Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/1/326130613a363034303a333130303a3a2f34302d3430203d3e20323030333335.roa
File:                     326130613a363034303a333130303a3a2f34302d3430203d3e20323030333335.roa (raw, json)
Hash identifier:          G+WU8fKzM5AXXu41UdVPTsJskJ/d8GOWWXfriuTjovc=
Subject key identifier:   53:59:F9:89:60:82:71:67:1B:B7:DC:4D:9B:91:E9:58:D7:23:F9:48
Certificate issuer:       /CN=E55F89CA4727B70FE77FA01C4CFA771550E58430
Certificate serial:       2995A0CF458EBA503185DC901089EFA44AF445EB
Authority key identifier: E5:5F:89:CA:47:27:B7:0F:E7:7F:A0:1C:4C:FA:77:15:50:E5:84:30
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/E55F89CA4727B70FE77FA01C4CFA771550E58430.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/1/326130613a363034303a333130303a3a2f34302d3430203d3e20323030333335.roa
Signing time:             Tue 18 Jul 2023 19:17:53 +0000
ROA not before:           Tue 18 Jul 2023 19:12:53 +0000
ROA not after:            Tue 16 Jul 2024 19:17:53 +0000
asID:                     200335
IP address blocks:        2a0a:6040:3100::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:95:a0:cf:45:8e:ba:50:31:85:dc:90:10:89:ef:a4:4a:f4:45:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E55F89CA4727B70FE77FA01C4CFA771550E58430
        Validity
            Not Before: Jul 18 19:12:53 2023 GMT
            Not After : Jul 16 19:17:53 2024 GMT
        Subject: CN=5359F989608271671BB7DC4D9B91E958D723F948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2f:cd:c0:27:1a:b0:f2:fa:63:02:7f:26:12:
                    77:20:e9:8f:ff:0c:7c:22:3b:8d:75:1c:c6:79:eb:
                    b0:50:95:f7:ca:75:13:9f:c0:78:6c:91:82:d3:72:
                    b8:d5:e6:64:1d:55:32:16:22:75:88:3e:9b:7e:84:
                    a9:4d:bd:b4:d7:b6:38:21:90:bb:c4:3e:8a:72:5b:
                    8c:6d:ad:57:55:ad:d4:24:36:8e:30:10:52:ab:f5:
                    fe:8c:d0:fb:37:10:6e:3f:c9:d7:82:af:e1:94:ca:
                    14:a0:a6:84:d2:68:e4:d1:48:8e:ad:e5:5c:bd:57:
                    a6:95:a5:63:ab:cf:82:be:84:ec:b5:71:28:9d:52:
                    19:58:cc:88:5c:f9:ad:60:61:10:91:6b:ee:1b:6d:
                    87:f7:c7:99:fd:2e:04:32:68:48:70:9f:3e:05:53:
                    83:3d:98:35:43:3e:10:c2:22:ce:18:6e:bd:0b:3c:
                    89:2d:7e:a0:c8:76:26:f6:43:ff:03:86:cf:41:f4:
                    f9:44:71:96:3b:89:28:cb:22:6f:e2:67:cb:a4:96:
                    ae:52:3f:ac:b3:dc:7f:ac:01:06:44:a2:9d:fc:4f:
                    2a:14:6d:bb:d0:2b:7b:2f:0e:1f:70:bb:21:09:ff:
                    89:be:cf:fa:a2:70:20:29:87:40:7d:99:8e:e7:7d:
                    99:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:59:F9:89:60:82:71:67:1B:B7:DC:4D:9B:91:E9:58:D7:23:F9:48
            X509v3 Authority Key Identifier:
                keyid:E5:5F:89:CA:47:27:B7:0F:E7:7F:A0:1C:4C:FA:77:15:50:E5:84:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/1/E55F89CA4727B70FE77FA01C4CFA771550E58430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/E55F89CA4727B70FE77FA01C4CFA771550E58430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/1/326130613a363034303a333130303a3a2f34302d3430203d3e20323030333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:3100::/40

    Signature Algorithm: sha256WithRSAEncryption
         64:6f:0d:9f:14:2a:67:ce:bc:d8:5d:e3:fe:ae:8c:4c:79:32:
         ed:bf:0b:51:e9:19:67:7f:a6:44:70:f5:8c:84:f0:e2:a3:c8:
         13:29:39:34:7d:74:32:d4:59:48:60:b4:d7:14:b2:aa:62:bd:
         4a:73:ca:3b:ff:da:4d:d7:fc:a4:4f:30:56:f9:5a:3e:5d:d7:
         ea:f9:a6:ce:de:99:21:6a:46:38:33:a6:d3:e0:d8:ec:fd:4f:
         f0:1c:86:a0:79:8c:77:c9:bb:5c:f7:bd:44:39:cf:64:ef:d0:
         81:63:c7:2f:2f:df:4b:c8:84:ff:d0:f9:98:ef:3a:8d:d4:0e:
         32:2a:ad:7b:cb:f2:e0:45:fa:98:ae:95:1b:6b:ad:bb:d3:97:
         60:f3:10:b6:b6:07:b7:06:7d:78:d7:a6:7c:84:a6:10:be:6c:
         e0:ee:6a:0d:8c:e9:d7:03:4e:7c:a0:af:59:c4:c7:d1:50:05:
         1c:a9:5d:0f:1e:fa:e6:4d:3f:af:9d:de:a9:e1:a0:c9:37:5c:
         66:9c:d0:56:de:dc:3a:35:42:78:41:30:a1:61:de:a5:f3:8a:
         b1:40:a9:7a:e5:d4:4e:49:5e:3b:78:47:de:67:b0:af:b8:0b:
         99:70:83:ad:14:5a:97:0d:13:36:11:56:c3:b4:f7:48:a1:4b:
         88:9a:d5:ea
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIUKZWgz0WOulAxhdyQEInvpEr0ReswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTU1Rjg5Q0E0NzI3QjcwRkU3N0ZBMDFDNENGQTc3MTU1
MEU1ODQzMDAeFw0yMzA3MTgxOTEyNTNaFw0yNDA3MTYxOTE3NTNaMDMxMTAvBgNV
BAMTKDUzNTlGOTg5NjA4MjcxNjcxQkI3REM0RDlCOTFFOTU4RDcyM0Y5NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsL83AJxqw8vpjAn8mEncg6Y//
DHwiO411HMZ567BQlffKdROfwHhskYLTcrjV5mQdVTIWInWIPpt+hKlNvbTXtjgh
kLvEPopyW4xtrVdVrdQkNo4wEFKr9f6M0Ps3EG4/ydeCr+GUyhSgpoTSaOTRSI6t
5Vy9V6aVpWOrz4K+hOy1cSidUhlYzIhc+a1gYRCRa+4bbYf3x5n9LgQyaEhwnz4F
U4M9mDVDPhDCIs4Ybr0LPIktfqDIdib2Q/8Dhs9B9PlEcZY7iSjLIm/iZ8uklq5S
P6yz3H+sAQZEop38TyoUbbvQK3svDh9wuyEJ/4m+z/qicCAph0B9mY7nfZmfAgMB
AAGjggJfMIICWzAdBgNVHQ4EFgQUU1n5iWCCcWcbt9xNm5HpWNcj+UgwHwYDVR0j
BBgwFoAU5V+Jykcntw/nf6AcTPp3FVDlhDAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWQwZWIzY2YtOWExYi00MTEyLWE2MDctYWU5OGMyYWIx
MmE3LzEvRTU1Rjg5Q0E0NzI3QjcwRkU3N0ZBMDFDNENGQTc3MTU1MEU1ODQzMC5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0U1NUY4OUNBNDcyN0I3
MEZFNzdGQTAxQzRDRkE3NzE1NTBFNTg0MzAuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2FkMGViM2NmLTlhMWItNDExMi1hNjA3LWFlOThjMmFiMTJh
Ny8xLzMyNjEzMDYxM2EzNjMwMzQzMDNhMzMzMTMwMzAzYTNhMmYzNDMwMmQzNDMw
MjAzZDNlMjAzMjMwMzAzMzMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqCmBAMTANBgkqhkiG9w0B
AQsFAAOCAQEAZG8NnxQqZ8682F3j/q6MTHky7b8LUekZZ3+mRHD1jITw4qPIEyk5
NH10MtRZSGC01xSyqmK9SnPKO//aTdf8pE8wVvlaPl3X6vmmzt6ZIWpGODOm0+DY
7P1P8ByGoHmMd8m7XPe9RDnPZO/QgWPHLy/fS8iE/9D5mO86jdQOMiqte8vy4EX6
mK6VG2utu9OXYPMQtrYHtwZ9eNemfISmEL5s4O5qDYzp1wNOfKCvWcTH0VAFHKld
Dx765k0/r53eqeGgyTdcZpzQVt7cOjVCeEEwoWHepfOKsUCpeuXUTkleO3hH3mew
r7gLmXCDrRRalw0TNhFWw7T3SKFLiJrV6g==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:19 2025 by rpki-client