Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a386532303a3a2f34342d3434203d3e203538333339.roa
File:                     326130353a646663313a386532303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier:          fueqKUV/J1LI47+VyH0TN2nOOhUeu4gf9HYWxMKxunI=
Subject key identifier:   7D:03:39:AE:6C:87:F0:3D:E1:AE:A9:C3:3D:60:D9:5E:8E:05:E6:AE
Certificate issuer:       /CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
Certificate serial:       2E716E877EB7B41F5015FFF59766B1A05BDFA40F
Authority key identifier: 5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a386532303a3a2f34342d3434203d3e203538333339.roa
Signing time:             Fri 15 Sep 2023 20:18:26 +0000
ROA not before:           Fri 15 Sep 2023 20:13:26 +0000
ROA not after:            Fri 13 Sep 2024 20:18:26 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:8e20::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:71:6e:87:7e:b7:b4:1f:50:15:ff:f5:97:66:b1:a0:5b:df:a4:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
        Validity
            Not Before: Sep 15 20:13:26 2023 GMT
            Not After : Sep 13 20:18:26 2024 GMT
        Subject: CN=7D0339AE6C87F03DE1AEA9C33D60D95E8E05E6AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cf:d9:3f:fe:1a:96:08:84:7f:ee:71:0e:46:
                    a6:c4:f2:07:de:68:84:cd:29:68:8d:53:40:70:76:
                    7a:a9:8e:d5:ef:74:09:8a:82:e3:a9:ee:6a:5c:6d:
                    c7:d5:08:5a:36:6e:0a:fd:6a:52:64:df:29:26:f8:
                    fc:1e:25:94:35:e8:21:b4:de:d5:02:8c:75:53:b2:
                    da:a8:82:8e:c2:7e:45:e4:56:49:34:1b:98:68:7b:
                    ef:e7:9f:20:8a:0e:09:23:a8:d1:ca:79:59:13:a5:
                    4e:74:8b:09:bb:a2:e1:75:30:92:d5:7c:66:24:bc:
                    72:df:8a:93:e4:02:28:14:78:bf:6d:ba:8d:b1:54:
                    a3:40:95:1e:7d:a0:03:34:fa:4d:6b:b3:86:c7:15:
                    ef:00:00:78:a3:51:89:0c:91:98:af:3f:1c:94:a5:
                    a4:ca:28:a0:0e:16:87:f8:9a:72:32:10:fe:45:22:
                    fa:0b:50:9a:4e:5c:94:5b:f7:62:8f:94:52:16:5f:
                    f6:df:61:97:1b:ba:f9:26:fc:44:b2:ca:33:9f:2b:
                    7a:53:bd:48:cf:29:34:b4:b2:b8:4c:b5:a6:f9:87:
                    7a:8a:01:0e:db:f8:61:f1:5d:d8:c0:67:6a:2a:e1:
                    54:e1:9f:40:df:21:de:99:42:b4:bd:64:a8:40:af:
                    94:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:03:39:AE:6C:87:F0:3D:E1:AE:A9:C3:3D:60:D9:5E:8E:05:E6:AE
            X509v3 Authority Key Identifier:
                keyid:5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a386532303a3a2f34342d3434203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8e20::/44

    Signature Algorithm: sha256WithRSAEncryption
         4f:8f:cc:65:8a:cb:b2:08:06:d6:7b:49:31:ed:5f:af:9d:00:
         1f:39:9a:2e:d5:80:83:04:ee:ab:ac:96:84:55:ea:7d:4c:9f:
         e9:93:96:72:b4:af:79:90:e6:79:be:aa:e2:d4:32:be:9c:c1:
         0d:9d:37:93:42:b7:3d:79:a7:b9:e0:f3:a9:45:a5:b4:ed:f2:
         3f:b8:b0:86:92:0f:b3:a5:17:7c:e8:01:a3:d5:e5:28:ba:ca:
         97:0d:b8:c3:e3:85:78:75:69:d1:11:1d:0e:32:7e:2b:56:a5:
         e3:49:94:ee:07:9f:3d:69:63:ba:e7:35:10:6c:6a:8d:9d:ac:
         8b:c5:ac:c8:f0:a3:d4:da:8a:dd:1c:35:ef:2f:65:b4:13:36:
         89:c4:22:84:37:fd:47:2f:5a:6d:94:61:db:a1:27:89:41:4d:
         fc:45:1a:0d:7b:28:f7:c1:c1:70:08:8e:24:33:ee:ee:b4:6c:
         42:7b:3d:db:95:99:70:fb:4b:ab:0f:1d:ee:45:7e:2b:a1:9c:
         3e:c5:35:64:14:7c:eb:7d:9e:0c:93:94:9d:b0:99:ed:cf:68:
         91:05:9e:a3:e0:60:1f:4e:3e:c0:ef:7d:73:1e:be:ed:8a:20:
         c5:f0:ff:c2:d7:e1:2e:57:d7:cf:fc:bc:a4:81:03:3f:38:e9:
         0f:fe:8e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 12:09:28 2024 by rpki-client on console-ams.rpki-client.org