Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa
File:                     326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa (raw, json)
Hash identifier:          uMNI9RXKWwcptKy0GlaJTFoAD7V5eqqNzt763R/xCL0=
Subject key identifier:   B3:30:59:43:FE:F5:07:D1:5E:3A:4A:72:FB:EC:C1:BA:DB:F7:16:90
Certificate issuer:       /CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
Certificate serial:       66FBF829B72E54607929BB8971D06B2A834BAC07
Authority key identifier: 11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa
Signing time:             Thu 27 Jun 2024 19:30:47 +0000
ROA not before:           Thu 27 Jun 2024 19:25:47 +0000
ROA not after:            Thu 26 Jun 2025 19:30:47 +0000
asID:                     215069
IP address blocks:        2a11:f2c0:ffd4::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:fb:f8:29:b7:2e:54:60:79:29:bb:89:71:d0:6b:2a:83:4b:ac:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
        Validity
            Not Before: Jun 27 19:25:47 2024 GMT
            Not After : Jun 26 19:30:47 2025 GMT
        Subject: CN=B3305943FEF507D15E3A4A72FBECC1BADBF71690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1f:4c:5d:e6:54:c8:37:fc:9c:9d:d7:52:02:
                    da:4b:b3:65:1f:4c:40:f5:7b:4a:f8:66:7a:92:68:
                    cd:7b:ee:e1:2c:8d:52:b3:c5:e7:4d:7f:6a:5e:44:
                    20:04:22:1f:90:c5:f0:bb:b2:f6:99:b4:26:2a:9c:
                    9d:ab:31:6a:96:48:33:b8:51:0b:04:ce:00:96:c9:
                    46:e9:8e:54:20:84:5f:f0:d2:64:98:54:ac:ba:99:
                    e6:cf:f7:7a:e9:80:0c:3b:cd:31:e0:4f:73:1b:7c:
                    95:e3:b8:c1:1c:61:9b:4b:6f:04:bc:c1:76:ec:5d:
                    fb:21:75:fd:86:9c:31:70:9b:20:98:40:f7:15:83:
                    c4:bf:c7:6d:75:11:21:d0:64:9f:89:e4:60:37:3b:
                    41:69:ce:f2:74:f4:6e:28:34:b5:3b:ea:f2:9a:54:
                    98:89:24:67:a1:f2:22:14:c8:a6:33:55:bb:53:9c:
                    62:43:d0:ce:56:a4:d0:ab:65:d0:24:1f:1c:e3:35:
                    44:ed:e7:03:45:d6:7c:32:52:61:18:ce:8c:1f:41:
                    bb:ab:92:e0:f6:24:2d:4c:53:91:74:84:11:4b:10:
                    da:e7:e9:b2:fc:ac:48:a3:af:53:e5:57:25:61:d6:
                    63:15:5b:7a:8d:5f:2f:44:0f:0f:f5:3c:e0:6a:2e:
                    bc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:30:59:43:FE:F5:07:D1:5E:3A:4A:72:FB:EC:C1:BA:DB:F7:16:90
            X509v3 Authority Key Identifier:
                keyid:11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:ffd4::/46

    Signature Algorithm: sha256WithRSAEncryption
         83:ea:bb:f7:53:06:3d:e6:b4:7b:db:1e:7c:18:55:5e:9d:5e:
         11:98:38:75:6a:0f:01:3b:35:bf:7d:4e:84:36:92:e8:6a:8e:
         8a:77:07:c8:a9:f1:4e:98:58:26:f8:cd:b6:d4:49:d5:61:9e:
         06:01:23:f3:6b:92:b2:63:1a:00:60:44:0f:0e:ca:82:3e:a2:
         4c:a6:5d:fb:b6:86:38:99:9d:06:44:89:1f:71:e0:d4:e7:d5:
         58:ae:8e:69:0c:d0:30:08:05:6b:1b:7c:39:fb:6b:37:90:e7:
         f6:da:70:2f:76:50:0b:1a:cf:0c:ea:3e:dd:2c:aa:f6:89:a5:
         e8:77:65:b1:90:77:6a:3a:92:33:d8:41:fd:47:5e:1f:e5:fc:
         41:4f:71:c1:ff:c6:db:57:57:8b:82:cc:31:c7:e6:76:19:94:
         0b:30:e6:13:a4:b1:56:fe:ca:2e:80:6d:95:2c:3e:dd:8a:87:
         7e:0e:52:c7:73:d0:2d:9b:69:cf:40:90:91:6e:4f:e6:bc:66:
         d4:c8:af:65:53:22:5c:18:e9:8a:58:e6:48:e7:cd:14:00:8b:
         f5:83:1c:e6:de:87:c2:a8:ef:e3:c8:ca:4a:08:c0:36:1d:ea:
         04:63:00:46:66:45:4f:31:81:7e:05:11:e4:a3:d2:7f:2d:d9:
         38:1d:c2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 17:34:14 2024 by rpki-client on console-fra.rpki-client.org