Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333033303a3a2f34382d3438203d3e20313531333439.roa
File:                     326130363a396638313a333033303a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier:          +heFp/HogOer+JX0DCA9KlHIxXM6ZSYcBAHEX6Ffr7s=
Subject key identifier:   70:41:70:B3:58:67:B0:4D:97:7B:2C:A0:E3:F4:06:5C:35:D1:37:41
Certificate issuer:       /CN=ADD73B35695BB3BF25B467196329EFCAAC867E5E
Certificate serial:       72BB6A3C5BB0CFCED210CE575664180470B5AE50
Authority key identifier: AD:D7:3B:35:69:5B:B3:BF:25:B4:67:19:63:29:EF:CA:AC:86:7E:5E
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333033303a3a2f34382d3438203d3e20313531333439.roa
Signing time:             Mon 29 Apr 2024 00:25:17 +0000
ROA not before:           Mon 29 Apr 2024 00:20:17 +0000
ROA not after:            Mon 28 Apr 2025 00:25:17 +0000
asID:                     151349
IP address blocks:        2a06:9f81:3030::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:bb:6a:3c:5b:b0:cf:ce:d2:10:ce:57:56:64:18:04:70:b5:ae:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADD73B35695BB3BF25B467196329EFCAAC867E5E
        Validity
            Not Before: Apr 29 00:20:17 2024 GMT
            Not After : Apr 28 00:25:17 2025 GMT
        Subject: CN=704170B35867B04D977B2CA0E3F4065C35D13741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:53:02:46:17:05:fe:a2:16:c5:fe:a8:36:e3:
                    24:ee:2f:10:74:da:29:e1:d5:0b:57:ec:57:c6:fd:
                    23:e0:eb:c6:5d:5d:b2:f2:ce:49:ab:95:62:79:6a:
                    3d:e3:54:99:47:c2:5c:06:f7:b3:96:32:f0:f7:c3:
                    e7:de:f9:07:1d:a3:84:ac:f1:17:a8:0f:ae:ee:aa:
                    57:39:5c:1e:61:7f:6a:cd:8c:90:dc:58:f2:ac:a6:
                    12:f8:fc:ef:b4:39:76:94:bc:39:0f:c5:8d:0e:0a:
                    58:a7:64:5d:79:1a:94:a0:5a:e9:71:72:d4:9e:40:
                    3b:57:92:d3:11:29:ed:30:f2:10:9c:3e:cc:f3:de:
                    17:52:39:38:0a:60:30:f5:42:72:61:20:fe:2f:78:
                    68:9d:8d:11:2e:76:d0:10:60:1d:d0:45:3b:fe:0e:
                    24:22:5d:a3:3e:57:da:c1:e7:23:6c:13:4e:a6:bc:
                    1b:4b:9f:47:78:b4:89:1e:e8:db:be:3c:ff:fd:d8:
                    e9:58:3e:71:15:33:09:ec:ad:e5:f8:88:01:ee:aa:
                    f6:39:91:34:3b:5d:bf:3d:59:cd:d2:e1:48:d2:09:
                    99:0e:6d:d2:6e:3a:36:f3:e5:1d:4f:d6:4e:0a:25:
                    be:9a:4c:16:86:40:37:ee:05:1c:9f:db:df:85:0c:
                    ec:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:41:70:B3:58:67:B0:4D:97:7B:2C:A0:E3:F4:06:5C:35:D1:37:41
            X509v3 Authority Key Identifier:
                keyid:AD:D7:3B:35:69:5B:B3:BF:25:B4:67:19:63:29:EF:CA:AC:86:7E:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/326130363a396638313a333033303a3a2f34382d3438203d3e20313531333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:3030::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:9d:97:8b:a7:9e:ce:a3:df:a4:30:18:13:7a:4a:20:f3:38:
         2f:31:10:64:76:1a:56:9b:6b:12:a3:aa:27:3e:73:d0:74:00:
         3c:4a:f6:d2:51:3e:8c:d7:01:b3:13:3a:50:82:7d:7d:66:08:
         26:e1:f5:6a:7b:87:bd:4b:a3:fb:96:d3:e1:e4:ac:5b:55:a8:
         38:b1:f3:4b:f6:88:26:8a:ab:72:cc:3f:49:83:dc:b6:fd:38:
         b6:0a:95:e8:b8:db:94:4d:39:33:76:83:a8:73:e3:bf:f7:0e:
         1e:dd:0d:d4:98:98:0a:81:c4:94:c5:d1:77:94:56:69:ef:f8:
         f7:07:03:35:c4:31:15:54:da:d5:a2:d4:1d:a0:59:22:97:27:
         45:6b:51:8d:e7:56:3f:e2:f8:c8:04:0f:7f:dd:43:bd:d5:f7:
         a3:25:57:e4:69:84:a8:cb:f6:5b:85:fc:16:c6:72:b7:56:6b:
         86:b7:b1:5f:76:ef:17:70:5c:09:b7:dc:ad:84:f8:7d:a7:38:
         07:78:63:46:e4:95:c7:a3:51:a7:2d:4e:25:82:41:49:96:5a:
         56:06:19:d2:5f:cd:17:21:24:63:f9:12:6b:41:b8:7d:5e:a3:
         c4:b6:83:30:91:c0:84:3e:23:4f:f6:d9:68:17:23:1f:9d:5f:
         de:43:46:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:55 2025 by rpki-client