Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/326130373a353463303a623030623a3a2f34382d3438203d3e20313937393139.roa
File:                     326130373a353463303a623030623a3a2f34382d3438203d3e20313937393139.roa (raw, json)
Hash identifier:          durebI5Pp24BTslHTPoD0kddG2DjSFWyQwuhAMMhyhI=
Subject key identifier:   5E:4D:37:B6:74:CF:EF:52:EC:EB:A3:D6:1C:C5:86:5B:5F:71:03:8A
Certificate issuer:       /CN=A6EAAC4901429B15740ABF1D9A54BFB181C6F538
Certificate serial:       0C25F333F62B603F5E5C4CD78C4363DD0E3DB183
Authority key identifier: A6:EA:AC:49:01:42:9B:15:74:0A:BF:1D:9A:54:BF:B1:81:C6:F5:38
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A6EAAC4901429B15740ABF1D9A54BFB181C6F538.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/326130373a353463303a623030623a3a2f34382d3438203d3e20313937393139.roa
Signing time:             Mon 19 Feb 2024 13:26:16 +0000
ROA not before:           Mon 19 Feb 2024 13:21:16 +0000
ROA not after:            Mon 17 Feb 2025 13:26:16 +0000
asID:                     197919
IP address blocks:        2a07:54c0:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:25:f3:33:f6:2b:60:3f:5e:5c:4c:d7:8c:43:63:dd:0e:3d:b1:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6EAAC4901429B15740ABF1D9A54BFB181C6F538
        Validity
            Not Before: Feb 19 13:21:16 2024 GMT
            Not After : Feb 17 13:26:16 2025 GMT
        Subject: CN=5E4D37B674CFEF52ECEBA3D61CC5865B5F71038A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0f:42:e2:81:bf:c4:87:15:b3:f7:52:8a:16:
                    92:3e:d0:09:6f:a1:52:45:2c:d9:72:b4:bc:19:f4:
                    91:42:cc:38:78:ae:27:6e:84:d0:7c:6a:52:03:d4:
                    5c:98:0b:d7:7d:51:b8:72:41:ec:ed:cc:47:6a:f1:
                    f3:42:10:57:7c:67:c4:57:7a:66:e3:20:93:94:ce:
                    01:c5:6b:5e:e9:49:32:f9:e2:2d:32:1b:69:04:6a:
                    ae:a4:57:50:ca:f4:7c:55:cd:5e:05:c3:5a:8a:b1:
                    4a:af:d2:c9:3b:55:bf:be:94:9b:b3:59:8a:09:d2:
                    0d:c8:86:a1:4a:83:ca:0f:be:41:a4:47:0c:54:b6:
                    24:fe:27:ec:8d:d3:dc:a6:d2:fc:e8:8d:9b:a2:03:
                    f7:9b:11:0e:1b:10:5e:75:ef:a2:63:80:d3:d9:cf:
                    5c:b3:1e:de:ac:87:ab:69:40:d3:8a:95:fb:27:ff:
                    cb:79:21:a4:40:f8:76:62:fa:a5:d9:1e:2c:b4:48:
                    5a:6f:3e:be:ed:27:04:fa:c8:04:64:ac:91:bd:39:
                    95:ae:bc:df:bb:9c:be:c3:b8:a4:ba:f8:55:ee:c1:
                    57:c2:b3:f3:7d:62:6e:63:b0:21:0e:5e:43:6a:24:
                    ea:5b:5d:ae:6b:e6:ad:fc:52:9a:a6:55:d1:7c:a3:
                    23:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:4D:37:B6:74:CF:EF:52:EC:EB:A3:D6:1C:C5:86:5B:5F:71:03:8A
            X509v3 Authority Key Identifier:
                keyid:A6:EA:AC:49:01:42:9B:15:74:0A:BF:1D:9A:54:BF:B1:81:C6:F5:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/A6EAAC4901429B15740ABF1D9A54BFB181C6F538.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A6EAAC4901429B15740ABF1D9A54BFB181C6F538.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/326130373a353463303a623030623a3a2f34382d3438203d3e20313937393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:2d:fb:18:51:25:27:d0:2a:88:ac:f6:41:a4:c4:22:6d:98:
         24:2f:db:4a:4d:da:67:26:ac:73:c6:d6:d4:0f:8c:02:89:13:
         70:53:73:b5:f5:77:89:cd:55:3c:c8:32:e0:de:bc:03:a5:04:
         15:85:99:1d:fc:ae:61:a0:34:f7:05:92:e5:27:05:92:0a:56:
         70:52:13:f0:34:fc:ea:ea:ca:c4:23:e6:97:22:91:fe:45:47:
         91:e5:20:63:44:eb:1f:89:fb:4a:3c:fd:e5:d2:58:ae:d9:a1:
         9e:9e:41:b5:a7:1d:09:60:db:b0:52:55:33:5c:cf:fb:51:30:
         3d:97:7f:1a:01:fd:5b:cd:5f:f0:c8:e4:ba:10:a3:d5:a8:22:
         64:65:a6:16:88:63:dc:63:13:0d:41:cf:b3:67:52:34:9b:b9:
         f1:ec:f3:fd:5a:f5:d2:5a:36:f3:80:ad:d0:e2:84:fe:3c:70:
         fe:b2:cb:0c:9e:46:29:9f:d3:45:87:23:10:75:f1:f5:3f:53:
         4a:49:a3:c4:df:1a:27:c9:56:b4:13:88:47:09:bc:69:05:76:
         70:0a:4d:7e:e3:90:1c:20:3b:36:ed:72:4e:42:c0:23:5a:b2:
         14:cd:b6:d9:2c:dc:05:ad:a2:96:00:a9:2c:0c:06:ac:e6:d6:
         75:7d:e7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 14:32:47 2024 by rpki-client on console-ams.rpki-client.org