Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/326131333a646638333a623030623a3a2f34382d3438203d3e203537383730.roa
File:                     326131333a646638333a623030623a3a2f34382d3438203d3e203537383730.roa (raw, json)
Hash identifier:          WkSEHkConO/CUb4MSErAKRmHqDgu05SEVOaSK26/O6w=
Subject key identifier:   AC:92:39:2C:DB:3E:C5:56:AD:AA:99:0E:C0:A9:A3:A8:E3:33:42:7E
Certificate issuer:       /CN=e0f8ebf82a17ad878a08d64788000b830dc07ed9
Certificate serial:       39F12CBD510E498761B78070CD9C28A7AE316814
Authority key identifier: E0:F8:EB:F8:2A:17:AD:87:8A:08:D6:47:88:00:0B:83:0D:C0:7E:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Pjr-CoXrYeKCNZHiAALgw3Aftk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/326131333a646638333a623030623a3a2f34382d3438203d3e203537383730.roa
Signing time:             Fri 19 May 2023 23:17:03 +0000
ROA not before:           Fri 19 May 2023 23:12:03 +0000
ROA not after:            Fri 17 May 2024 23:17:03 +0000
asID:                     57870
IP address blocks:        2a13:df83:b00b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f1:2c:bd:51:0e:49:87:61:b7:80:70:cd:9c:28:a7:ae:31:68:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f8ebf82a17ad878a08d64788000b830dc07ed9
        Validity
            Not Before: May 19 23:12:03 2023 GMT
            Not After : May 17 23:17:03 2024 GMT
        Subject: CN=AC92392CDB3EC556ADAA990EC0A9A3A8E333427E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:25:eb:63:3c:a2:79:90:99:0b:72:52:6c:f1:
                    02:be:bd:4b:29:e0:da:6d:60:4c:40:0e:3f:39:bd:
                    a5:4d:9c:73:16:06:03:d6:45:02:09:aa:c1:f7:5f:
                    ed:9c:2a:b2:53:b6:c6:50:ba:42:db:0d:a2:1e:b4:
                    ef:65:36:2a:22:e0:d1:ae:08:7b:3f:1c:5d:72:9e:
                    80:78:d3:1f:83:a5:62:d8:fe:1d:21:9f:a4:f6:a4:
                    c6:b2:06:8e:e2:a0:f1:4c:e2:a6:f3:c6:3f:17:7f:
                    3e:67:55:75:02:b2:d3:e1:8a:7b:55:ec:32:89:74:
                    ca:7a:31:0e:94:77:e3:02:88:a4:1a:a3:db:ea:84:
                    27:89:e8:e0:21:95:cd:bd:a6:7e:74:ee:01:e9:69:
                    91:fa:43:4d:c0:30:f2:d5:18:7b:25:30:78:9d:2f:
                    2e:f6:ed:2a:6a:1a:7c:83:0a:e1:c1:2b:1a:cf:d1:
                    66:49:78:bc:12:91:d0:4d:e8:5b:da:9b:6b:9d:b7:
                    55:64:a9:2f:20:e8:55:3c:86:a1:00:b4:a1:ed:69:
                    86:8d:6e:31:76:f9:62:e1:2a:37:54:41:0a:21:77:
                    49:9d:4e:28:19:6b:0a:38:c0:16:8d:fd:18:95:f3:
                    c3:78:31:97:e2:9e:47:8d:5b:e3:59:36:31:32:2b:
                    7e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:92:39:2C:DB:3E:C5:56:AD:AA:99:0E:C0:A9:A3:A8:E3:33:42:7E
            X509v3 Authority Key Identifier:
                keyid:E0:F8:EB:F8:2A:17:AD:87:8A:08:D6:47:88:00:0B:83:0D:C0:7E:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/E0F8EBF82A17AD878A08D64788000B830DC07ED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Pjr-CoXrYeKCNZHiAALgw3Aftk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/326131333a646638333a623030623a3a2f34382d3438203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df83:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:3c:52:38:0d:12:17:29:5e:74:bd:fa:ea:e0:b5:fc:d0:ba:
         74:94:06:c2:8a:25:79:36:cb:6a:24:8c:f9:38:cf:57:21:8d:
         1e:10:28:d4:de:07:75:c7:98:a8:d2:4d:7f:04:48:a4:5d:a6:
         46:40:5c:8f:e1:1b:ca:dd:fe:1d:28:2c:97:9b:25:d9:a9:f3:
         8e:13:b9:14:3e:2c:ea:57:3d:77:25:cf:1c:ac:f4:d8:24:67:
         7b:ab:5a:28:27:e5:77:d6:40:a6:c1:b0:3e:87:5b:5d:26:58:
         e1:1c:b6:c1:55:d6:07:dc:55:ae:18:6c:a3:80:96:4d:b1:3a:
         f1:40:a4:6d:85:84:af:ee:c1:99:e5:b7:6c:88:76:93:a6:b3:
         6c:e0:08:d4:ee:40:b1:4a:0d:bf:82:53:ee:d4:c5:43:d1:2c:
         71:67:85:25:69:c1:79:73:7e:08:fc:38:a0:6a:b8:2f:d7:e7:
         a6:a8:20:63:d3:86:cb:7c:df:8c:b4:98:9e:6e:b6:24:04:04:
         6d:5f:60:40:eb:22:92:e4:0c:41:7a:62:2e:72:14:90:c8:0c:
         a2:7f:a1:13:c8:26:5d:c2:c1:e8:cd:e8:fa:81:bf:a6:cf:31:
         ea:cf:50:0f:1e:ac:87:64:85:f0:9c:5b:96:30:8a:3b:fd:2e:
         32:0d:22:c6
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUOfEsvVEOSYdht4BwzZwop64xaBQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTBmOGViZjgyYTE3YWQ4NzhhMDhkNjQ3ODgwMDBiODMw
ZGMwN2VkOTAeFw0yMzA1MTkyMzEyMDNaFw0yNDA1MTcyMzE3MDNaMDMxMTAvBgNV
BAMTKEFDOTIzOTJDREIzRUM1NTZBREFBOTkwRUMwQTlBM0E4RTMzMzQyN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfJetjPKJ5kJkLclJs8QK+vUsp
4NptYExADj85vaVNnHMWBgPWRQIJqsH3X+2cKrJTtsZQukLbDaIetO9lNioi4NGu
CHs/HF1ynoB40x+DpWLY/h0hn6T2pMayBo7ioPFM4qbzxj8Xfz5nVXUCstPhintV
7DKJdMp6MQ6Ud+MCiKQao9vqhCeJ6OAhlc29pn507gHpaZH6Q03AMPLVGHslMHid
Ly727SpqGnyDCuHBKxrP0WZJeLwSkdBN6Fvam2udt1VkqS8g6FU8hqEAtKHtaYaN
bjF2+WLhKjdUQQohd0mdTigZawo4wBaN/RiV88N4MZfinkeNW+NZNjEyK36JAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUrJI5LNs+xVatqpkOwKmjqOMzQn4wHwYDVR0j
BBgwFoAU4Pjr+CoXrYeKCNZHiAALgw3AftkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmZmJlNzItNTQwNy00Mjk2LTgyMjYtMzY3MjY5MjU5
ZDg2LzAvRTBGOEVCRjgyQTE3QUQ4NzhBMDhENjQ3ODgwMDBCODMwREMwN0VEOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRQanItQ29YclllS0NOWkhpQUFMZ3cz
QWZ0ay5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2ZmZmJlNzIt
NTQwNy00Mjk2LTgyMjYtMzY3MjY5MjU5ZDg2LzAvMzI2MTMxMzMzYTY0NjYzODMz
M2E2MjMwMzA2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzczODM3MzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqE9+DsAswDQYJKoZIhvcNAQELBQADggEBAH88UjgNEhcpXnS9+urg
tfzQunSUBsKKJXk2y2okjPk4z1chjR4QKNTeB3XHmKjSTX8ESKRdpkZAXI/hG8rd
/h0oLJebJdmp844TuRQ+LOpXPXclzxys9NgkZ3urWign5XfWQKbBsD6HW10mWOEc
tsFV1gfcVa4YbKOAlk2xOvFApG2FhK/uwZnlt2yIdpOms2zgCNTuQLFKDb+CU+7U
xUPRLHFnhSVpwXlzfgj8OKBquC/X56aoIGPThst834y0mJ5utiQEBG1fYEDrIpLk
DEF6Yi5yFJDIDKJ/oRPIJl3CwejN6PqBv6bPMerPUA8erIdkhfCcW5Ywijv9LjIN
IsY=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:24 2025 by rpki-client