Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230332e302f32342d3234203d3e203630373231.roa
File:                     39332e3132372e3230332e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          nzdwx74Qd3NsyrQCkE6sXeMGMR5AmoQkZIlOzCdV0EQ=
Subject key identifier:   78:BD:8B:4F:E4:36:C7:75:CC:14:97:9A:C5:5B:F9:02:91:08:EC:C6
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       4F14FFF2139FD005646D8E875427C5AAE86361E2
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230332e302f32342d3234203d3e203630373231.roa
Signing time:             Fri 20 Jan 2023 06:26:13 +0000
ROA not before:           Fri 20 Jan 2023 06:21:13 +0000
ROA not after:            Fri 19 Jan 2024 06:26:13 +0000
asID:                     60721
IP address blocks:        93.127.203.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:14:ff:f2:13:9f:d0:05:64:6d:8e:87:54:27:c5:aa:e8:63:61:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Jan 20 06:21:13 2023 GMT
            Not After : Jan 19 06:26:13 2024 GMT
        Subject: CN=78BD8B4FE436C775CC14979AC55BF9029108ECC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e3:be:0f:20:35:6f:94:02:e4:b4:50:2d:e1:
                    49:d3:37:79:a7:87:ec:ab:cb:f2:70:be:08:b3:4c:
                    fe:09:e5:94:b6:b2:b6:2e:93:1f:bf:01:96:dc:1d:
                    d5:24:65:f4:12:2b:7b:80:79:d7:e6:8a:28:c1:69:
                    9b:f6:39:0e:ad:a9:20:6d:0d:32:63:36:e2:2a:35:
                    59:1a:b1:ce:67:5e:6a:44:39:58:92:69:7c:88:7b:
                    dd:3c:39:f6:d4:5e:b7:fe:06:dd:5f:09:a3:0c:3f:
                    fb:6d:bf:c7:52:59:10:c9:5d:0a:30:4d:36:f7:63:
                    b7:d5:e3:b3:f5:a6:93:f2:5c:f7:ed:e7:76:ad:8f:
                    e1:37:65:b6:03:fe:34:18:6a:90:3f:f1:34:e9:aa:
                    c8:96:6c:fe:af:6d:e5:94:c4:0a:6e:4a:18:2d:59:
                    7f:b5:a9:20:25:9f:5d:2c:8d:5d:d4:b7:09:16:74:
                    fb:80:d2:cb:a6:ee:a2:4a:f1:9f:e7:5d:2f:30:81:
                    fc:c1:6e:f9:2b:97:82:b1:37:39:0f:61:b7:29:c8:
                    de:cb:bc:f2:8f:d9:17:ae:b8:f7:75:f4:74:a4:b5:
                    b2:a5:be:b6:ba:7b:fe:38:be:ee:fd:7d:f8:84:17:
                    b5:23:51:ba:d1:cd:86:99:9d:8d:92:3b:ba:7d:22:
                    63:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BD:8B:4F:E4:36:C7:75:CC:14:97:9A:C5:5B:F9:02:91:08:EC:C6
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3230332e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:8a:b7:a4:43:f7:a3:8c:6f:0b:8c:12:71:44:0a:a6:f9:72:
         f6:6c:e7:92:ad:f8:e2:3f:eb:4d:64:ce:41:6e:b2:ea:95:b2:
         51:f2:06:5e:2c:0b:9b:ce:13:b4:d3:9f:02:a2:26:de:4e:8b:
         62:62:98:78:d4:e7:79:a0:67:3f:ce:32:62:88:d5:bd:08:37:
         6f:3e:83:46:b6:11:db:ff:6d:3a:aa:6b:e1:12:14:3b:12:18:
         69:4b:bd:92:c0:14:63:11:f1:73:11:f8:84:49:f3:d2:ec:c1:
         67:1d:e7:69:bc:fd:e7:09:c0:54:cd:2e:00:80:bb:56:d4:ae:
         cd:e2:df:0d:0e:cb:8e:57:e4:55:b6:c5:86:97:35:37:0d:9a:
         07:50:1b:1b:35:a3:47:a8:cc:26:c6:ae:fc:86:1a:7d:c2:5c:
         3c:da:e0:58:79:5e:59:7a:aa:09:23:89:44:9f:3f:74:6f:29:
         13:92:b0:d1:a9:c2:04:0b:93:a1:2d:27:5c:bd:9f:16:80:50:
         1b:19:17:cb:e2:48:fe:5e:45:81:5f:f6:de:95:f7:dc:47:c9:
         ef:15:09:97:d6:72:46:0a:e4:df:9b:2f:fd:ef:1e:f3:7e:50:
         06:55:ab:06:d4:ea:ea:4c:22:0b:b5:f7:7b:43:37:f7:c3:c0:
         0b:89:ed:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org