Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/326131333a646638373a623030623a3a2f34382d3438203d3e203537383730.roa
File:                     326131333a646638373a623030623a3a2f34382d3438203d3e203537383730.roa (raw, json)
Hash identifier:          NB84IT+ilStdMey0TQBFxXojO0rcqPJD+1EtySOS4Ug=
Subject key identifier:   57:E9:DA:F9:83:EB:EB:41:10:0B:00:45:CA:97:FB:BC:BF:59:62:50
Certificate issuer:       /CN=e0f8ebf82a17ad878a08d64788000b830dc07ed9
Certificate serial:       4C986A4A1A15130F7E6A7654639F0DF18FB020F4
Authority key identifier: E0:F8:EB:F8:2A:17:AD:87:8A:08:D6:47:88:00:0B:83:0D:C0:7E:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Pjr-CoXrYeKCNZHiAALgw3Aftk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/326131333a646638373a623030623a3a2f34382d3438203d3e203537383730.roa
Signing time:             Fri 19 May 2023 23:16:59 +0000
ROA not before:           Fri 19 May 2023 23:11:59 +0000
ROA not after:            Fri 17 May 2024 23:16:59 +0000
asID:                     57870
IP address blocks:        2a13:df87:b00b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:98:6a:4a:1a:15:13:0f:7e:6a:76:54:63:9f:0d:f1:8f:b0:20:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f8ebf82a17ad878a08d64788000b830dc07ed9
        Validity
            Not Before: May 19 23:11:59 2023 GMT
            Not After : May 17 23:16:59 2024 GMT
        Subject: CN=57E9DAF983EBEB41100B0045CA97FBBCBF596250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d4:dc:d3:3e:9f:40:89:ca:0f:f2:d6:76:c6:
                    3c:71:4a:1d:b6:fc:b3:dd:3a:a7:ff:76:eb:73:32:
                    1e:ab:a7:c3:7f:6e:3b:b3:68:b2:c8:7b:fb:ce:6b:
                    74:66:fb:1a:cc:f7:a3:6b:98:be:58:19:3b:37:2a:
                    4b:92:ac:e7:2a:95:d6:87:83:e1:c0:69:53:03:d6:
                    75:69:be:c7:6d:b9:b8:f4:92:a4:5a:96:56:57:8c:
                    89:6b:ac:e5:b3:19:e1:13:f7:43:b6:45:76:2d:fd:
                    16:39:35:e3:b1:cb:1d:d2:81:77:f1:63:df:52:d5:
                    8b:49:cb:19:87:1a:50:61:7a:83:83:f9:ad:f4:1e:
                    60:6b:e2:90:7e:58:e0:b1:ff:c3:4a:6e:fc:6f:3c:
                    2f:bb:7c:32:e6:26:ce:e6:e6:52:98:3f:f2:2d:e1:
                    3d:7d:28:51:66:6e:42:26:a6:06:4c:1e:09:3c:a9:
                    52:cf:b3:2b:92:fa:e8:0b:88:ea:50:0e:50:05:6e:
                    e7:06:5f:71:24:ea:6c:5e:9e:67:d6:4a:cc:15:17:
                    8e:63:e4:d6:3d:db:b6:6d:5b:8a:28:e0:6c:34:48:
                    67:f9:a5:70:f0:b6:e6:96:4b:b6:1d:6c:d5:95:ef:
                    0f:33:4e:ca:0e:79:2d:54:05:4c:38:09:1f:97:2d:
                    ce:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E9:DA:F9:83:EB:EB:41:10:0B:00:45:CA:97:FB:BC:BF:59:62:50
            X509v3 Authority Key Identifier:
                keyid:E0:F8:EB:F8:2A:17:AD:87:8A:08:D6:47:88:00:0B:83:0D:C0:7E:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/E0F8EBF82A17AD878A08D64788000B830DC07ED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Pjr-CoXrYeKCNZHiAALgw3Aftk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7fffbe72-5407-4296-8226-367269259d86/0/326131333a646638373a623030623a3a2f34382d3438203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:58:68:26:26:93:11:b1:63:06:1a:ef:d8:ce:81:3c:e4:96:
         4e:87:00:be:d2:9a:7a:bf:63:b4:ba:15:20:45:a9:8c:b5:71:
         b1:64:08:98:c3:5e:7c:8b:ac:e5:8a:93:6a:45:c3:98:7a:8c:
         8c:63:c6:2c:d5:27:55:a2:4d:c0:82:fc:33:e8:90:14:3c:8c:
         0c:00:9e:7a:aa:fb:ef:a5:6b:ba:70:9f:02:53:b6:0e:5e:47:
         65:66:73:f9:b7:fe:54:33:7f:de:58:9a:1a:b0:bd:d6:af:ca:
         1c:ab:77:e9:1d:da:a2:47:73:34:69:b8:e1:44:11:32:e5:41:
         a0:32:aa:6f:88:83:c6:92:94:9f:e3:28:f2:86:22:61:19:11:
         4c:62:45:fb:19:93:ae:77:ed:b7:86:d0:b1:af:4f:a1:9e:fb:
         70:d7:a8:84:12:cc:2d:53:f5:fe:84:4f:4b:18:68:72:53:b9:
         61:2c:77:14:cc:06:ea:b3:49:42:dc:d9:27:58:42:e6:f2:72:
         cd:c9:34:d8:10:48:81:b9:0b:e4:e4:77:ce:5a:c1:36:c9:62:
         9e:65:ed:ad:1d:0f:4e:79:56:45:45:71:24:27:92:65:bd:0e:
         ef:46:e7:d9:20:a1:2b:e3:eb:aa:75:f5:da:ed:61:69:3f:a5:
         dc:38:f7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:47 2025 by rpki-client