Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa
File:                     326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier:          ENd4M6RWtak7ctq/0loqOXy6Rpzi5mWCFsQ3M8U4XvI=
Subject key identifier:   3E:BD:81:B0:7D:48:D6:DD:3E:4E:8B:BB:F5:8F:89:7A:C5:73:C4:C2
Certificate issuer:       /CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
Certificate serial:       6175665370341FC74C578BEE2FB657D10F1D6213
Authority key identifier: 5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa
Signing time:             Sun 23 Jul 2023 22:32:52 +0000
ROA not before:           Sun 23 Jul 2023 22:27:52 +0000
ROA not after:            Sun 21 Jul 2024 22:32:52 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:5f60::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:75:66:53:70:34:1f:c7:4c:57:8b:ee:2f:b6:57:d1:0f:1d:62:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
        Validity
            Not Before: Jul 23 22:27:52 2023 GMT
            Not After : Jul 21 22:32:52 2024 GMT
        Subject: CN=3EBD81B07D48D6DD3E4E8BBBF58F897AC573C4C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6a:56:95:e7:c7:86:c3:81:9a:1f:d9:10:b6:
                    11:dd:ee:ff:af:ea:0e:8d:67:cf:a1:2f:93:8e:c2:
                    a0:90:4a:30:69:97:00:c0:f2:a2:77:8e:26:03:e7:
                    29:a2:e5:15:4e:a8:62:e3:dc:41:8e:ab:aa:09:14:
                    be:fc:4f:e9:ea:78:d0:c6:97:00:f6:86:66:e7:13:
                    84:9f:25:f2:bb:e2:cd:82:bf:6f:ad:3c:b4:77:67:
                    97:5a:85:42:67:bb:fa:12:62:c2:27:b6:2e:63:2c:
                    59:4e:31:90:92:79:9a:a1:ab:e0:20:42:13:10:51:
                    05:c6:57:a9:82:b8:c5:50:be:cb:05:39:3e:d4:95:
                    0b:3b:23:65:c9:22:b3:5d:cc:9f:ec:33:a0:46:fb:
                    1c:6b:d7:f6:35:de:a7:6e:f8:d7:71:09:78:51:5d:
                    91:15:a4:08:db:1b:3e:52:67:c1:5d:e7:b2:91:88:
                    e6:b1:47:fe:c7:34:2f:20:6a:0d:6d:32:36:71:36:
                    43:74:fe:d4:e3:3d:b3:02:3d:6f:c3:f9:a7:8d:1c:
                    e3:ed:c0:01:f3:b9:1e:3a:39:d3:f1:8c:e4:50:3b:
                    ea:33:dd:28:21:49:72:da:59:ec:8c:ed:f1:0e:41:
                    c3:69:0b:7c:6a:ba:96:3b:3d:bb:1f:2d:8d:dc:d3:
                    f7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BD:81:B0:7D:48:D6:DD:3E:4E:8B:BB:F5:8F:89:7A:C5:73:C4:C2
            X509v3 Authority Key Identifier:
                keyid:5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5f60::/44

    Signature Algorithm: sha256WithRSAEncryption
         6a:2f:b9:c2:54:57:08:0d:21:98:78:e3:18:be:e6:5d:31:46:
         6a:73:2b:35:d9:f2:2c:19:40:8e:33:91:14:1e:44:36:f9:85:
         ff:a4:4d:39:23:3a:4a:e1:63:da:88:1a:ca:53:d9:47:b5:ee:
         60:ba:72:62:c9:27:6a:28:f5:0d:01:30:b8:f8:0e:bb:95:4d:
         d9:42:47:41:e5:01:5d:59:4f:a2:5c:d8:90:e3:86:b7:9e:d6:
         98:8d:16:fa:2d:2e:5b:b4:1c:a0:08:f8:7e:b7:07:19:55:a9:
         92:02:16:13:e0:fe:cd:06:c5:e6:c3:ff:32:82:f4:d7:d9:f2:
         8f:ef:b7:01:2e:ef:ba:6c:a5:67:3b:35:a5:35:27:41:01:ea:
         88:de:39:13:7f:80:0e:f7:46:e7:4e:16:dd:b6:6b:e5:ac:bc:
         c9:a2:5f:dc:29:74:27:e5:21:03:09:f2:3a:d6:17:4c:a8:1f:
         80:5c:fd:c3:53:e3:15:ee:3c:88:17:df:53:dd:1e:74:22:c2:
         68:09:62:94:cf:31:94:00:a3:15:d1:06:4c:f6:96:0f:cd:49:
         06:ae:2c:2d:4a:81:97:81:36:59:f4:f5:af:62:6f:b1:5d:86:
         11:a1:40:3a:dc:9f:e5:ef:4f:aa:d4:1e:56:6e:b5:40:6a:a0:
         07:44:e8:58
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUYXVmU3A0H8dMV4vuL7ZX0Q8dYhMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZCNTA1Njc5MUM2RjFGMjg4OTFCMjRENEJEMkZDNzkz
QjdENzk0NjAeFw0yMzA3MjMyMjI3NTJaFw0yNDA3MjEyMjMyNTJaMDMxMTAvBgNV
BAMTKDNFQkQ4MUIwN0Q0OEQ2REQzRTRFOEJCQkY1OEY4OTdBQzU3M0M0QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjalaV58eGw4GaH9kQthHd7v+v
6g6NZ8+hL5OOwqCQSjBplwDA8qJ3jiYD5ymi5RVOqGLj3EGOq6oJFL78T+nqeNDG
lwD2hmbnE4SfJfK74s2Cv2+tPLR3Z5dahUJnu/oSYsInti5jLFlOMZCSeZqhq+Ag
QhMQUQXGV6mCuMVQvssFOT7UlQs7I2XJIrNdzJ/sM6BG+xxr1/Y13qdu+NdxCXhR
XZEVpAjbGz5SZ8Fd57KRiOaxR/7HNC8gag1tMjZxNkN0/tTjPbMCPW/D+aeNHOPt
wAHzuR46OdPxjORQO+oz3SghSXLaWeyM7fEOQcNpC3xqupY7PbsfLY3c0/cVAgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQUPr2BsH1I1t0+Tou79Y+JesVzxMIwHwYDVR0j
BBgwFoAUX7UFZ5HG8fKIkbJNS9L8eTt9eUYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTc5YzJiMDktZWJkZC00YTZjLWE5NzUtMjRlMWEyMjYy
ZjRmLzAvNUZCNTA1Njc5MUM2RjFGMjg4OTFCMjRENEJEMkZDNzkzQjdENzk0Ni5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzVGQjUwNTY3OTFDNkYx
RjI4ODkxQjI0RDRCRDJGQzc5M0I3RDc5NDYuY2VyMIG1BggrBgEFBQcBCwSBqDCB
pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2U3OWMyYjA5LWViZGQtNGE2Yy1hOTc1LTI0ZTFhMjI2MmY0
Zi8wLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzU2NjM2MzAzYTNhMmYzNDM0MmQzNDM0
MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwV9gMA0GCSqGSIb3DQEB
CwUAA4IBAQBqL7nCVFcIDSGYeOMYvuZdMUZqcys12fIsGUCOM5EUHkQ2+YX/pE05
IzpK4WPaiBrKU9lHte5gunJiySdqKPUNATC4+A67lU3ZQkdB5QFdWU+iXNiQ44a3
ntaYjRb6LS5btBygCPh+twcZVamSAhYT4P7NBsXmw/8ygvTX2fKP77cBLu+6bKVn
OzWlNSdBAeqI3jkTf4AO90bnThbdtmvlrLzJol/cKXQn5SEDCfI61hdMqB+AXP3D
U+MV7jyIF99T3R50IsJoCWKUzzGUAKMV0QZM9pYPzUkGriwtSoGXgTZZ9PWvYm+x
XYYRoUA63J/l70+q1B5WbrVAaqAHROhY
-----END CERTIFICATE-----
Generated at Mon Jun 3 12:09:28 2024 by rpki-client on console-ams.rpki-client.org