Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231382e302f32342d3234203d3e203630373231.roa
File:                     39332e3132372e3231382e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          6JWhKiSuHARZ6Ms0hlxmrdiXveTNqIJQ1Wg+p227KX0=
Subject key identifier:   DC:9D:D1:FE:A3:03:3F:92:40:DB:B6:36:1E:5B:AB:FB:ED:2B:9E:49
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       7AA3C239A589897481842068EBC904F2E8C16DB3
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231382e302f32342d3234203d3e203630373231.roa
Signing time:             Fri 20 Jan 2023 06:26:14 +0000
ROA not before:           Fri 20 Jan 2023 06:21:14 +0000
ROA not after:            Fri 19 Jan 2024 06:26:14 +0000
asID:                     60721
IP address blocks:        93.127.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a3:c2:39:a5:89:89:74:81:84:20:68:eb:c9:04:f2:e8:c1:6d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Jan 20 06:21:14 2023 GMT
            Not After : Jan 19 06:26:14 2024 GMT
        Subject: CN=DC9DD1FEA3033F9240DBB6361E5BABFBED2B9E49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5f:23:2a:4a:04:54:3c:47:8b:19:08:39:8d:
                    5a:da:85:bf:ad:83:42:b7:8b:b5:28:67:c0:91:6e:
                    99:c1:83:dc:12:91:32:ce:e4:59:8c:76:09:7d:96:
                    ec:cb:17:59:c4:63:cf:02:61:07:26:83:eb:3a:28:
                    5c:33:8f:43:6e:3d:7e:86:8c:2c:32:ef:20:c1:4b:
                    7c:d2:c8:2e:ff:55:ff:83:2f:be:f9:8e:c5:61:fa:
                    5e:ac:e2:f6:da:ba:b9:d7:19:ef:8d:c5:ca:c7:eb:
                    ae:0f:27:af:a7:21:1b:13:7b:45:94:58:53:b9:da:
                    9e:10:b7:87:67:91:d1:66:2c:3a:b4:0c:e5:04:28:
                    5e:20:ff:57:6a:ff:1d:ae:6f:7c:f5:b4:34:d1:2f:
                    15:5b:94:f6:6e:ca:92:a9:39:6c:51:16:52:3e:8a:
                    6c:e2:04:f6:f2:a7:48:e3:0b:f7:2f:d1:dc:9c:ca:
                    55:a0:8f:e4:9c:8e:53:a0:fa:0c:36:b1:f7:4a:8b:
                    e2:bf:18:87:48:96:4e:0b:37:f6:cb:33:2b:f3:ba:
                    82:9b:9a:e7:dc:b6:7f:93:43:05:95:67:ae:41:bd:
                    77:73:1f:06:52:e1:a9:b9:25:d6:aa:46:bd:9b:5f:
                    53:34:59:14:25:7d:8d:80:3c:e4:a0:a3:7d:5f:df:
                    a5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9D:D1:FE:A3:03:3F:92:40:DB:B6:36:1E:5B:AB:FB:ED:2B:9E:49
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3231382e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:d3:c3:c6:2d:9c:85:00:d5:73:36:51:4e:a7:44:29:d9:32:
         ac:1c:a8:04:6d:04:48:ae:82:66:66:d1:e9:a0:d6:9f:16:46:
         cc:ff:24:ce:75:99:d3:d9:8a:6b:f5:ae:82:2d:57:19:f5:be:
         d5:9f:bf:dc:3b:22:84:fe:48:7e:80:f9:a2:28:89:76:d6:69:
         4e:df:8f:79:49:54:28:0f:fe:74:18:4a:df:ea:21:36:16:2c:
         e4:61:94:9f:24:4f:ed:a3:30:89:c1:3a:bb:2d:47:a4:37:6f:
         d2:67:d6:db:25:f4:53:58:fb:df:b3:d9:6f:6f:9c:f4:28:16:
         6a:00:c9:64:de:96:09:8b:41:f8:bf:b7:8a:60:b5:15:c4:cd:
         9a:19:e2:59:6b:cd:ba:ee:24:33:e6:64:af:16:93:1e:77:55:
         3a:b5:c2:99:1f:b3:3d:0d:37:a2:1d:26:47:9a:be:92:ce:2b:
         ff:dc:33:be:ea:4c:d7:b1:10:32:3f:64:01:80:4b:a5:11:20:
         38:07:a2:c8:a1:0b:0f:33:92:f1:8d:e4:00:b6:de:38:d5:68:
         35:28:6c:0a:93:08:09:4d:5f:c1:6b:3f:67:9f:4d:4b:7c:14:
         c4:3a:72:74:4e:33:53:33:0e:a7:8c:08:f3:a4:46:e5:ed:d0:
         05:1b:fe:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org