Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a333030303a3a2f34302d3430203d3e20313937343634.roa
File:                     326131343a3763303a333030303a3a2f34302d3430203d3e20313937343634.roa (raw, json)
Hash identifier:          yt7Jf+wL3LI3F+lAbWaZLt31kBm3UT8rTScCWuaLED4=
Subject key identifier:   6F:B1:DD:D3:4F:A9:77:C5:1B:ED:E2:C4:81:5C:A3:3B:72:FE:27:8D
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       39D813583120B2FA927202B85D55F83F9FA09CA3
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a333030303a3a2f34302d3430203d3e20313937343634.roa
Signing time:             Thu 18 Apr 2024 20:57:20 +0000
ROA not before:           Thu 18 Apr 2024 20:52:20 +0000
ROA not after:            Thu 17 Apr 2025 20:57:20 +0000
asID:                     197464
IP address blocks:        2a14:7c0:3000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d8:13:58:31:20:b2:fa:92:72:02:b8:5d:55:f8:3f:9f:a0:9c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Apr 18 20:52:20 2024 GMT
            Not After : Apr 17 20:57:20 2025 GMT
        Subject: CN=6FB1DDD34FA977C51BEDE2C4815CA33B72FE278D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5f:86:1c:d0:19:74:3f:37:3b:11:f2:9f:83:
                    f9:2c:23:91:07:fa:38:4d:54:1c:e9:99:22:59:71:
                    f4:08:aa:ee:0b:11:71:62:ea:e0:6d:57:d4:06:d8:
                    a1:ce:13:1c:48:12:87:58:75:0a:fc:af:a1:92:c5:
                    09:0e:77:1c:71:07:4f:50:f5:99:74:26:1c:1f:ee:
                    38:d7:ef:d0:07:9e:2d:b9:b3:cd:b0:d8:ec:11:31:
                    a4:77:22:1f:a6:11:6b:1b:d1:6b:19:a8:9e:7e:d5:
                    ac:07:fd:47:c3:72:91:41:f8:67:bf:40:24:95:79:
                    80:d4:b9:b8:72:15:8c:b2:86:b7:42:ed:c6:3c:41:
                    cb:9f:b5:f8:38:98:f4:74:ae:97:ae:93:d1:f3:90:
                    1f:69:6f:93:27:b1:ab:97:d3:bf:7f:eb:6c:f3:be:
                    87:a1:b3:19:32:39:82:6b:ad:96:09:b0:a5:0d:40:
                    92:87:dc:70:fc:06:5d:0b:cf:9e:7c:7f:c4:18:bb:
                    81:f5:34:31:6d:9a:79:b2:f0:99:9b:1f:32:ca:3f:
                    b4:74:f6:30:09:32:31:4c:a9:91:28:ea:65:3a:39:
                    8f:11:cc:9b:bf:7c:1a:1e:e4:6c:52:68:61:80:21:
                    dc:37:0f:83:c1:38:70:13:e6:90:f1:58:92:8d:f6:
                    cf:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B1:DD:D3:4F:A9:77:C5:1B:ED:E2:C4:81:5C:A3:3B:72:FE:27:8D
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a333030303a3a2f34302d3430203d3e20313937343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:3000::/40

    Signature Algorithm: sha256WithRSAEncryption
         45:e3:92:76:79:b2:0b:7e:cb:f5:a3:78:2e:0f:94:0c:8f:51:
         9c:c5:ef:e9:7e:cd:0a:35:cf:a1:3f:9c:30:5b:96:5c:05:7d:
         3a:bc:31:b6:e6:41:f0:c2:75:c5:24:3c:a6:b5:e2:5c:91:0a:
         70:22:4d:53:1b:1d:e5:ba:ca:06:8c:b7:76:6a:49:7d:21:af:
         b4:ae:e3:8a:00:41:d1:ed:99:d4:ce:e2:f7:04:aa:23:68:f7:
         8c:86:50:b3:85:fb:9f:8d:e7:8b:59:55:99:35:73:96:b8:e2:
         fb:b3:49:f9:1b:0f:93:2f:17:3c:82:e0:82:b2:f3:f4:41:a6:
         6e:88:9c:64:3a:10:f6:4f:34:ca:4f:0d:3f:16:16:ac:2c:e4:
         e2:f9:be:a8:55:df:01:29:c8:4d:42:c6:cf:bf:d4:a1:a7:2e:
         31:64:e8:96:72:c7:e3:0b:1f:97:f1:e4:79:02:d4:02:16:12:
         90:74:41:d2:45:67:2d:ec:0e:38:9c:bc:26:bc:e0:ae:e6:e0:
         16:0b:cd:6a:5f:10:61:bf:38:f0:36:3b:22:ec:f2:85:80:18:
         c0:78:6c:3b:ca:9f:df:fa:ed:ff:e4:18:8b:c3:85:a3:6f:b2:
         e2:a9:bc:5a:c9:de:d5:32:4b:05:b1:12:57:06:79:93:83:4b:
         6f:cc:20:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org