Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a386539303a3a2f34342d3434203d3e203538333339.roa
File:                     326130353a646663313a386539303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier:          KvJH/wS4Sljej2tu4aWdZYIOLm7vOIJ1dLMwGKhrEJE=
Subject key identifier:   F5:4B:87:7A:DF:C0:6C:3D:D1:0A:1E:75:AF:2D:6E:C8:EC:B3:C3:2B
Certificate issuer:       /CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
Certificate serial:       7F32DA0DC0B59AF825C427E475D9AE923996DA4C
Authority key identifier: 5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a386539303a3a2f34342d3434203d3e203538333339.roa
Signing time:             Fri 15 Sep 2023 20:18:52 +0000
ROA not before:           Fri 15 Sep 2023 20:13:52 +0000
ROA not after:            Fri 13 Sep 2024 20:18:52 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:8e90::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:32:da:0d:c0:b5:9a:f8:25:c4:27:e4:75:d9:ae:92:39:96:da:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
        Validity
            Not Before: Sep 15 20:13:52 2023 GMT
            Not After : Sep 13 20:18:52 2024 GMT
        Subject: CN=F54B877ADFC06C3DD10A1E75AF2D6EC8ECB3C32B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c6:c8:79:05:3a:c2:3c:04:c7:6f:69:ea:de:
                    bb:02:b6:2a:c5:f5:97:95:b0:e3:7c:d0:cf:a2:db:
                    65:c7:cc:3d:4c:08:34:a6:37:30:0b:46:09:a5:dd:
                    02:86:e3:64:cd:88:bb:3b:47:70:de:5a:94:de:59:
                    12:e2:23:6f:45:8a:f3:f4:ff:e7:81:6d:0e:5c:b6:
                    88:a4:e0:a4:b1:86:97:5b:d2:19:ba:26:33:db:89:
                    c8:fb:4a:8f:1a:eb:76:ec:6d:71:ae:9f:dd:71:7e:
                    d6:6d:2d:65:f2:83:0f:dd:a6:bc:ad:40:19:3a:52:
                    4d:54:11:12:de:c5:5a:e5:52:86:ae:f8:fc:4b:7f:
                    6b:b0:de:bf:eb:6d:56:3f:a7:6b:10:57:3a:d1:d7:
                    79:89:8e:08:ef:09:5c:30:fe:b8:aa:1d:5f:8d:24:
                    5d:ae:8e:51:53:04:d0:80:bc:91:da:72:6a:c8:52:
                    45:9e:1e:77:a5:6b:16:d0:21:6a:3b:d0:a8:43:16:
                    6b:67:cd:ce:2e:c3:2f:1f:63:bb:41:37:26:6c:02:
                    11:75:86:6e:fb:d4:e7:41:65:59:11:bb:a1:a9:86:
                    45:89:d6:92:02:ef:a8:0c:02:bb:85:52:04:ae:64:
                    ba:c0:76:b2:74:d5:9f:74:6a:23:f9:60:b2:5e:13:
                    37:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4B:87:7A:DF:C0:6C:3D:D1:0A:1E:75:AF:2D:6E:C8:EC:B3:C3:2B
            X509v3 Authority Key Identifier:
                keyid:5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a386539303a3a2f34342d3434203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8e90::/44

    Signature Algorithm: sha256WithRSAEncryption
         58:cc:b4:6f:07:de:b6:aa:69:ec:b6:70:da:29:b4:48:ae:7a:
         17:e3:0c:22:bd:a9:ba:36:9c:0a:d5:cc:2b:bd:f7:d9:4d:ae:
         fe:fd:aa:da:fb:6a:d1:a4:8c:10:7e:76:7a:14:1c:98:3a:05:
         9c:e0:a0:de:fd:74:f2:db:82:4f:ab:3a:d0:97:3a:28:05:0c:
         1b:d4:f5:68:b0:66:94:6b:ff:49:af:e3:37:d9:e3:22:3d:2e:
         c9:68:0e:d6:29:c2:ac:5f:43:f6:19:78:89:10:56:23:e1:4d:
         dc:42:cd:76:66:5e:94:50:bb:fb:97:4d:9d:74:aa:18:9f:cd:
         c3:57:ca:24:a8:a9:87:b5:d5:52:c7:f5:df:5f:5c:b8:67:da:
         0b:2c:69:37:0f:6a:c1:01:12:01:db:c6:0b:18:84:6d:b4:9d:
         07:8b:e6:01:ec:e6:94:ac:18:33:28:e5:13:d6:1b:3d:1e:c6:
         a3:82:ca:70:08:4e:b4:43:22:c1:fe:e5:2c:31:78:3d:4d:91:
         c9:35:59:b6:fb:61:5c:ed:8a:74:9e:cc:48:28:12:27:2e:24:
         f5:12:e6:81:82:96:98:e6:c8:7f:f8:0e:16:75:98:b5:19:a8:
         e5:70:c5:fb:83:4e:8b:c0:12:d1:52:a9:43:88:df:ca:26:4f:
         ca:79:c7:cb
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUfzLaDcC1mvglxCfkddmukjmW2kwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZCNTA1Njc5MUM2RjFGMjg4OTFCMjRENEJEMkZDNzkz
QjdENzk0NjAeFw0yMzA5MTUyMDEzNTJaFw0yNDA5MTMyMDE4NTJaMDMxMTAvBgNV
BAMTKEY1NEI4NzdBREZDMDZDM0REMTBBMUU3NUFGMkQ2RUM4RUNCM0MzMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtxsh5BTrCPATHb2nq3rsCtirF
9ZeVsON80M+i22XHzD1MCDSmNzALRgml3QKG42TNiLs7R3DeWpTeWRLiI29FivP0
/+eBbQ5ctoik4KSxhpdb0hm6JjPbicj7So8a63bsbXGun91xftZtLWXygw/dpryt
QBk6Uk1UERLexVrlUoau+PxLf2uw3r/rbVY/p2sQVzrR13mJjgjvCVww/riqHV+N
JF2ujlFTBNCAvJHacmrIUkWeHnelaxbQIWo70KhDFmtnzc4uwy8fY7tBNyZsAhF1
hm771OdBZVkRu6GphkWJ1pIC76gMAruFUgSuZLrAdrJ01Z90aiP5YLJeEzc1AgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQU9UuHet/AbD3RCh51ry1uyOyzwyswHwYDVR0j
BBgwFoAUX7UFZ5HG8fKIkbJNS9L8eTt9eUYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTc5YzJiMDktZWJkZC00YTZjLWE5NzUtMjRlMWEyMjYy
ZjRmLzAvNUZCNTA1Njc5MUM2RjFGMjg4OTFCMjRENEJEMkZDNzkzQjdENzk0Ni5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzVGQjUwNTY3OTFDNkYx
RjI4ODkxQjI0RDRCRDJGQzc5M0I3RDc5NDYuY2VyMIG1BggrBgEFBQcBCwSBqDCB
pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2U3OWMyYjA5LWViZGQtNGE2Yy1hOTc1LTI0ZTFhMjI2MmY0
Zi8wLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTM5MzAzYTNhMmYzNDM0MmQzNDM0
MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwY6QMA0GCSqGSIb3DQEB
CwUAA4IBAQBYzLRvB962qmnstnDaKbRIrnoX4wwivam6NpwK1cwrvffZTa7+/ara
+2rRpIwQfnZ6FByYOgWc4KDe/XTy24JPqzrQlzooBQwb1PVosGaUa/9Jr+M32eMi
PS7JaA7WKcKsX0P2GXiJEFYj4U3cQs12Zl6UULv7l02ddKoYn83DV8okqKmHtdVS
x/XfX1y4Z9oLLGk3D2rBARIB28YLGIRttJ0Hi+YB7OaUrBgzKOUT1hs9Hsajgspw
CE60QyLB/uUsMXg9TZHJNVm2+2Fc7Yp0nsxIKBInLiT1EuaBgpaY5sh/+A4WdZi1
GajlcMX7g06LwBLRUqlDiN/KJk/KecfL
-----END CERTIFICATE-----
Generated at Mon Jun 3 12:09:28 2024 by rpki-client on console-ams.rpki-client.org