Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa
File:                     326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier:          kaCVR4zULijBwrdZqVQGV+N0e3aiYAy1fMiO7HpIwIY=
Subject key identifier:   69:D2:A2:7D:67:62:32:3F:DF:6C:87:81:F1:60:12:62:0F:5C:B2:EB
Certificate issuer:       /CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
Certificate serial:       51DA902951C1F1808180F2859A3315D2704FF3ED
Authority key identifier: 5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa
Signing time:             Sat 23 Sep 2023 03:23:48 +0000
ROA not before:           Sat 23 Sep 2023 03:18:48 +0000
ROA not after:            Sat 21 Sep 2024 03:23:48 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:8e10::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:da:90:29:51:c1:f1:80:81:80:f2:85:9a:33:15:d2:70:4f:f3:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
        Validity
            Not Before: Sep 23 03:18:48 2023 GMT
            Not After : Sep 21 03:23:48 2024 GMT
        Subject: CN=69D2A27D6762323FDF6C8781F16012620F5CB2EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fa:b6:c4:f8:8a:b8:60:a2:1c:f6:1b:65:ed:
                    e3:bb:bf:02:05:89:ac:2c:90:94:48:2a:a9:07:45:
                    cb:44:ea:9a:79:2c:92:f0:79:fc:44:c1:17:83:1f:
                    42:30:0a:c0:f9:c1:3a:f5:c3:be:fb:10:4b:b4:21:
                    22:04:a8:32:98:22:d1:80:9c:37:c4:d9:e7:81:20:
                    4b:f6:21:80:ee:61:d1:02:b2:bd:05:df:45:34:ca:
                    17:03:b2:86:86:22:c2:03:05:f1:74:40:35:e4:8f:
                    5c:b2:17:15:89:f4:1a:20:66:a8:20:a1:58:fb:d6:
                    12:db:a8:d7:a9:1c:3d:89:c9:02:08:5e:b7:a0:06:
                    49:5e:38:0a:74:2e:6c:dd:e8:cc:3e:79:36:24:97:
                    0d:d6:33:5a:f3:b3:10:97:85:62:a9:6d:fe:1b:fc:
                    2e:83:09:25:28:89:54:f3:da:d0:d1:cf:d0:ad:3a:
                    0e:0a:9f:5a:52:87:a6:58:57:1b:2c:2f:72:ab:75:
                    56:1d:62:00:eb:94:fe:31:0a:0f:fd:a4:d0:93:02:
                    17:bd:b4:81:fc:bc:cd:ba:a6:19:63:e3:eb:e4:68:
                    c0:04:a5:dc:10:a4:b2:29:fd:a7:3b:6b:ec:75:39:
                    c4:53:2c:12:e9:83:cc:b8:14:7f:66:ea:cf:57:b0:
                    44:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D2:A2:7D:67:62:32:3F:DF:6C:87:81:F1:60:12:62:0F:5C:B2:EB
            X509v3 Authority Key Identifier:
                keyid:5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8e10::/44

    Signature Algorithm: sha256WithRSAEncryption
         86:1e:c5:cc:c4:e6:d8:57:51:e3:51:03:96:32:03:b1:9a:42:
         50:bf:87:25:e3:e1:ad:d2:b2:32:52:d1:70:f7:80:f1:42:42:
         20:14:11:f2:b8:24:f8:51:43:79:35:48:3d:03:6c:9c:81:8b:
         9e:08:bb:d5:fe:9b:15:4a:f5:32:dc:b7:8c:de:55:56:62:82:
         5c:80:3d:60:b3:8e:e8:f5:89:eb:46:d0:c5:bd:2a:61:3e:83:
         9e:87:cc:ac:0f:49:88:c4:f8:ee:e6:63:a7:b0:39:c0:bd:8c:
         62:53:d3:8a:10:c7:c5:82:eb:b1:7a:ff:49:a2:e1:52:6f:7e:
         87:22:fb:98:31:f8:bf:c4:9d:91:2c:32:6e:54:5e:93:5c:8f:
         f0:04:8d:78:cd:62:1c:2f:69:c7:b1:fa:73:4b:cd:9b:45:68:
         06:0d:a3:a3:87:80:d5:64:52:32:7e:18:5d:ea:bc:ce:19:9d:
         3c:58:b3:3a:2e:13:de:92:63:b0:0e:7f:76:47:9b:dc:cd:3f:
         92:97:71:05:1f:4c:57:3a:7c:30:4e:8d:b0:4b:18:93:a8:e0:
         3f:11:fd:7b:16:1c:b3:2d:ca:ee:13:a6:ef:e8:ad:9d:df:2e:
         ff:3d:c4:94:59:fa:3f:62:09:7e:11:75:b6:5e:42:32:bb:e5:
         c6:8e:8b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 12:09:28 2024 by rpki-client on console-ams.rpki-client.org