Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3139362e302f32322d3234203d3e203439393939.roa
File:                     39332e3132372e3139362e302f32322d3234203d3e203439393939.roa (raw, json)
Hash identifier:          C/XMythqzdbeo1bPLXDUZy36vz8GR64MocxbLgZoND4=
Subject key identifier:   0A:FA:D7:09:FE:77:E0:4F:64:26:A9:94:32:19:09:65:83:BC:AB:FA
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       30829895AA4F239524EF141F9C86132F305148B4
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3139362e302f32322d3234203d3e203439393939.roa
Signing time:             Tue 11 Apr 2023 19:06:38 +0000
ROA not before:           Tue 11 Apr 2023 19:01:38 +0000
ROA not after:            Tue 09 Apr 2024 19:06:38 +0000
asID:                     49999
IP address blocks:        93.127.196.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:82:98:95:aa:4f:23:95:24:ef:14:1f:9c:86:13:2f:30:51:48:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Apr 11 19:01:38 2023 GMT
            Not After : Apr  9 19:06:38 2024 GMT
        Subject: CN=0AFAD709FE77E04F6426A9943219096583BCABFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f0:71:67:4a:ea:04:91:d2:13:02:f6:29:18:
                    9d:5c:28:f5:ec:11:9d:46:4e:99:79:7a:d6:cd:2f:
                    31:c6:e5:92:dd:08:96:85:34:94:6a:1c:c2:3a:d7:
                    a9:e7:84:da:6a:3f:65:33:99:ea:8d:bb:fe:3e:23:
                    ca:82:1c:59:c1:59:c9:98:4d:e6:a7:30:1d:1b:e1:
                    d5:25:f4:2b:de:8c:10:ef:4f:c9:c9:c4:8f:29:d8:
                    55:49:fc:be:b4:7c:e6:5e:2d:93:5c:e9:95:87:e6:
                    d7:8a:17:46:a9:7a:79:0e:c1:03:0d:7b:d8:7e:42:
                    2a:6a:67:e0:9d:2c:17:5d:80:c8:ec:86:22:de:a4:
                    b8:f1:6e:5a:ed:b1:03:77:cf:68:25:ce:f7:6b:27:
                    dd:f6:48:af:ab:d5:37:60:f5:b2:45:37:72:f5:29:
                    6e:e9:fe:c9:ff:b8:d6:a1:1f:06:49:5a:a8:b7:e3:
                    9c:35:0c:68:68:49:06:4c:03:a0:e6:02:e2:2c:74:
                    62:8c:1c:e5:fa:5b:49:d7:08:93:e5:3e:71:1b:0e:
                    f9:64:bb:69:1d:41:37:cb:eb:ba:8d:9c:4d:aa:2e:
                    23:6a:3b:5f:27:fb:3e:11:0e:80:50:e8:16:98:64:
                    d8:b9:10:a0:58:d1:0c:32:0d:56:d0:82:0d:12:9b:
                    59:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:FA:D7:09:FE:77:E0:4F:64:26:A9:94:32:19:09:65:83:BC:AB:FA
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3139362e302f32322d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:ea:71:56:87:99:70:39:d4:e0:8f:88:62:5e:f8:8e:83:7a:
         b6:44:ed:6e:eb:7c:25:04:74:70:a8:2f:ff:69:12:5f:15:fe:
         37:7a:ae:f8:dd:f5:84:95:e3:3f:74:70:e9:fb:75:17:c2:e4:
         94:a7:d5:4b:39:18:18:12:d0:39:99:b6:94:17:27:bd:1b:26:
         04:f5:d7:7a:8b:9b:77:d3:75:53:90:82:54:e1:4b:10:25:28:
         52:6a:21:96:4f:9f:7f:1c:52:26:f3:05:b6:b0:96:eb:70:e2:
         0a:cf:2a:0b:1f:8f:2a:79:63:cd:c8:26:c5:37:6b:4d:53:19:
         73:b5:37:9a:de:b5:e2:af:1d:d8:16:46:7a:70:56:1f:fe:36:
         97:fa:9a:47:de:f3:3f:66:52:ee:b7:1a:d3:d1:4c:c6:48:4b:
         bb:50:80:4c:f8:cd:8c:6f:b5:63:5d:2a:f3:cd:92:c5:c2:2d:
         2e:39:26:19:05:e9:cd:58:d6:f6:1b:d2:96:83:25:c8:84:84:
         2c:3a:21:bf:2b:bc:f6:05:99:f6:3c:b3:c9:3b:7e:f8:88:58:
         89:be:51:15:83:24:62:5c:81:6e:be:9e:44:55:c5:62:87:1f:
         07:5c:e7:38:a7:1c:5c:33:65:18:78:e3:05:36:4b:44:8c:de:
         86:44:2f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org