Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3138312e302f32342d3234203d3e203439393939.roa
File:                     39332e3132372e3138312e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          im6VYL7ngweHrApJsu9nKDeJcciAJ+i3a0DkETUKiCo=
Subject key identifier:   AF:7B:33:26:D9:FD:FC:29:A8:71:2D:4C:CD:29:6F:C0:6B:30:47:47
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       611C47FF27C458B659516810C5CCE0B28FC63181
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3138312e302f32342d3234203d3e203439393939.roa
Signing time:             Tue 11 Apr 2023 19:06:38 +0000
ROA not before:           Tue 11 Apr 2023 19:01:38 +0000
ROA not after:            Tue 09 Apr 2024 19:06:38 +0000
asID:                     49999
IP address blocks:        93.127.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:1c:47:ff:27:c4:58:b6:59:51:68:10:c5:cc:e0:b2:8f:c6:31:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Apr 11 19:01:38 2023 GMT
            Not After : Apr  9 19:06:38 2024 GMT
        Subject: CN=AF7B3326D9FDFC29A8712D4CCD296FC06B304747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:94:88:80:64:0b:98:18:f4:10:13:0d:6a:74:
                    a9:37:2e:c6:33:1b:e7:84:f1:43:f6:24:c4:39:22:
                    a8:87:3f:ff:9e:21:58:3a:73:b1:af:6b:4d:3a:6a:
                    52:3a:11:b5:6b:44:0a:59:b7:1c:1f:25:64:6b:7d:
                    9a:d8:f7:0a:b9:07:73:ce:18:3b:6b:62:02:94:27:
                    a9:fb:0c:f1:72:8e:74:6f:d2:ae:92:23:68:33:76:
                    8c:b1:59:53:8d:81:6c:c9:87:67:1f:09:75:44:9f:
                    07:da:a3:f1:84:57:aa:ef:f9:86:5d:92:03:7b:b9:
                    03:de:44:72:fb:b7:81:2a:dd:c0:8a:0e:55:ff:45:
                    ed:94:59:17:bb:04:48:6c:41:f9:c2:81:05:30:fe:
                    70:b5:83:7e:be:9d:75:90:6e:36:04:9c:17:21:e0:
                    9a:38:90:1e:17:b5:95:36:c3:28:0e:fb:7b:cd:88:
                    59:ac:65:5c:93:14:0f:89:43:2b:36:50:d8:8a:03:
                    71:35:d6:27:6b:a3:4a:cd:cd:8e:ee:92:7c:87:88:
                    cc:7c:c8:f3:bb:09:71:e9:db:13:ff:48:b4:9a:42:
                    e7:e5:46:84:36:5a:32:5f:53:8c:5c:74:97:ad:28:
                    f2:c9:bb:56:c1:48:c9:b5:dd:3b:c3:96:61:94:4f:
                    37:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7B:33:26:D9:FD:FC:29:A8:71:2D:4C:CD:29:6F:C0:6B:30:47:47
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3138312e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:64:7c:03:41:32:24:61:3a:1b:2a:19:6c:70:9d:7f:a8:cb:
         c8:2f:b2:4f:4d:f9:b5:55:00:3b:54:19:d1:e6:4d:5f:e8:ba:
         a0:85:56:02:a7:41:99:82:2f:f5:10:f2:f2:02:d2:a0:4a:b0:
         82:3e:43:61:80:24:17:f1:ce:ce:1e:20:13:25:52:74:c7:46:
         27:c0:7f:81:68:88:f8:aa:e0:5d:83:c8:2c:fb:2b:6a:c8:79:
         18:d5:bd:a5:0e:d0:c7:56:e2:7a:38:f5:50:19:00:cd:81:66:
         a1:f8:7f:fa:b6:7e:ed:14:a9:0b:2e:14:61:cd:73:ed:77:f8:
         bf:69:61:ab:25:95:54:04:6c:90:73:59:ba:e7:94:00:65:93:
         a1:d3:f8:fb:df:98:4a:0e:13:31:5b:37:d3:67:00:7d:de:d8:
         2a:ae:95:df:81:a8:c2:b3:d9:94:1f:3a:df:8e:fd:8e:a7:c0:
         27:20:c3:e7:c2:db:99:84:4a:78:85:34:af:74:7d:b9:20:57:
         f9:ce:c8:09:63:dc:40:c8:f3:b6:a4:3d:6b:f3:f6:fe:df:01:
         f8:00:80:1f:7d:05:71:b9:e3:0c:1f:3a:f4:08:df:0e:bd:0d:
         bb:0b:e6:ec:ad:49:91:1d:92:82:48:d6:1c:d2:2a:5f:8d:df:
         32:c4:29:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org