Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323035383438.roa
File:                     326130613a363034343a623030623a3a2f34382d3438203d3e20323035383438.roa (raw, json)
Hash identifier:          GkIx9yYObMEWMiDtFkzmXAgd9Ng5vTh00rJfh+FjUAU=
Subject key identifier:   55:48:39:79:E0:2A:38:BA:5F:10:72:BA:9D:88:E6:CD:D0:C0:3E:25
Certificate issuer:       /CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
Certificate serial:       4F9E53046EC497932873A1EC13157B32382B8242
Authority key identifier: 21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323035383438.roa
Signing time:             Sun 12 Nov 2023 09:38:03 +0000
ROA not before:           Sun 12 Nov 2023 09:33:03 +0000
ROA not after:            Sun 10 Nov 2024 09:38:03 +0000
asID:                     205848
IP address blocks:        2a0a:6044:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:9e:53:04:6e:c4:97:93:28:73:a1:ec:13:15:7b:32:38:2b:82:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CA65857C4339C6923CF5A9F8629948BF3A4B79
        Validity
            Not Before: Nov 12 09:33:03 2023 GMT
            Not After : Nov 10 09:38:03 2024 GMT
        Subject: CN=55483979E02A38BA5F1072BA9D88E6CDD0C03E25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:65:0e:15:f4:fa:68:ba:97:1b:28:ef:dc:53:
                    5f:37:c7:06:ca:2c:ce:bf:d7:02:fd:8f:3d:67:22:
                    38:7d:ea:67:65:8c:84:c9:5a:99:3d:2d:ef:0c:7b:
                    a6:65:25:ed:80:05:44:12:72:c8:f2:21:86:ee:89:
                    75:a1:76:3a:53:b8:84:a7:74:ec:1f:03:42:dd:ec:
                    48:a7:c8:f2:c8:6d:5e:e2:9c:ee:e4:34:43:7a:91:
                    4d:25:11:e7:93:54:bb:9b:b9:3e:28:0c:82:82:21:
                    35:65:c0:cc:ea:23:8a:89:8d:ad:89:53:fb:45:79:
                    3a:87:7f:7d:74:8f:d2:49:3d:00:e8:84:63:b5:34:
                    f8:35:c5:52:79:e3:70:10:a1:02:3b:f4:31:05:70:
                    14:0c:0e:13:d3:7d:8d:0a:c3:40:85:f1:20:ff:34:
                    d2:39:b1:2d:99:50:85:b4:06:a3:a9:29:d4:35:8d:
                    05:af:06:ff:e2:cf:13:f4:74:9b:04:42:22:c5:ce:
                    db:2b:56:41:e4:d1:0f:88:0f:b2:e3:19:d8:9b:32:
                    d3:17:bf:91:b3:c8:d9:4a:f2:30:dc:b9:e6:47:8b:
                    17:2f:9b:93:ec:df:0b:43:3d:2d:91:e9:7f:35:25:
                    6e:2d:d6:d2:24:43:17:00:a1:1a:7f:4b:64:6d:a4:
                    d5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:48:39:79:E0:2A:38:BA:5F:10:72:BA:9D:88:E6:CD:D0:C0:3E:25
            X509v3 Authority Key Identifier:
                keyid:21:CA:65:85:7C:43:39:C6:92:3C:F5:A9:F8:62:99:48:BF:3A:4B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/21CA65857C4339C6923CF5A9F8629948BF3A4B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/21CA65857C4339C6923CF5A9F8629948BF3A4B79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/4/326130613a363034343a623030623a3a2f34382d3438203d3e20323035383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:d9:82:76:41:a0:98:08:8b:f8:98:82:2f:df:dc:26:01:48:
         80:68:45:eb:f3:62:bf:00:f5:65:97:ad:21:ba:e9:85:31:55:
         42:b2:50:b0:91:eb:11:4b:87:76:1b:e6:f0:0d:8f:8f:b6:9d:
         db:9d:2f:8f:17:da:d5:92:ad:23:a7:0c:fa:1c:a9:85:7e:12:
         1c:b2:b7:4b:98:f1:ef:b6:cf:92:47:5e:e9:56:ad:83:f8:5b:
         0c:e5:8f:92:d2:04:4b:5e:c8:26:78:17:9f:92:89:b2:9d:ca:
         c2:54:99:46:f1:5a:59:4d:24:6e:f7:5a:2e:ca:79:45:4a:2f:
         a6:46:cf:1c:7b:ce:33:9d:32:0a:7d:d8:3b:58:51:bc:77:ca:
         65:98:67:2e:79:2c:14:4c:13:e3:f6:15:d8:76:e6:87:68:e3:
         c4:e7:ee:eb:fa:96:bc:b3:d1:b3:d0:ef:41:bd:ae:25:bb:9f:
         38:ab:7d:7b:37:fa:94:02:c6:d8:01:bd:18:39:88:54:4e:95:
         06:d9:67:fd:37:ea:c7:fa:10:b7:80:c5:68:af:b5:ac:8c:db:
         8f:89:ac:f7:74:1c:58:34:22:b2:56:2d:bc:5f:79:cd:2f:ba:
         a3:5c:4a:38:f8:83:74:bc:7a:7f:dc:19:49:3a:ba:4b:bd:03:
         6a:da:d3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:18 2024 by rpki-client on console-fra.rpki-client.org