Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a386563303a3a2f34342d3434203d3e203538333339.roa
File:                     326130353a646663313a386563303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier:          +rtnKs+VAUt0ZvImChj0Ff3pySxcAC4qEP6n0bIIp8E=
Subject key identifier:   6C:04:E3:96:FB:E3:41:AC:23:C1:39:D6:93:46:27:0F:A7:5A:12:7F
Certificate issuer:       /CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
Certificate serial:       14900304819FF40C148F49E687B8B43FDA988BFE
Authority key identifier: 5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a386563303a3a2f34342d3434203d3e203538333339.roa
Signing time:             Fri 15 Sep 2023 20:19:21 +0000
ROA not before:           Fri 15 Sep 2023 20:14:21 +0000
ROA not after:            Fri 13 Sep 2024 20:19:21 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:8ec0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:90:03:04:81:9f:f4:0c:14:8f:49:e6:87:b8:b4:3f:da:98:8b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
        Validity
            Not Before: Sep 15 20:14:21 2023 GMT
            Not After : Sep 13 20:19:21 2024 GMT
        Subject: CN=6C04E396FBE341AC23C139D69346270FA75A127F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bd:83:e3:5c:37:01:a4:75:4b:b6:75:76:d1:
                    18:2b:af:a0:1f:27:04:ce:ea:83:20:e1:01:40:16:
                    f5:7a:fd:41:b5:c9:36:e3:0b:38:4b:1e:3f:e3:47:
                    f7:2c:fa:65:96:28:cb:f2:c1:33:c9:0f:23:21:c9:
                    32:a1:01:69:fe:62:7f:90:d2:c4:a5:4a:e0:02:c3:
                    e4:e4:0e:be:85:f2:da:4c:2f:17:02:de:8b:8c:41:
                    ff:db:e0:84:fd:c7:77:d4:64:bc:ee:c9:a5:f1:a1:
                    92:99:b2:43:70:1d:cf:65:13:61:87:89:28:2d:a0:
                    7b:ec:6b:d2:bd:45:73:53:37:1b:fc:c4:f0:e7:56:
                    78:56:a0:5c:cb:04:13:92:b9:75:81:45:02:7a:ce:
                    da:04:eb:35:d6:36:4b:6d:e9:0d:44:db:36:2e:ee:
                    9d:6f:4a:bd:20:de:c9:c2:1c:f6:d4:ff:c4:2c:67:
                    fe:a5:4f:a6:f4:da:30:77:93:46:b2:03:9b:e8:2e:
                    87:3c:fa:81:6f:0f:02:dc:96:b5:dd:32:84:e8:4d:
                    9b:e2:43:d4:d7:8f:62:d4:89:29:d3:8a:2b:52:5a:
                    a0:e8:e3:5a:69:44:16:d8:10:fb:06:9c:bb:34:b1:
                    0f:4a:e6:da:e8:d4:1e:6b:87:e1:33:1f:ec:6f:60:
                    0e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:04:E3:96:FB:E3:41:AC:23:C1:39:D6:93:46:27:0F:A7:5A:12:7F
            X509v3 Authority Key Identifier:
                keyid:5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a386563303a3a2f34342d3434203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8ec0::/44

    Signature Algorithm: sha256WithRSAEncryption
         1d:a3:c6:6b:cb:5d:9c:9d:76:87:21:83:4f:8d:a4:7e:31:99:
         c5:46:11:e9:12:46:2e:77:40:da:fc:dd:fd:2d:f5:6f:a5:5c:
         9b:94:4e:b3:87:b0:11:db:3b:0a:9c:b3:6f:a1:ed:50:3d:51:
         26:2d:f4:33:40:63:cd:22:6d:b1:77:a4:23:8d:a1:70:3d:1e:
         bc:c6:e1:13:22:67:d7:04:a2:90:26:f7:eb:94:ed:07:07:cb:
         d8:0c:21:5a:ee:35:14:ec:a0:2f:3e:cb:2a:25:7e:87:00:d2:
         18:e0:5e:a3:e7:04:2a:9c:a8:ec:b4:85:51:f6:ff:a2:cc:25:
         eb:4d:52:22:01:39:1a:15:7d:39:c4:2d:cd:ea:64:e0:2f:fe:
         d0:af:b3:df:32:79:fb:06:eb:d0:0a:f4:39:c7:2a:af:d4:1f:
         82:55:61:8b:46:03:c7:5e:e0:b3:81:11:7c:f9:eb:38:c6:57:
         f9:09:47:f0:32:a1:d5:f6:42:a9:73:41:45:6d:02:7f:99:db:
         d1:86:01:ae:01:bf:f0:85:9d:10:0c:31:63:c4:16:94:4d:79:
         d0:c6:d3:ee:17:e7:6b:16:29:8c:4e:7b:ae:27:da:af:15:79:
         e1:d2:c7:06:cf:bd:10:ff:f3:47:da:91:ec:22:f3:02:93:aa:
         98:b3:96:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 12:09:28 2024 by rpki-client on console-ams.rpki-client.org