Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/75704d48-5a15-4128-af8d-fc769c5c25a1/4/323630323a666162383a6666653a3a2f34382d3438203d3e20323035343231.roa
File:                     323630323a666162383a6666653a3a2f34382d3438203d3e20323035343231.roa (raw, json)
Hash identifier:          O3guFlREXJCTGmd7rG2IqOdSDy7o9Gtw3Z3a4bgI59A=
Subject key identifier:   A0:4B:53:D8:93:F0:FD:00:B9:7C:D7:5C:D7:35:D6:07:15:40:9B:57
Certificate issuer:       /CN=1822fe9c8a0d2b8ebcb09d2b5bf7a33a8d8cd035f17f496a83
Certificate serial:       0FFDE9541A46D8E3C9E8829319E75E271055DD54
Authority key identifier: 42:6D:91:E7:ED:4E:D7:1A:64:D0:AB:27:FA:C8:A4:C5:68:7B:40:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a0d2b8ebcb09d2b5bf7a33a8d8cd035f17f496a83.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/75704d48-5a15-4128-af8d-fc769c5c25a1/4/323630323a666162383a6666653a3a2f34382d3438203d3e20323035343231.roa
Signing time:             Sun 29 Jan 2023 16:05:42 +0000
ROA not before:           Sun 29 Jan 2023 16:00:42 +0000
ROA not after:            Sun 28 Jan 2024 16:05:42 +0000
asID:                     205421
IP address blocks:        2602:fab8:ffe::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:fd:e9:54:1a:46:d8:e3:c9:e8:82:93:19:e7:5e:27:10:55:dd:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1822fe9c8a0d2b8ebcb09d2b5bf7a33a8d8cd035f17f496a83
        Validity
            Not Before: Jan 29 16:00:42 2023 GMT
            Not After : Jan 28 16:05:42 2024 GMT
        Subject: CN=A04B53D893F0FD00B97CD75CD735D60715409B57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f1:e3:6c:d1:36:00:88:37:40:71:72:bc:7c:
                    72:9e:0e:cf:fa:9c:7e:77:93:ae:fa:f8:ca:7e:19:
                    59:f3:d2:55:e4:4a:ae:2b:09:ff:60:e9:e8:f8:97:
                    06:3b:ee:cb:89:f8:49:59:a7:f7:69:92:b4:f8:25:
                    26:c5:fe:28:fb:77:6b:b2:b5:a8:4b:41:68:af:0a:
                    da:98:6e:26:41:d0:fd:43:9f:b9:ee:f2:10:f8:ff:
                    f7:50:09:5f:7b:1f:bc:30:70:41:93:8b:69:62:3d:
                    91:30:7c:37:31:77:ec:e3:4b:9b:38:ee:53:43:0a:
                    94:d9:5b:83:4a:16:93:9f:ed:c5:f3:8c:30:0c:86:
                    c2:aa:81:0e:78:88:29:81:fe:b0:ca:3a:0d:c6:bd:
                    0b:2e:4e:5b:60:88:42:9f:11:6c:15:71:d2:15:9b:
                    d8:b2:50:93:cc:28:98:1f:c3:44:f8:af:ae:12:88:
                    9f:74:b1:f4:10:03:e6:74:25:8a:6a:37:d1:ec:a2:
                    bc:8b:88:76:b5:dd:f7:79:c5:95:50:eb:30:50:31:
                    0d:16:7c:44:62:28:44:3c:a4:13:26:97:ed:9d:0b:
                    e9:f0:8a:d2:24:43:39:40:b5:3b:d1:6b:57:02:61:
                    f7:7b:4e:1b:ce:3f:0b:68:e0:f0:d0:aa:1b:11:d3:
                    10:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4B:53:D8:93:F0:FD:00:B9:7C:D7:5C:D7:35:D6:07:15:40:9B:57
            X509v3 Authority Key Identifier:
                keyid:42:6D:91:E7:ED:4E:D7:1A:64:D0:AB:27:FA:C8:A4:C5:68:7B:40:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/75704d48-5a15-4128-af8d-fc769c5c25a1/4/426D91E7ED4ED71A64D0AB27FAC8A4C5687B40BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a0d2b8ebcb09d2b5bf7a33a8d8cd035f17f496a83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/75704d48-5a15-4128-af8d-fc769c5c25a1/4/323630323a666162383a6666653a3a2f34382d3438203d3e20323035343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fab8:ffe::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:26:f8:0d:4f:66:42:da:92:c3:71:de:e9:50:58:2a:6b:d3:
         67:f6:c2:89:0b:67:64:be:f5:94:72:68:d6:9f:34:39:0d:d0:
         7d:e5:cd:7e:19:7e:fc:bc:93:9b:46:ac:da:64:8b:c7:56:7b:
         23:8c:c7:27:bb:d7:60:3f:21:a8:02:3e:2b:0a:8d:3d:2f:07:
         28:f4:b0:65:1a:1d:24:ed:70:36:aa:ac:59:c1:09:ff:33:56:
         22:6d:ec:54:42:65:e6:bd:f3:65:a8:df:c0:71:b5:ad:13:9e:
         3c:be:8e:c8:43:a7:eb:d0:33:ed:01:bc:70:e0:35:95:ec:bc:
         dd:85:fc:55:21:af:0a:de:fb:ce:6e:ee:d9:ec:42:e7:7c:8d:
         9a:3f:fb:de:97:c2:52:c9:a5:ad:8d:b7:5e:c3:94:5b:8d:7a:
         bb:e4:af:79:1b:ba:8f:a4:9a:cd:00:bc:c3:0b:13:80:90:52:
         c7:bb:f6:18:8d:32:d5:76:73:e2:9b:ad:d9:26:38:8c:d2:4e:
         7f:85:ec:11:6e:f3:03:5c:3c:50:e2:2e:91:07:9c:45:d0:95:
         f2:3f:a7:57:d0:2d:75:93:52:2b:fc:61:ce:1e:69:1a:23:e8:
         3c:d9:2f:8b:10:46:7c:1b:e0:e6:ae:94:47:1c:a9:88:9e:58:
         f6:22:2d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:43 2025 by rpki-client