Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3232332e302f32342d3234203d3e203439393939.roa
File:                     39332e3132372e3232332e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          mwv40UDWQ8HDpMNBI4TQQ4RyOEGyHEFgkF6CzSAnrWA=
Subject key identifier:   7C:18:50:04:C2:A6:5B:F0:A1:21:63:4A:D8:09:FE:EE:AF:46:4D:24
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       5DBA765B7BE74F4A2E36A393215D687238F37632
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3232332e302f32342d3234203d3e203439393939.roa
Signing time:             Tue 31 Jan 2023 10:24:49 +0000
ROA not before:           Tue 31 Jan 2023 10:19:49 +0000
ROA not after:            Tue 30 Jan 2024 10:24:49 +0000
asID:                     49999
IP address blocks:        93.127.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ba:76:5b:7b:e7:4f:4a:2e:36:a3:93:21:5d:68:72:38:f3:76:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Jan 31 10:19:49 2023 GMT
            Not After : Jan 30 10:24:49 2024 GMT
        Subject: CN=7C185004C2A65BF0A121634AD809FEEEAF464D24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b9:9f:3a:4c:f1:83:6c:9e:ef:0f:4f:fb:cc:
                    9f:d3:6d:79:04:e2:83:06:05:18:07:f7:15:5e:a6:
                    12:e9:d1:a8:80:82:5c:7f:5c:a8:52:2d:aa:7c:ea:
                    75:83:c2:89:42:d5:04:27:ef:b8:b4:b5:66:ee:e8:
                    ac:a2:7b:4e:a3:fb:36:40:39:af:0a:ba:a7:a2:f8:
                    d1:8d:b9:49:95:c0:ea:bb:6a:c0:db:00:e4:4d:ad:
                    17:44:c8:9e:49:28:50:56:36:2f:a3:2d:d2:0d:9b:
                    2c:89:cf:97:79:3c:f6:69:e5:c1:af:84:d2:c9:28:
                    ec:83:21:1e:64:d3:8c:77:89:c5:7b:d3:02:11:1e:
                    7e:38:44:d1:8e:82:73:07:5a:3c:37:a5:c0:f4:cb:
                    97:6b:38:9c:48:7e:b4:db:af:cd:06:60:fd:48:c5:
                    e6:f5:2c:96:d6:9c:a5:10:29:fb:f3:61:5c:c7:09:
                    9c:97:32:c1:23:16:ba:a4:65:23:58:5f:77:2e:38:
                    cc:86:87:cb:53:01:68:52:b9:92:db:50:63:a7:c8:
                    62:ff:4b:8a:90:f7:e3:45:33:a1:75:5b:e0:00:93:
                    b3:fb:61:a6:3f:25:a4:d8:2b:1e:02:d4:b1:80:e0:
                    58:b9:bd:aa:82:9b:f0:6c:7a:8a:0b:5a:df:c1:15:
                    ee:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:18:50:04:C2:A6:5B:F0:A1:21:63:4A:D8:09:FE:EE:AF:46:4D:24
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/39332e3132372e3232332e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:31:8a:3f:dc:83:8c:be:0b:ad:51:36:55:6a:54:63:68:eb:
         9f:1c:f2:21:a4:89:c3:97:04:86:5f:ed:93:f5:d1:ad:00:b0:
         18:a0:79:53:33:71:b5:2b:e8:f0:b2:91:18:b6:bf:7c:42:c8:
         9e:c4:8c:45:2d:b0:42:f5:b1:08:5c:6f:40:3c:74:4f:19:06:
         35:85:ce:9a:db:f5:66:e4:2e:21:b0:ec:a3:ae:34:02:d8:33:
         2a:ed:3f:6a:18:7d:f7:e0:11:18:5d:4e:31:7d:45:04:30:f6:
         41:0c:60:12:44:74:91:28:43:a1:d5:5e:0e:13:6f:ea:7d:b0:
         55:2e:f5:37:72:17:e8:bd:7b:c1:ab:ae:0f:d4:0e:75:a6:9c:
         6e:ab:4c:ca:07:3f:8b:d7:bf:85:70:1a:ae:b6:55:62:b7:66:
         f0:ae:61:f0:d7:68:ea:23:ea:d1:69:ba:e3:e2:ba:a6:29:99:
         f5:55:5e:69:5f:1b:0c:2e:54:8f:07:44:be:28:3f:3c:c2:a7:
         db:0d:b9:a7:8f:40:2c:33:1c:9c:43:db:3e:3b:93:f1:e9:4b:
         e4:6c:d7:67:83:4c:10:86:4e:a0:d7:08:70:5f:43:d7:aa:98:
         41:3a:1b:67:7a:8a:e1:ab:e7:5a:75:37:08:c2:77:46:b1:37:
         a7:20:56:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org