45:81:f2:b7:
         50:ff:4c:46:ae:e0:16:75:06:54:0e:87:b5:ff:4c:83:1c:3e:
         af:23:ff:8a:9e:92:01:ae:df:40:e7:a6:f6:fb:b0:2f:87:1a:
         4f:ca:27:fa:f4:06:5c:5e:dc:6e:04:66:2a:dd:e7:b2:03:fb:
         51:6a:33:4e:89:f0:46:33:02:f2:74:cd:38:85:d5:ad:ad:2e:
         00:ac:33:96:80:5c:b3:8f:e4:40:6f:35:dc:ff:28:c7:13:b3:
         fc:71:79:88:e8:a9:15:81:e4:0e:8b:89:83:fb:26:e5:77:d8:
         85:3a:b6:b8:56:ec:43:21:05:0a:89:ca:dd:9a:54:eb:47:f2:
         ac:6e:7f:a1:ec:d2:c0:79:f5:b6:99:df:61:be:da:07:f3:95:
         75:5d:7c:50:98:99:5a:ce:93:d5:c0:e4:12:98:b6:ff:94:45:
         66:a0:6b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org