Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a386561303a3a2f34342d3434203d3e203538333339.roa
File:                     326130353a646663313a386561303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier:          ZMx8RgUz+XM0Me2Lkc8RTJDVfz0TexE+bXEkLFZ7Nu8=
Subject key identifier:   CF:2E:F8:1F:BD:79:C1:A3:F7:E4:86:D6:09:F3:27:6A:07:0F:0F:D0
Certificate issuer:       /CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
Certificate serial:       6B340F93652520DA305F15267DB8A0780E9FFAB8
Authority key identifier: 5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a386561303a3a2f34342d3434203d3e203538333339.roa
Signing time:             Fri 15 Sep 2023 20:19:02 +0000
ROA not before:           Fri 15 Sep 2023 20:14:02 +0000
ROA not after:            Fri 13 Sep 2024 20:19:02 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:8ea0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:34:0f:93:65:25:20:da:30:5f:15:26:7d:b8:a0:78:0e:9f:fa:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
        Validity
            Not Before: Sep 15 20:14:02 2023 GMT
            Not After : Sep 13 20:19:02 2024 GMT
        Subject: CN=CF2EF81FBD79C1A3F7E486D609F3276A070F0FD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ea:00:e4:c4:2f:77:da:36:cd:fe:af:6b:25:
                    2b:ab:1c:0e:0a:8d:88:bd:23:4b:53:3f:99:3d:09:
                    d1:28:be:40:84:a6:bc:c6:ed:ec:77:cc:22:7b:53:
                    10:3a:bd:d1:25:d0:6e:94:58:bd:ac:a9:aa:20:5c:
                    5e:de:ea:8e:2d:0a:04:3d:a6:9b:27:ab:3a:59:ad:
                    3f:6c:12:ff:41:b6:de:92:15:6f:e1:ff:e1:7a:41:
                    ff:15:6d:8d:19:11:71:ae:ab:94:43:1d:40:1f:31:
                    ec:c1:3a:50:56:bc:26:72:7b:73:23:1d:7d:7f:7c:
                    da:aa:89:7c:52:d4:f4:5c:fd:67:4f:e2:a7:8c:d7:
                    4e:68:91:7d:65:ec:b2:c7:a0:8b:4f:97:70:b0:4e:
                    33:e9:9c:c6:f8:53:8e:ca:cc:81:44:8a:cb:bc:f7:
                    1e:3b:af:60:b1:a9:98:c6:fd:9c:db:99:c4:b2:a0:
                    20:a5:48:0e:1e:67:9c:be:be:8b:cc:3c:b1:5a:5b:
                    2a:3a:c4:2e:45:18:9b:46:cd:2a:cc:4c:ba:9c:a4:
                    8f:69:52:48:9f:ea:eb:02:7e:ad:6a:87:e0:28:1e:
                    33:9e:77:e0:df:7e:d6:2f:46:fb:25:34:24:30:1c:
                    86:e2:fb:c2:03:1d:30:4b:7f:3e:49:99:f5:05:77:
                    d4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:2E:F8:1F:BD:79:C1:A3:F7:E4:86:D6:09:F3:27:6A:07:0F:0F:D0
            X509v3 Authority Key Identifier:
                keyid:5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a386561303a3a2f34342d3434203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8ea0::/44

    Signature Algorithm: sha256WithRSAEncryption
         4a:b0:9a:f6:dc:1f:49:d3:fb:4d:74:c0:36:52:02:da:bd:35:
         29:7e:93:19:13:48:3a:c4:a2:ad:fd:e7:29:94:25:96:ff:40:
         06:8c:93:01:26:09:20:c8:e1:be:fc:ff:7a:af:9c:87:d7:1e:
         c7:6a:12:0e:6f:ec:8d:ea:b2:db:7f:03:7f:8e:d5:71:3e:b7:
         5d:2c:54:ce:be:19:b1:48:10:39:06:78:91:1c:3b:c7:23:11:
         a3:f4:31:ca:be:c0:a6:4e:4d:dc:e2:03:12:e0:3a:a9:66:81:
         9f:17:b7:4f:ae:3d:9c:ef:10:dd:73:a1:c9:44:6c:42:f0:32:
         13:1d:0e:75:98:3e:3e:98:79:b9:e0:23:84:a3:43:e3:34:7f:
         c2:c0:0f:13:1e:b9:67:20:05:2e:7b:5d:23:25:d6:93:e3:94:
         9c:1e:08:32:c0:70:0c:6a:20:a7:68:e8:a5:fa:1a:e2:1e:c3:
         af:47:f7:b7:a7:6e:48:6f:b6:0a:40:82:ed:c2:77:ef:46:0d:
         8b:d4:88:35:43:44:5d:e7:cd:06:fd:02:f5:72:af:26:3f:1f:
         c3:b2:17:0b:3f:9d:cd:55:26:89:f1:25:71:d1:e0:c4:8d:7f:
         6f:c1:53:ce:24:6c:1b:3c:6c:23:58:4f:61:74:09:96:c7:ba:
         b1:33:75:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org