Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a386564303a3a2f34342d3434203d3e203538333339.roa
File:                     326130353a646663313a386564303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier:          QdsIuHQl+QBy4n4PjpBGoPsjGNx/SgYtQFJBsJx13TY=
Subject key identifier:   DD:DA:48:E9:9B:E1:CE:26:D3:8D:29:39:57:38:10:54:A5:92:78:64
Certificate issuer:       /CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
Certificate serial:       25A7B00F7655D526684940E669C091C7F8C5D620
Authority key identifier: 5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a386564303a3a2f34342d3434203d3e203538333339.roa
Signing time:             Fri 15 Sep 2023 20:19:31 +0000
ROA not before:           Fri 15 Sep 2023 20:14:31 +0000
ROA not after:            Fri 13 Sep 2024 20:19:31 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:8ed0::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a7:b0:0f:76:55:d5:26:68:49:40:e6:69:c0:91:c7:f8:c5:d6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FB5056791C6F1F28891B24D4BD2FC793B7D7946
        Validity
            Not Before: Sep 15 20:14:31 2023 GMT
            Not After : Sep 13 20:19:31 2024 GMT
        Subject: CN=DDDA48E99BE1CE26D38D293957381054A5927864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7c:a6:cd:16:c4:8f:71:ee:30:35:5d:e8:9f:
                    50:da:6f:d8:6d:13:a3:22:ff:2b:f0:cf:3a:9e:64:
                    50:26:a4:33:7e:64:08:ed:3a:7b:eb:74:67:04:2b:
                    d1:62:73:38:be:72:c8:8a:9a:7c:a6:85:11:79:97:
                    6a:e7:cf:76:4f:e3:a2:8c:8a:ff:12:ac:e3:60:4c:
                    16:da:65:20:53:fe:f2:8d:fb:a1:96:53:12:0b:38:
                    a2:90:93:da:b0:f0:b6:09:33:00:29:fa:15:6b:e6:
                    b5:58:5e:13:a3:6e:8b:5b:77:b4:7d:ac:38:11:38:
                    1b:49:bc:0c:bd:5e:dc:51:f3:45:98:0b:d4:59:75:
                    eb:d8:ac:d1:c6:08:42:6b:bb:13:0a:9e:d4:5c:1d:
                    cf:07:dc:6b:52:4f:69:71:bd:dd:9b:92:c6:f1:ce:
                    fb:f0:6b:43:4a:19:60:45:d4:cb:28:c5:59:c0:15:
                    69:7a:4e:1d:b8:04:a4:45:2e:2f:78:92:ec:59:cd:
                    1a:31:72:4e:e2:ca:4b:13:8a:96:97:45:e6:fe:8a:
                    ad:e6:a9:e2:e7:dc:b3:ff:25:f3:b7:35:0d:3b:b9:
                    2d:45:ad:a1:04:48:4f:5d:35:08:c6:b1:5c:03:21:
                    d1:5d:bb:f9:60:58:e2:62:61:bb:94:56:3a:09:54:
                    ff:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:DA:48:E9:9B:E1:CE:26:D3:8D:29:39:57:38:10:54:A5:92:78:64
            X509v3 Authority Key Identifier:
                keyid:5F:B5:05:67:91:C6:F1:F2:88:91:B2:4D:4B:D2:FC:79:3B:7D:79:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/5FB5056791C6F1F28891B24D4BD2FC793B7D7946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e79c2b09-ebdd-4a6c-a975-24e1a2262f4f/0/326130353a646663313a386564303a3a2f34342d3434203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8ed0::/44

    Signature Algorithm: sha256WithRSAEncryption
         8f:66:65:12:f3:6c:0f:eb:2a:80:2a:5b:ed:f1:ae:30:58:56:
         37:c3:63:69:a2:01:2d:cb:3f:e5:56:6d:33:58:3c:c2:e7:47:
         8b:42:06:26:0a:31:f8:19:5f:e3:53:81:de:5e:16:bc:c6:4d:
         a4:50:b5:29:68:08:4a:2e:7c:d8:df:1f:7c:d5:16:40:47:85:
         b1:69:2f:1d:cf:95:42:3e:4a:b2:28:e3:b3:3b:16:99:11:9a:
         d4:b5:2d:51:af:e9:b9:67:2e:a0:d6:89:b8:3a:07:21:d4:7d:
         dd:6f:e6:0a:06:9a:b9:64:7e:ff:42:a3:b4:6f:74:b3:20:60:
         36:43:a8:8a:49:ad:95:14:73:20:e5:86:bc:b9:4b:d7:eb:2e:
         4e:80:6f:15:94:5d:5e:1f:39:e3:95:49:fa:14:b3:54:33:07:
         03:20:8f:e0:bc:57:e8:f8:6c:40:2b:0a:93:be:1e:b4:f1:40:
         2d:24:41:f0:dd:69:35:c0:88:08:24:0a:34:8a:16:a6:c3:09:
         81:0e:40:98:17:e6:d8:7b:c6:a8:42:4e:98:b0:34:ad:05:46:
         d5:aa:ef:24:71:61:c7:16:f4:25:2b:bb:a7:e5:34:a1:95:0b:
         32:9d:69:a1:f9:8e:05:67:a1:1e:77:df:98:85:83:61:81:58:
         03:ea:ab:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:58:21 2025 by rpki-client