Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a356630303a3a2f34382d3438203d3e203538333339.roa
File:                     326130353a646663313a356630303a3a2f34382d3438203d3e203538333339.roa (raw, json)
Hash identifier:          afeACE86E2zV3pR+G8gI3/OW9cRe03lUUwsccIC+HjE=
Subject key identifier:   43:C0:87:75:69:3A:A8:33:7A:DA:9C:47:7F:D8:69:64:A3:81:C8:4D
Certificate issuer:       /CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
Certificate serial:       5B7A9E8719DC1AF398833FEF83138AC13009B68D
Authority key identifier: 5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a356630303a3a2f34382d3438203d3e203538333339.roa
Signing time:             Thu 27 Jul 2023 11:04:21 +0000
ROA not before:           Thu 27 Jul 2023 10:59:21 +0000
ROA not after:            Thu 25 Jul 2024 11:04:21 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:5f00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:7a:9e:87:19:dc:1a:f3:98:83:3f:ef:83:13:8a:c1:30:09:b6:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
        Validity
            Not Before: Jul 27 10:59:21 2023 GMT
            Not After : Jul 25 11:04:21 2024 GMT
        Subject: CN=43C08775693AA8337ADA9C477FD86964A381C84D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2d:3c:8a:84:87:77:b7:0b:eb:ad:d1:71:6f:
                    1e:b6:a9:a2:10:96:11:de:3a:47:02:49:b3:02:93:
                    45:fa:db:ab:31:45:11:79:fd:f8:24:4b:86:e6:0d:
                    43:b5:fb:eb:41:31:a1:af:a9:0d:24:d5:e7:af:89:
                    91:32:99:ab:d1:b1:f0:fa:4e:db:6c:2b:27:d0:7d:
                    3d:75:9e:8f:ca:e6:97:8d:57:2a:5c:42:37:c5:8c:
                    c3:60:8f:6f:8e:1f:b8:f0:00:4c:eb:38:21:2d:98:
                    de:e2:47:c5:bd:1b:e4:4a:6f:10:85:50:cf:1e:cb:
                    71:22:2a:ed:47:e2:be:83:15:ec:f9:89:fb:c0:c1:
                    56:5f:ff:95:29:ac:3e:a2:9e:0e:9c:93:0b:87:8f:
                    36:20:b2:2f:74:76:7b:1f:37:c1:f8:bc:33:7a:39:
                    6a:3d:49:af:64:a9:5f:a2:74:05:26:ff:cf:f1:d8:
                    f6:71:c7:d9:9d:73:b6:9e:74:6e:6f:8d:95:66:dc:
                    51:86:ae:b5:e6:35:cb:04:9a:c4:c9:e5:bc:d4:7f:
                    b7:f5:bf:87:3a:d9:fc:ab:50:b6:b5:10:54:2c:06:
                    5e:8f:ff:f2:10:2a:df:fd:b5:ed:7c:d2:ea:2a:fb:
                    85:f0:c7:22:3c:23:9d:40:b7:f7:24:26:e3:63:96:
                    81:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C0:87:75:69:3A:A8:33:7A:DA:9C:47:7F:D8:69:64:A3:81:C8:4D
            X509v3 Authority Key Identifier:
                keyid:5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a356630303a3a2f34382d3438203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5f00::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:bf:80:47:ae:57:f1:0c:9e:69:c7:dc:4f:b9:32:4e:9d:78:
         61:91:5f:83:26:d9:54:9b:88:46:82:64:fa:68:1a:b8:00:d6:
         3f:0e:e5:bb:6c:42:cc:15:52:f5:fa:11:a5:34:d6:05:11:f5:
         ef:ef:9c:a2:0b:6d:16:38:00:ba:1a:b4:69:7a:84:b3:55:f0:
         fd:aa:fa:e6:49:75:14:3e:40:88:46:50:36:88:7d:4d:ca:47:
         ba:11:7b:de:ac:5f:8d:8e:fe:c7:e9:11:24:b7:80:25:27:0c:
         de:f8:06:b6:1c:96:2e:40:8f:55:51:73:33:10:7f:fc:af:44:
         d4:55:a5:71:82:2c:f0:3b:0d:2b:7f:58:c1:9e:7e:fb:ca:c3:
         56:81:9f:de:c8:1f:82:a9:22:36:f0:71:89:32:2c:a8:cf:60:
         da:6e:7f:69:a9:fc:e9:b0:f9:9f:cf:f3:6e:14:61:d4:28:94:
         5e:d3:c3:26:b1:97:7e:c2:99:a0:8a:b2:a5:e1:b6:40:47:90:
         cf:1a:19:c3:7f:43:ef:8a:b4:7b:6c:da:be:14:5b:ef:5a:e6:
         b9:cb:65:67:83:7d:42:47:f5:9d:44:fb:e0:c1:c2:29:22:cc:
         ab:58:d2:47:d8:83:51:21:10:85:d6:c6:ec:1c:45:44:d2:37:
         ec:fc:10:fd
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUW3qehxncGvOYgz/vgxOKwTAJto0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZCNTA1Njc5MUM2RjFGMjg4OTFCMjRENEJEMkZDNzkz
QjdENzk0NjAeFw0yMzA3MjcxMDU5MjFaFw0yNDA3MjUxMTA0MjFaMDMxMTAvBgNV
BAMTKDQzQzA4Nzc1NjkzQUE4MzM3QURBOUM0NzdGRDg2OTY0QTM4MUM4NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNLTyKhId3twvrrdFxbx62qaIQ
lhHeOkcCSbMCk0X626sxRRF5/fgkS4bmDUO1++tBMaGvqQ0k1eeviZEymavRsfD6
TttsKyfQfT11no/K5peNVypcQjfFjMNgj2+OH7jwAEzrOCEtmN7iR8W9G+RKbxCF
UM8ey3EiKu1H4r6DFez5ifvAwVZf/5UprD6ing6ckwuHjzYgsi90dnsfN8H4vDN6
OWo9Sa9kqV+idAUm/8/x2PZxx9mdc7aedG5vjZVm3FGGrrXmNcsEmsTJ5bzUf7f1
v4c62fyrULa1EFQsBl6P//IQKt/9te180uoq+4XwxyI8I51At/ckJuNjloH/AgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQUQ8CHdWk6qDN62pxHf9hpZKOByE0wHwYDVR0j
BBgwFoAUX7UFZ5HG8fKIkbJNS9L8eTt9eUYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTc5YzJiMDktZWJkZC00YTZjLWE5NzUtMjRlMWEyMjYy
ZjRmLzAvNUZCNTA1Njc5MUM2RjFGMjg4OTFCMjRENEJEMkZDNzkzQjdENzk0Ni5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzVGQjUwNTY3OTFDNkYx
RjI4ODkxQjI0RDRCRDJGQzc5M0I3RDc5NDYuY2VyMIG1BggrBgEFBQcBCwSBqDCB
pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2U3OWMyYjA5LWViZGQtNGE2Yy1hOTc1LTI0ZTFhMjI2MmY0
Zi8wLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzU2NjMwMzAzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwV8AMA0GCSqGSIb3DQEB
CwUAA4IBAQAOv4BHrlfxDJ5px9xPuTJOnXhhkV+DJtlUm4hGgmT6aBq4ANY/DuW7
bELMFVL1+hGlNNYFEfXv75yiC20WOAC6GrRpeoSzVfD9qvrmSXUUPkCIRlA2iH1N
yke6EXverF+Njv7H6REkt4AlJwze+Aa2HJYuQI9VUXMzEH/8r0TUVaVxgizwOw0r
f1jBnn77ysNWgZ/eyB+CqSI28HGJMiyoz2Dabn9pqfzpsPmfz/NuFGHUKJRe08Mm
sZd+wpmgirKl4bZAR5DPGhnDf0PvirR7bNq+FFvvWua5y2Vng31CR/WdRPvgwcIp
IsyrWNJH2INRIRCF1sbsHEVE0jfs/BD9
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org