Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa
File:                     326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier:          qbbw7w2w/xEL4RStt3AOMP6eSTLJiZdBLUxAStvF3cw=
Subject key identifier:   89:28:23:BF:8D:7A:7F:96:BF:EC:6B:42:F6:D8:67:28:43:0C:E1:7A
Certificate issuer:       /CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
Certificate serial:       612B049E87B9FDBA75118C7E58A538B72F49F291
Authority key identifier: 5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa
Signing time:             Tue 18 Jul 2023 05:10:33 +0000
ROA not before:           Tue 18 Jul 2023 05:05:33 +0000
ROA not after:            Tue 16 Jul 2024 05:10:33 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:5f50::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:2b:04:9e:87:b9:fd:ba:75:11:8c:7e:58:a5:38:b7:2f:49:f2:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
        Validity
            Not Before: Jul 18 05:05:33 2023 GMT
            Not After : Jul 16 05:10:33 2024 GMT
        Subject: CN=892823BF8D7A7F96BFEC6B42F6D86728430CE17A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c4:34:5f:d5:9c:23:29:f2:59:39:bc:26:72:
                    fb:2e:e9:f6:ab:63:6c:0d:3f:23:7e:f2:cc:a1:77:
                    a7:3b:8b:51:ea:39:63:e1:49:27:56:3a:a3:97:40:
                    ce:4e:b6:d2:c4:85:3c:9f:28:82:1d:0f:cf:34:3d:
                    ae:8b:01:cf:bf:a8:d3:4e:38:53:cf:5c:de:66:46:
                    f8:f1:c3:0c:0e:13:d4:38:06:57:3d:8b:b5:7a:5b:
                    61:40:fc:2f:1e:00:59:94:2c:65:1b:94:53:81:4c:
                    81:6f:fe:1b:73:51:f1:b7:f1:80:22:a3:3a:8c:85:
                    2b:48:34:05:df:25:2e:ac:cd:00:d6:0d:89:1b:55:
                    2a:e4:38:58:32:b1:94:0f:da:fc:31:50:7f:bc:d1:
                    36:98:f9:e5:4a:0b:ed:d9:51:6a:cb:65:42:79:73:
                    67:27:78:52:6d:4b:3e:e6:74:43:c6:9b:83:41:38:
                    36:1c:c7:6e:fb:ef:ed:81:d3:26:09:a7:1b:25:bb:
                    39:a1:d2:16:01:f2:13:31:64:ae:dc:89:18:3a:f2:
                    19:69:68:1d:11:59:9e:a3:ce:80:67:e4:4a:0c:5c:
                    e7:53:49:ee:be:50:12:7d:8f:e2:08:f8:bc:02:b3:
                    c5:cc:58:90:cf:5c:5c:b8:2a:45:b9:2d:4f:2b:a6:
                    b6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:28:23:BF:8D:7A:7F:96:BF:EC:6B:42:F6:D8:67:28:43:0C:E1:7A
            X509v3 Authority Key Identifier:
                keyid:5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5f50::/44

    Signature Algorithm: sha256WithRSAEncryption
         6c:f2:37:f9:ea:77:fd:b9:c8:dd:b7:ab:9b:c0:67:73:0f:70:
         da:3c:4b:03:2b:93:03:79:9f:d6:9a:2a:b6:56:29:fa:25:fb:
         af:a9:16:fd:27:df:bd:13:69:6d:ca:14:15:df:ae:7a:22:73:
         6b:63:73:ce:b0:a2:ad:81:a8:a9:b1:cf:44:3b:8e:a7:ab:e7:
         05:da:87:a6:82:98:be:59:a3:8c:e3:01:d4:c8:0e:a0:20:06:
         f3:8e:c3:12:e3:44:35:dd:f4:e6:96:82:1c:b7:f3:1b:a0:dc:
         40:1e:a7:a9:32:9f:85:b8:5c:65:75:bf:e4:ce:56:d9:51:66:
         fa:2b:82:a3:c2:b0:8d:71:03:33:f5:7e:87:37:aa:90:9b:99:
         a3:51:16:87:ae:01:06:22:d6:eb:2d:91:aa:40:2b:e5:f1:bc:
         4d:6f:38:90:cf:06:70:33:5d:e8:25:fc:77:43:10:83:2c:71:
         d3:92:59:d1:b3:cb:27:62:30:80:91:ed:c0:6c:6a:b1:94:95:
         f9:cd:0e:5c:a6:f9:06:5a:25:d0:35:33:92:c3:c4:27:4d:29:
         d0:b7:b7:13:38:4c:84:f8:95:83:55:67:c6:71:c0:f7:90:64:
         cf:37:af:49:ff:b1:0b:d7:1e:6b:ce:3c:b1:91:0f:e0:7e:27:
         e2:49:7e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org