Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a356637303a3a2f34382d3438203d3e203538333339.roa
File:                     326130353a646663313a356637303a3a2f34382d3438203d3e203538333339.roa (raw, json)
Hash identifier:          zznlzoK0Yf0bkL9+UAZixQhiL3TniUTvIcC063RL/gM=
Subject key identifier:   C5:6E:ED:05:05:C9:39:95:D7:45:64:94:4A:AE:C5:FD:C1:A9:6E:80
Certificate issuer:       /CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
Certificate serial:       4DB8D2BA541744284B72A520539911F729CE1F
Authority key identifier: 5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a356637303a3a2f34382d3438203d3e203538333339.roa
Signing time:             Mon 04 Sep 2023 13:03:44 +0000
ROA not before:           Mon 04 Sep 2023 12:58:44 +0000
ROA not after:            Mon 02 Sep 2024 13:03:44 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:5f70::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b8:d2:ba:54:17:44:28:4b:72:a5:20:53:99:11:f7:29:ce:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
        Validity
            Not Before: Sep  4 12:58:44 2023 GMT
            Not After : Sep  2 13:03:44 2024 GMT
        Subject: CN=C56EED0505C93995D74564944AAEC5FDC1A96E80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:80:da:32:cc:70:bf:36:36:bd:a9:8b:76:fe:
                    87:c9:7a:b4:4c:d8:9d:da:cb:86:af:e3:7f:ba:d9:
                    b7:5a:2f:f0:af:31:c1:85:4e:1a:cb:c6:ac:09:4f:
                    d6:53:fa:5b:d9:1c:c5:96:a9:58:d8:3f:ff:0a:c4:
                    55:55:03:07:d3:ba:51:7f:b7:56:cd:c3:46:95:8a:
                    9d:93:84:65:56:97:7d:41:48:fa:20:4b:a7:2c:76:
                    89:bf:2e:e7:d1:d0:b4:4f:28:c6:df:19:9a:b5:bf:
                    da:eb:5c:97:de:82:46:b0:b2:52:c7:d9:43:91:06:
                    86:55:75:6b:ec:43:ed:1e:7d:7d:5c:bf:58:13:12:
                    8b:a5:59:7c:ed:95:e2:31:44:04:78:43:34:1f:f8:
                    05:a4:26:c1:97:c5:c4:2b:9d:06:0c:1e:c7:3c:68:
                    9b:70:92:fb:98:e6:0b:67:c9:1c:0c:6c:56:55:3d:
                    69:f3:c5:9c:74:f4:5a:43:e9:6e:1d:89:04:fb:3c:
                    bc:c1:e1:a5:e1:83:64:9d:e0:6c:01:4b:0a:02:21:
                    dd:fa:c6:bc:68:b3:4b:ee:28:6c:f6:f5:c4:f8:49:
                    9f:1d:39:2c:69:7a:f9:52:e0:e5:f0:52:18:94:25:
                    3d:06:78:03:50:f0:b7:6c:f3:b7:37:72:4e:26:77:
                    cb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6E:ED:05:05:C9:39:95:D7:45:64:94:4A:AE:C5:FD:C1:A9:6E:80
            X509v3 Authority Key Identifier:
                keyid:5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a356637303a3a2f34382d3438203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5f70::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:c8:2a:e5:f2:4b:a9:1f:70:5a:0d:8b:04:37:da:1a:56:d0:
         8f:37:9d:ea:6a:38:c9:28:4f:a2:50:1a:46:9f:23:07:af:5b:
         c9:4a:b4:48:09:fb:f5:0d:b6:13:77:9c:c5:04:b0:52:48:61:
         6f:8d:af:7e:d7:df:67:c8:dd:43:79:49:b3:61:6d:e2:fa:89:
         a9:9e:29:54:5c:33:2d:23:71:1d:9a:af:c5:86:84:02:fe:eb:
         a0:19:ab:00:17:78:1c:c6:13:88:ba:45:dd:06:51:ef:74:39:
         b5:67:bb:f7:71:2f:c7:c3:54:a6:74:93:53:7f:3c:db:98:62:
         4e:cd:db:52:80:14:a5:57:9d:dd:f2:0a:70:af:ff:f9:9e:11:
         db:59:1d:3a:9c:ad:cc:5d:53:ff:c1:80:2a:3e:0a:9e:6c:1b:
         bd:07:b8:31:ea:b6:0a:25:d7:f1:9a:60:d5:cf:d4:33:26:a3:
         f3:30:4b:99:71:05:7d:56:90:8d:3d:58:88:88:e7:05:7c:5a:
         54:45:a9:4d:0f:da:78:da:59:e1:04:60:c9:92:64:61:77:cc:
         75:ad:af:cb:3a:a3:1d:67:8c:b9:0b:48:a6:ca:73:00:26:1c:
         07:4a:88:a1:76:8b:13:7f:3d:3f:5a:b5:50:6d:85:af:fe:bc:
         57:b6:3c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 12:09:28 2024 by rpki-client on console-ams.rpki-client.org