Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3232302e302f32342d3234203d3e203630373231.roa
File:                     39332e3132372e3232302e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          EMy0UsA5O0JPlqYqccwCr1lVeoLtiygxCKC3FX1YWc4=
Subject key identifier:   52:CF:4D:F1:D3:88:A5:61:1B:7D:1F:7C:6B:82:82:ED:17:95:D9:96
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       4CEC23F2C7C7F3362E8890CF444EF3DAA55CBB
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3232302e302f32342d3234203d3e203630373231.roa
Signing time:             Thu 26 Jan 2023 19:47:43 +0000
ROA not before:           Thu 26 Jan 2023 19:42:43 +0000
ROA not after:            Thu 25 Jan 2024 19:47:43 +0000
asID:                     60721
IP address blocks:        93.127.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ec:23:f2:c7:c7:f3:36:2e:88:90:cf:44:4e:f3:da:a5:5c:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Jan 26 19:42:43 2023 GMT
            Not After : Jan 25 19:47:43 2024 GMT
        Subject: CN=52CF4DF1D388A5611B7D1F7C6B8282ED1795D996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:82:4a:fb:60:94:33:66:9e:01:18:cb:85:46:
                    e3:1f:1a:f4:d5:4c:c5:5a:8d:07:4c:14:79:80:ce:
                    98:e9:a5:ae:fb:ee:02:02:36:07:e2:12:69:57:fb:
                    27:a5:b6:f0:58:e1:81:07:43:b7:0d:58:1c:dc:a2:
                    a8:16:09:c9:08:79:34:9b:ae:81:39:99:17:c8:9f:
                    83:bc:3e:b6:a1:58:2c:72:8b:46:3e:35:05:64:43:
                    19:61:1c:88:1f:28:45:1f:f7:0b:8c:37:ad:df:86:
                    da:2a:26:e6:f5:29:20:70:fa:1d:8e:63:7f:fe:b7:
                    da:20:32:eb:89:ff:e3:32:60:ed:34:ec:89:42:ae:
                    6f:b0:d4:ea:80:28:fc:2d:15:85:d2:1a:89:a8:82:
                    ff:23:c8:8e:17:0a:81:f6:d2:f9:dc:71:e5:98:c5:
                    85:3d:f3:02:76:b3:bb:88:dc:0e:98:ca:d3:5d:02:
                    52:25:f0:6f:18:9f:89:a0:e5:48:73:a9:74:dd:df:
                    d8:be:90:48:4f:9a:be:66:2c:91:3e:45:16:99:ea:
                    fc:1d:98:b9:52:37:83:b8:91:1b:f1:b2:76:8c:b8:
                    23:27:1d:14:31:7c:8d:db:ac:94:97:df:25:f0:17:
                    1e:d7:26:ef:6d:f2:22:2c:d2:5e:6a:ae:71:67:c2:
                    04:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:CF:4D:F1:D3:88:A5:61:1B:7D:1F:7C:6B:82:82:ED:17:95:D9:96
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3232302e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:19:f7:94:36:83:b5:95:64:25:84:3e:c1:0b:80:27:dd:30:
         a1:97:81:44:0e:f8:ac:86:d5:ba:e6:75:b0:38:9b:d9:40:34:
         2c:ca:dc:a8:4f:dc:4b:fd:2e:8f:c1:d1:40:bb:15:52:7a:ba:
         60:55:0a:9e:07:7d:96:86:80:82:71:fe:cd:11:f7:b4:42:80:
         07:92:12:0f:c6:c1:02:54:07:ea:47:28:19:88:20:c8:ca:32:
         ae:9f:cb:4d:39:8e:71:df:27:ec:17:93:ba:aa:da:8e:e6:89:
         1a:8b:55:9f:65:a4:94:e6:74:fd:a3:89:e7:90:7c:68:49:84:
         d2:b0:2f:a1:7f:f1:cc:7e:43:83:85:85:b8:04:60:79:13:72:
         03:6d:2c:bb:82:12:2d:76:7c:da:77:46:21:a7:de:1f:ca:79:
         f7:b0:a6:48:72:26:61:aa:39:09:8e:94:7e:27:a9:5f:79:e2:
         b7:29:e8:9f:3b:5f:10:52:ef:a3:c4:a1:42:f7:a5:a5:a2:0c:
         a1:fa:c9:8c:4f:70:ff:aa:97:f1:8a:04:cb:3d:54:92:c3:cb:
         0f:d6:88:7a:06:8a:88:c8:a1:17:1b:7f:6b:6c:47:ac:16:17:
         1e:ae:01:37:b2:0d:63:6f:57:a7:7c:7d:f3:df:bb:85:32:45:
         5f:bf:b8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org