Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231302e302f32342d3234203d3e203531353539.roa
File:                     39332e3132372e3231302e302f32342d3234203d3e203531353539.roa (raw, json)
Hash identifier:          n51A1rkzOTSrGtLlEBCa3paAdSnors24m04MxU629X8=
Subject key identifier:   EB:1B:59:0D:18:89:31:1F:66:7C:80:58:A3:25:3B:56:20:86:BE:E7
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       202036739D959CC7C8E9A7D0067ED6E178E640D8
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231302e302f32342d3234203d3e203531353539.roa
Signing time:             Thu 06 Apr 2023 23:04:06 +0000
ROA not before:           Thu 06 Apr 2023 22:59:06 +0000
ROA not after:            Thu 04 Apr 2024 23:04:06 +0000
asID:                     51559
IP address blocks:        93.127.210.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:20:36:73:9d:95:9c:c7:c8:e9:a7:d0:06:7e:d6:e1:78:e6:40:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Apr  6 22:59:06 2023 GMT
            Not After : Apr  4 23:04:06 2024 GMT
        Subject: CN=EB1B590D1889311F667C8058A3253B562086BEE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0a:69:2a:98:b7:5a:4d:6d:5f:e9:19:9c:86:
                    de:7c:02:09:2e:d4:4c:4f:bc:73:26:dc:1b:47:20:
                    e4:d7:d7:e3:b2:6c:08:3c:83:a4:4c:cf:13:6f:92:
                    d0:42:2f:5d:dd:e7:9c:b1:05:52:d5:e8:92:0d:66:
                    88:c7:4e:82:c4:cb:1e:79:d3:d7:5a:b5:82:e7:83:
                    72:19:dd:a8:d9:18:cd:71:f1:5f:cb:af:31:9d:15:
                    70:0b:6d:6d:bb:03:a8:3c:5d:e0:70:13:32:73:9c:
                    b7:a0:bd:f4:05:82:8d:23:7d:bf:f6:63:f8:33:35:
                    36:bd:7a:c1:a8:c5:83:10:13:ff:05:fc:95:74:ed:
                    17:74:6a:e9:85:f2:ba:ee:8b:3d:92:0e:60:bd:b9:
                    26:3d:b7:65:b6:b5:8f:b3:1c:22:6d:6f:dd:75:3e:
                    d0:80:a4:7a:55:f8:e7:83:eb:dd:f7:7b:e6:f9:bd:
                    95:6b:41:c0:31:fa:2a:92:a1:b9:56:d8:e1:38:f4:
                    9b:be:08:8d:da:16:3c:d9:5d:28:c8:ee:49:99:9f:
                    65:7b:02:5f:31:27:50:4f:bb:df:d7:f2:52:73:93:
                    ae:8d:f4:28:3a:e5:04:c3:46:c5:68:73:6b:8d:55:
                    50:58:d0:1f:14:1f:1b:56:69:e4:a7:15:27:6e:66:
                    22:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1B:59:0D:18:89:31:1F:66:7C:80:58:A3:25:3B:56:20:86:BE:E7
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231302e302f32342d3234203d3e203531353539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:31:39:6d:0f:d3:28:6d:38:03:15:82:8e:a3:80:43:5e:5a:
         f2:8b:d8:d1:b6:9b:e8:c1:27:af:4a:a7:b0:da:43:29:6a:00:
         6b:ca:c7:7e:5b:ba:4f:8f:be:1f:9d:b0:fe:7c:0a:6f:ac:ac:
         f9:45:07:c6:5a:a6:4d:43:36:9b:19:28:0a:49:00:7d:f8:bb:
         fb:45:c1:c1:7c:25:11:c4:b7:c4:c1:f7:e2:b2:67:34:df:ad:
         0c:55:42:5c:aa:e7:8a:2f:9b:90:54:61:28:25:e6:c4:6c:16:
         d2:15:45:9f:0e:69:29:3b:f0:14:1d:1e:91:49:96:d0:d1:f1:
         9c:c9:d5:bb:13:00:9f:b4:d6:eb:71:38:1e:a9:da:cd:9f:81:
         48:1d:4c:5c:a8:52:f4:29:13:5d:45:0d:1b:06:92:6c:1d:7a:
         46:c9:73:d2:0d:c2:32:93:f3:4d:a1:d7:ee:5f:81:f5:a8:cf:
         ad:99:07:43:73:05:a1:dd:43:fb:31:0f:b7:3e:e2:30:d7:10:
         ff:de:7a:1f:9f:fe:d2:0c:77:9d:bf:4f:10:3b:f9:aa:e2:cd:
         5a:b9:b7:eb:46:00:c8:fc:3d:58:f0:ac:fe:2c:98:aa:56:84:
         f6:cd:45:e8:e3:cf:f5:81:c3:71:2d:23:47:b5:f6:9e:9d:62:
         af:ec:e9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org