Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/75704d48-5a15-4128-af8d-fc769c5c25a1/4/323630323a666162383a6666653a3a2f34382d3438203d3e20313939313737.roa
File:                     323630323a666162383a6666653a3a2f34382d3438203d3e20313939313737.roa (raw, json)
Hash identifier:          dIMNLThCvJ8Iaog232NlojN2Ld+HR344xa4gJDrZMEU=
Subject key identifier:   59:74:CD:17:23:9E:6F:50:BE:4A:D4:5A:4C:3A:19:F0:B9:0C:11:BA
Certificate issuer:       /CN=1822fe9c8a0d2b8ebcb09d2b5bf7a33a8d8cd035f17f496a83
Certificate serial:       5B7879E45AABD12BFEA11FDC260948727FAA1BAF
Authority key identifier: 42:6D:91:E7:ED:4E:D7:1A:64:D0:AB:27:FA:C8:A4:C5:68:7B:40:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a0d2b8ebcb09d2b5bf7a33a8d8cd035f17f496a83.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/75704d48-5a15-4128-af8d-fc769c5c25a1/4/323630323a666162383a6666653a3a2f34382d3438203d3e20313939313737.roa
Signing time:             Wed 12 Apr 2023 01:10:52 +0000
ROA not before:           Wed 12 Apr 2023 01:05:52 +0000
ROA not after:            Wed 10 Apr 2024 01:10:52 +0000
asID:                     199177
IP address blocks:        2602:fab8:ffe::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:78:79:e4:5a:ab:d1:2b:fe:a1:1f:dc:26:09:48:72:7f:aa:1b:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1822fe9c8a0d2b8ebcb09d2b5bf7a33a8d8cd035f17f496a83
        Validity
            Not Before: Apr 12 01:05:52 2023 GMT
            Not After : Apr 10 01:10:52 2024 GMT
        Subject: CN=5974CD17239E6F50BE4AD45A4C3A19F0B90C11BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e7:7f:df:df:75:6a:aa:6d:93:2d:02:c7:13:
                    a2:01:58:8c:12:98:a5:25:43:ca:2b:cf:40:9f:82:
                    c3:a5:14:fd:60:cc:40:96:ce:91:4a:30:41:54:e7:
                    b5:5e:db:f6:ab:8a:4a:70:82:a8:79:11:93:c8:58:
                    25:e3:cb:59:4e:fe:ac:59:ba:4a:d5:11:3d:ac:ec:
                    1d:64:fd:e9:03:3f:42:0c:78:b3:18:e5:5f:09:7f:
                    47:b8:f5:14:84:70:91:eb:3c:7c:37:bb:4b:f5:6d:
                    b3:77:f8:a3:0a:bd:7b:83:7f:4e:04:41:54:de:11:
                    72:ad:6f:ed:9b:b5:d6:f6:85:26:8a:b3:21:95:3e:
                    1d:46:a4:8b:7e:65:e0:7e:53:b4:45:ba:57:33:22:
                    4d:c7:80:e5:b4:3f:4a:ad:bd:61:6b:ad:97:62:ad:
                    9a:1c:3d:1a:5b:9f:05:d8:d9:91:ef:11:ca:a4:b7:
                    40:35:d0:35:23:70:b6:64:7a:c3:a4:ab:53:c1:de:
                    0c:7f:de:4f:95:8d:8d:66:62:9a:07:c6:83:19:25:
                    22:80:b5:5f:3b:ad:2c:b3:c0:6f:3c:12:c2:35:93:
                    30:33:1c:92:6e:0c:59:6c:5f:d6:10:c2:47:ec:37:
                    b4:69:8b:18:18:ca:b2:44:07:c6:cd:0b:38:0c:4b:
                    ae:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:74:CD:17:23:9E:6F:50:BE:4A:D4:5A:4C:3A:19:F0:B9:0C:11:BA
            X509v3 Authority Key Identifier:
                keyid:42:6D:91:E7:ED:4E:D7:1A:64:D0:AB:27:FA:C8:A4:C5:68:7B:40:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/75704d48-5a15-4128-af8d-fc769c5c25a1/4/426D91E7ED4ED71A64D0AB27FAC8A4C5687B40BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a0d2b8ebcb09d2b5bf7a33a8d8cd035f17f496a83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/75704d48-5a15-4128-af8d-fc769c5c25a1/4/323630323a666162383a6666653a3a2f34382d3438203d3e20313939313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fab8:ffe::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:be:8e:bf:86:cf:47:04:d4:f5:b6:56:0c:4d:67:ef:db:1f:
         c8:35:41:ce:6a:fa:a1:44:97:48:1f:67:22:29:ee:91:bf:ac:
         e5:33:9b:24:d0:d5:c3:04:b7:38:97:95:36:18:dd:d4:0c:7c:
         9c:46:91:c8:4a:16:6a:6c:75:25:a0:72:c7:b6:9e:ea:d4:fc:
         fd:36:71:e1:af:01:db:dc:dd:89:16:7e:92:f3:4e:5a:a5:10:
         25:81:7a:66:92:e6:6e:85:c0:1b:76:76:33:f9:0d:82:ca:0d:
         df:bb:51:9c:fe:a8:94:c3:f9:56:90:b1:80:87:a2:61:73:5c:
         80:45:71:3c:bf:56:02:14:44:89:c8:63:e0:9c:05:29:58:f2:
         12:c1:6c:5f:0c:2a:ab:ee:8c:72:8b:37:bc:d7:ca:cf:3f:c4:
         2e:5e:2e:f2:5c:be:13:4f:bc:f0:b7:c1:56:20:18:4e:02:27:
         47:1d:6b:93:3f:b2:0b:a7:3f:13:2c:c0:e6:50:0e:55:a6:d1:
         a4:f5:1a:16:fc:f2:df:c2:cc:0b:6d:6e:b7:1b:02:1b:66:5d:
         8d:d6:27:5b:54:93:29:06:e9:ae:0c:6b:19:cc:4c:74:60:09:
         56:8f:19:29:15:de:65:60:a3:da:8c:41:ff:8c:b3:f7:a1:9b:
         41:a2:11:c9
-----BEGIN CERTIFICATE-----
MIIF2DCCBMCgAwIBAgIUW3h55Fqr0Sv+oR/cJglIcn+qG68wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMTgyMmZlOWM4YTBkMmI4ZWJjYjA5ZDJiNWJmN2EzM2E4
ZDhjZDAzNWYxN2Y0OTZhODMwHhcNMjMwNDEyMDEwNTUyWhcNMjQwNDEwMDExMDUy
WjAzMTEwLwYDVQQDEyg1OTc0Q0QxNzIzOUU2RjUwQkU0QUQ0NUE0QzNBMTlGMEI5
MEMxMUJBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOd/3991aqpt
ky0CxxOiAViMEpilJUPKK89An4LDpRT9YMxAls6RSjBBVOe1Xtv2q4pKcIKoeRGT
yFgl48tZTv6sWbpK1RE9rOwdZP3pAz9CDHizGOVfCX9HuPUUhHCR6zx8N7tL9W2z
d/ijCr17g39OBEFU3hFyrW/tm7XW9oUmirMhlT4dRqSLfmXgflO0RbpXMyJNx4Dl
tD9Krb1ha62XYq2aHD0aW58F2NmR7xHKpLdANdA1I3C2ZHrDpKtTwd4Mf95PlY2N
ZmKaB8aDGSUigLVfO60ss8BvPBLCNZMwMxySbgxZbF/WEMJH7De0aYsYGMqyRAfG
zQs4DEuuyQIDAQABo4IC2DCCAtQwHQYDVR0OBBYEFFl0zRcjnm9QvkrUWkw6GfC5
DBG6MB8GA1UdIwQYMBaAFEJtkeftTtcaZNCrJ/rIpMVoe0C7MA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzc1NzA0ZDQ4LTVhMTUtNDEyOC1hZjhk
LWZjNzY5YzVjMjVhMS80LzQyNkQ5MUU3RUQ0RUQ3MUE2NEQwQUIyN0ZBQzhBNEM1
Njg3QjQwQkIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2Mt
NGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81NTYzZTJmOS00ZDliLTQwYzMtYWZhMi1j
ZTcwNDVmZmQyM2EvMTgyMmZlOWM4YTBkMmI4ZWJjYjA5ZDJiNWJmN2EzM2E4ZDhj
ZDAzNWYxN2Y0OTZhODMuY2VyMIG1BggrBgEFBQcBCwSBqDCBpTCBogYIKwYBBQUH
MAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
Lzc1NzA0ZDQ4LTVhMTUtNDEyOC1hZjhkLWZjNzY5YzVjMjVhMS80LzMyMzYzMDMy
M2E2NjYxNjIzODNhNjY2NjY1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEzOTM5
MzEzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAJgL6uA/+MA0GCSqGSIb3DQEBCwUAA4IBAQCfvo6/
hs9HBNT1tlYMTWfv2x/INUHOavqhRJdIH2ciKe6Rv6zlM5sk0NXDBLc4l5U2GN3U
DHycRpHIShZqbHUloHLHtp7q1Pz9NnHhrwHb3N2JFn6S805apRAlgXpmkuZuhcAb
dnYz+Q2Cyg3fu1Gc/qiUw/lWkLGAh6Jhc1yARXE8v1YCFESJyGPgnAUpWPISwWxf
DCqr7oxyize818rPP8QuXi7yXL4TT7zwt8FWIBhOAidHHWuTP7ILpz8TLMDmUA5V
ptGk9RoW/PLfwswLbW63GwIbZl2N1idbVJMpBumuDGsZzEx0YAlWjxkpFd5lYKPa
jEH/jLP3oZtBohHJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:07 2024 by rpki-client on console-ams.rpki-client.org