Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3137312e302f32342d3234203d3e203133323133.roa
File:                     39332e3132372e3137312e302f32342d3234203d3e203133323133.roa (raw, json)
Hash identifier:          yOH+kn53PRmhKEEQIQKfjR9j9n02ni024nYSYNymCz4=
Subject key identifier:   DF:C4:62:1A:D5:58:9F:A6:D2:0C:13:58:C1:F4:1A:B9:76:03:D7:3A
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       466963CB02067C426511FA73DDC00A18BEDC8E2A
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3137312e302f32342d3234203d3e203133323133.roa
Signing time:             Wed 13 Sep 2023 15:11:54 +0000
ROA not before:           Wed 13 Sep 2023 15:06:54 +0000
ROA not after:            Wed 11 Sep 2024 15:11:54 +0000
asID:                     13213
IP address blocks:        93.127.171.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:69:63:cb:02:06:7c:42:65:11:fa:73:dd:c0:0a:18:be:dc:8e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Sep 13 15:06:54 2023 GMT
            Not After : Sep 11 15:11:54 2024 GMT
        Subject: CN=DFC4621AD5589FA6D20C1358C1F41AB97603D73A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e7:21:0c:26:4f:a2:91:91:6b:df:e7:4f:88:
                    a0:fb:30:28:a1:cc:14:e6:98:e9:cb:cc:7f:01:8c:
                    32:05:b1:59:da:1e:71:3d:c9:32:1c:2f:3b:8a:f1:
                    fd:85:42:a0:e1:d5:33:7b:c4:f4:a4:08:22:f8:33:
                    cd:6d:77:73:93:9a:1d:3d:4f:fc:3c:96:bf:58:4f:
                    5b:58:15:ee:5e:7d:1d:12:0d:67:8c:1a:ac:d5:90:
                    30:04:a7:0e:de:72:46:fa:b6:9d:5b:96:ca:b2:ec:
                    4f:1d:67:8e:2d:0c:10:ad:c3:8b:ff:94:e5:e2:4a:
                    72:a6:61:52:7d:8e:56:51:b2:6d:31:6a:02:7e:6c:
                    4b:ba:14:cb:7a:00:7a:f5:c2:55:4e:de:19:84:fd:
                    94:9c:b5:3a:a2:0b:ed:ae:d5:a7:05:e5:1b:41:99:
                    2c:81:68:27:75:c4:b6:d6:e0:06:6c:e9:37:8f:31:
                    e0:2f:b9:bc:1f:ed:41:91:65:d7:d2:4e:9c:61:42:
                    64:77:e7:c0:3f:3f:71:5c:fa:76:68:35:60:7c:03:
                    4c:14:ff:e6:77:f9:61:84:c7:81:51:9f:33:fb:96:
                    df:ee:d9:40:e4:e6:35:4f:25:1e:58:89:9f:91:13:
                    87:de:00:d8:d4:11:e1:d9:4f:be:37:57:97:ef:0e:
                    b9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C4:62:1A:D5:58:9F:A6:D2:0C:13:58:C1:F4:1A:B9:76:03:D7:3A
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3137312e302f32342d3234203d3e203133323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:b3:56:1d:9a:01:57:8f:bd:cd:0a:37:11:ed:e8:b2:6d:ac:
         7b:5d:8d:1b:da:04:3c:cf:2f:ce:bb:b6:0e:f7:01:0f:f6:83:
         c7:86:39:2f:fa:21:e5:27:00:ee:31:02:8d:5d:f6:a0:c1:54:
         29:c1:4b:55:77:bf:3d:11:71:a0:61:c2:5d:74:a3:93:cd:34:
         a9:d3:c2:27:cf:d2:d7:7a:8a:ab:33:ec:ae:87:6f:73:fb:ce:
         18:33:15:18:5e:3a:bd:b0:1b:3a:37:49:5f:30:71:18:53:ff:
         99:dc:38:e7:94:99:c3:eb:bb:d9:64:5a:fa:23:a8:d5:47:54:
         ab:bb:4c:24:63:fe:a2:a0:af:4e:c6:6b:ab:35:fe:2f:2b:44:
         c0:8a:2e:e0:70:ba:06:c8:23:16:0d:d7:67:0c:a6:a3:7a:d2:
         69:48:db:88:25:44:6e:02:e1:b0:9e:e1:0a:56:b4:0a:6b:2d:
         66:97:81:98:c9:a9:ec:87:7f:4d:fb:10:17:ce:9a:89:81:bd:
         78:42:88:51:50:22:15:bf:2e:95:cd:60:86:a5:1c:7f:26:e6:
         5e:32:3e:c5:79:8c:d0:86:ae:61:3f:0d:af:fb:fe:8a:5b:cb:
         86:ac:6d:eb:eb:97:93:8e:c8:8a:d5:f5:49:89:f0:a1:09:11:
         36:f6:7e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org