Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a3530303a3a2f34302d3430203d3e203630373433.roa
File:                     326131343a343438373a3530303a3a2f34302d3430203d3e203630373433.roa (raw, json)
Hash identifier:          LSE2bCM32ej4+HPTczG7xUY5ZUOPKbln+woVR2HvQAY=
Subject key identifier:   5E:04:8F:FB:8B:24:17:D0:EE:20:70:C9:7D:84:FA:CF:A7:13:BD:19
Certificate issuer:       /CN=B96B8D4992D9B467CE859406542D783AE5B5427B
Certificate serial:       36BD4E9592E46CE1CE39453EBE59E363A320B49E
Authority key identifier: B9:6B:8D:49:92:D9:B4:67:CE:85:94:06:54:2D:78:3A:E5:B5:42:7B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B96B8D4992D9B467CE859406542D783AE5B5427B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a3530303a3a2f34302d3430203d3e203630373433.roa
Signing time:             Thu 11 Jan 2024 08:47:08 +0000
ROA not before:           Thu 11 Jan 2024 08:42:08 +0000
ROA not after:            Thu 09 Jan 2025 08:47:08 +0000
asID:                     60743
IP address blocks:        2a14:4487:500::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:bd:4e:95:92:e4:6c:e1:ce:39:45:3e:be:59:e3:63:a3:20:b4:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96B8D4992D9B467CE859406542D783AE5B5427B
        Validity
            Not Before: Jan 11 08:42:08 2024 GMT
            Not After : Jan  9 08:47:08 2025 GMT
        Subject: CN=5E048FFB8B2417D0EE2070C97D84FACFA713BD19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b9:33:77:38:43:c4:4a:f8:ef:fc:9f:c5:ee:
                    e9:a6:b2:40:e1:6e:f6:fc:c2:bf:01:47:f8:26:c3:
                    66:12:00:b8:00:64:27:ee:c8:02:e9:6a:d3:3b:01:
                    32:b9:33:73:54:eb:9e:58:5a:91:e8:be:ae:6a:96:
                    66:48:96:9d:64:04:c2:30:eb:c6:f7:d1:3b:f7:a5:
                    90:2e:c7:62:02:9a:72:42:c9:48:26:19:83:91:85:
                    5e:64:6b:64:bc:04:da:a8:93:74:44:a1:86:53:3d:
                    bf:79:81:ff:83:d6:dd:bc:d5:21:7a:b7:30:24:cf:
                    f5:c8:ad:ab:b6:d9:44:94:ad:8b:0e:bf:be:bd:12:
                    70:1a:fc:5a:43:34:f3:fb:58:dc:92:eb:4f:98:a1:
                    e9:c8:df:fe:ad:9a:48:3a:1a:4e:01:21:59:ae:55:
                    96:2a:4d:f0:51:9f:c8:03:58:34:77:f1:52:e3:e3:
                    b6:50:a1:bc:49:55:17:95:b9:43:b2:aa:39:a8:79:
                    c5:e3:b3:6a:aa:ee:da:fc:f6:0b:07:e2:8b:ce:4a:
                    ac:e8:01:27:44:89:29:e3:16:9f:c0:e4:38:75:00:
                    b1:dd:18:34:e6:28:e1:db:ed:4f:ac:88:ce:62:23:
                    f8:3a:37:ca:40:21:f3:73:29:88:70:2c:81:bb:0e:
                    d8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:04:8F:FB:8B:24:17:D0:EE:20:70:C9:7D:84:FA:CF:A7:13:BD:19
            X509v3 Authority Key Identifier:
                keyid:B9:6B:8D:49:92:D9:B4:67:CE:85:94:06:54:2D:78:3A:E5:B5:42:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/B96B8D4992D9B467CE859406542D783AE5B5427B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B96B8D4992D9B467CE859406542D783AE5B5427B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a3530303a3a2f34302d3430203d3e203630373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:4487:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:71:6d:cd:8f:22:11:79:a8:43:8a:44:4f:77:fa:38:a6:03:
         bf:1f:63:38:ec:de:a6:ee:a5:77:97:10:68:6d:7b:ae:77:8c:
         50:58:f2:2c:1a:96:bf:e0:8e:8e:90:98:53:62:cc:49:9b:9d:
         7b:b4:27:7c:81:13:33:ca:04:be:83:33:09:ab:42:2f:d8:1a:
         5c:b8:68:e2:24:d0:e8:c9:7c:29:07:a9:dc:4c:4c:09:5d:6d:
         84:63:a9:40:2c:5d:f4:c8:ee:21:92:44:6a:26:af:e5:97:d1:
         5b:eb:f2:34:bd:97:2a:15:64:bc:ab:70:65:7b:e3:1b:ad:4e:
         b7:e7:24:86:b1:eb:c9:4c:d5:15:39:8e:0a:e1:eb:84:a4:d8:
         43:e3:db:eb:fa:45:88:4a:84:37:16:94:4c:07:fa:cf:f2:ca:
         2c:f0:97:28:46:45:3d:82:c0:2c:cf:2c:05:6d:b4:44:27:8d:
         12:ad:49:ea:f8:8c:e9:8f:c1:30:8d:e0:d4:7b:55:61:6f:a4:
         02:ef:ee:5d:b2:33:23:c0:bb:5b:e9:a0:1d:9c:e1:8e:41:28:
         17:a8:56:94:38:b6:49:fa:03:78:f5:9d:96:c7:62:ae:db:b2:
         22:67:5a:3f:6a:ce:f1:08:83:c7:e4:c6:6e:dc:cb:c4:29:d8:
         59:f8:30:ed
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIUNr1OlZLkbOHOOUU+vlnjY6MgtJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjk2QjhENDk5MkQ5QjQ2N0NFODU5NDA2NTQyRDc4M0FF
NUI1NDI3QjAeFw0yNDAxMTEwODQyMDhaFw0yNTAxMDkwODQ3MDhaMDMxMTAvBgNV
BAMTKDVFMDQ4RkZCOEIyNDE3RDBFRTIwNzBDOTdEODRGQUNGQTcxM0JEMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzuTN3OEPESvjv/J/F7ummskDh
bvb8wr8BR/gmw2YSALgAZCfuyALpatM7ATK5M3NU655YWpHovq5qlmZIlp1kBMIw
68b30Tv3pZAux2ICmnJCyUgmGYORhV5ka2S8BNqok3REoYZTPb95gf+D1t281SF6
tzAkz/XIrau22USUrYsOv769EnAa/FpDNPP7WNyS60+YoenI3/6tmkg6Gk4BIVmu
VZYqTfBRn8gDWDR38VLj47ZQobxJVReVuUOyqjmoecXjs2qq7tr89gsH4ovOSqzo
ASdEiSnjFp/A5Dh1ALHdGDTmKOHb7U+siM5iI/g6N8pAIfNzKYhwLIG7DtjhAgMB
AAGjggKDMIICfzAdBgNVHQ4EFgQUXgSP+4skF9DuIHDJfYT6z6cTvRkwHwYDVR0j
BBgwFoAUuWuNSZLZtGfOhZQGVC14OuW1QnswDgYDVR0PAQH/BAQDAgeAMIGXBgNV
HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5LTRmYWVhNGIx
YmMxMi8xOC9COTZCOEQ0OTkyRDlCNDY3Q0U4NTk0MDY1NDJENzgzQUU1QjU0MjdC
LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA0MDMyYzhmLTFkNTct
NGMzYi05MDQzLWEwZTdmZWJmMTY3ZC8wL0I5NkI4RDQ5OTJEOUI0NjdDRTg1OTQw
NjU0MkQ3ODNBRTVCNTQyN0IuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCBoQYIKwYB
BQUHMAuGgZRyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5LTRmYWVhNGIxYmMxMi8xOC8zMjYx
MzEzNDNhMzQzNDM4MzczYTM1MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDM2
MzAzNzM0MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgAqFESHBTANBgkqhkiG9w0BAQsFAAOCAQEAWXFt
zY8iEXmoQ4pET3f6OKYDvx9jOOzepu6ld5cQaG17rneMUFjyLBqWv+COjpCYU2LM
SZude7QnfIETM8oEvoMzCatCL9gaXLho4iTQ6Ml8KQep3ExMCV1thGOpQCxd9Mju
IZJEaiav5ZfRW+vyNL2XKhVkvKtwZXvjG61Ot+ckhrHryUzVFTmOCuHrhKTYQ+Pb
6/pFiEqENxaUTAf6z/LKLPCXKEZFPYLALM8sBW20RCeNEq1J6viM6Y/BMI3g1HtV
YW+kAu/uXbIzI8C7W+mgHZzhjkEoF6hWlDi2SfoDePWdlsdirtuyImdaP2rO8QiD
x+TGbtzLxCnYWfgw7Q==
-----END CERTIFICATE-----