Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a333330303a3a2f34302d3438203d3e20323134393637.roa
File:                     326131343a3763303a333330303a3a2f34302d3438203d3e20323134393637.roa (raw, json)
Hash identifier:          kbqQruZacwAOm/Ir1ea+7MIb6+2Ds8TzmpXreQ9v1AA=
Subject key identifier:   1A:AA:E1:10:6F:39:33:70:24:6F:39:B3:F1:4A:F7:54:5D:13:CC:E0
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       28ECA6C849255A411ABED5EE7857F10F37A6D520
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a333330303a3a2f34302d3438203d3e20323134393637.roa
Signing time:             Mon 13 May 2024 19:05:43 +0000
ROA not before:           Mon 13 May 2024 19:00:43 +0000
ROA not after:            Mon 12 May 2025 19:05:43 +0000
asID:                     214967
IP address blocks:        2a14:7c0:3300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ec:a6:c8:49:25:5a:41:1a:be:d5:ee:78:57:f1:0f:37:a6:d5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: May 13 19:00:43 2024 GMT
            Not After : May 12 19:05:43 2025 GMT
        Subject: CN=1AAAE1106F393370246F39B3F14AF7545D13CCE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:81:cc:c9:30:dc:16:f6:e4:29:de:02:c7:75:
                    80:59:bb:a4:a7:0a:b8:5e:22:91:b6:7a:20:47:99:
                    79:e3:6c:92:41:a3:72:b3:20:6f:de:03:e9:43:ae:
                    5d:4f:59:9a:a0:d5:49:56:b6:d0:16:67:2b:62:27:
                    57:ce:19:5f:0e:7e:bb:ef:ec:f6:52:3c:31:3d:bc:
                    ee:61:8a:a4:e4:80:86:31:f0:ec:2d:4b:04:ac:10:
                    db:99:47:8b:67:9f:6d:2b:b8:86:ef:11:0e:ef:99:
                    c1:9c:f7:3b:9b:81:40:0c:09:07:41:75:77:81:bd:
                    cd:5a:f8:b8:84:c5:3b:ab:69:ea:56:79:c5:d0:f6:
                    4b:bb:e9:f9:78:6d:75:c5:a2:34:cc:8c:4f:ef:1a:
                    f1:bf:bd:ad:f6:13:fd:d8:c6:19:a8:ac:6b:b6:f0:
                    91:ac:aa:5c:76:59:e2:49:af:bd:05:12:b8:d5:ac:
                    fa:fc:d9:19:7f:d9:8b:30:b8:af:ab:7e:ee:f7:d6:
                    9e:02:f0:6a:ae:c3:d5:2a:8b:80:bd:f6:a0:55:7e:
                    30:c0:33:af:3a:17:6f:c2:b9:18:1d:7c:70:64:8e:
                    a1:6c:a8:73:04:40:52:3f:d7:ba:e0:f9:50:87:14:
                    71:f8:ab:79:e9:31:94:1d:8c:27:c6:9f:57:38:2b:
                    7d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AA:E1:10:6F:39:33:70:24:6F:39:B3:F1:4A:F7:54:5D:13:CC:E0
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a333330303a3a2f34302d3438203d3e20323134393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:3300::/40

    Signature Algorithm: sha256WithRSAEncryption
         82:02:24:2a:35:12:53:86:db:8f:fc:c7:4f:21:11:69:a9:36:
         7a:20:49:2e:50:21:19:a0:ea:5a:87:56:15:3e:4b:88:e7:03:
         f6:bd:8e:f1:3c:2d:18:c4:7d:e5:3f:3d:a6:16:e9:37:99:19:
         9d:3f:d3:5b:ee:88:8b:03:0b:8b:37:eb:81:b0:2f:31:e0:be:
         02:12:fd:5e:6e:1a:81:42:4b:b9:42:1d:29:05:3e:43:0e:cc:
         57:12:63:26:2f:c2:ec:ee:ac:87:0f:c7:8e:63:f1:61:56:a8:
         50:98:9f:86:7f:ce:29:a5:4d:64:89:aa:0d:ba:79:4f:db:aa:
         4e:c5:09:cc:35:3f:1e:9e:4d:d8:11:bf:7b:f2:f3:06:ea:66:
         29:b7:58:e6:eb:1c:70:46:34:a4:ce:08:e7:91:a6:b2:b5:41:
         8b:22:de:78:b4:e9:69:9d:d9:5f:f1:f9:03:d1:73:69:e9:ae:
         a2:24:03:98:7a:fd:f9:ec:e8:41:27:10:4c:dd:5a:a2:df:44:
         5b:65:13:5a:3e:49:fc:ec:61:24:20:58:32:9f:7b:85:79:ad:
         30:43:24:07:1f:b3:c6:c9:68:65:65:a1:5d:c1:97:7a:a9:18:
         a7:f8:5f:b3:c9:1e:ab:a4:ef:c6:db:92:14:cf:4d:24:d0:d8:
         14:bd:91:70
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUKOymyEklWkEavtXueFfxDzem1SAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ0NDJlMzNhOGY2MTU4MGI2YjRkZmM0ODI4ZDk1ZTA3
ODkxZjRiYzAeFw0yNDA1MTMxOTAwNDNaFw0yNTA1MTIxOTA1NDNaMDMxMTAvBgNV
BAMTKDFBQUFFMTEwNkYzOTMzNzAyNDZGMzlCM0YxNEFGNzU0NUQxM0NDRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCugczJMNwW9uQp3gLHdYBZu6Sn
CrheIpG2eiBHmXnjbJJBo3KzIG/eA+lDrl1PWZqg1UlWttAWZytiJ1fOGV8Ofrvv
7PZSPDE9vO5hiqTkgIYx8OwtSwSsENuZR4tnn20ruIbvEQ7vmcGc9zubgUAMCQdB
dXeBvc1a+LiExTuraepWecXQ9ku76fl4bXXFojTMjE/vGvG/va32E/3YxhmorGu2
8JGsqlx2WeJJr70FErjVrPr82Rl/2YswuK+rfu731p4C8Gquw9Uqi4C99qBVfjDA
M686F2/CuRgdfHBkjqFsqHMEQFI/17rg+VCHFHH4q3npMZQdjCfGn1c4K33xAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUGqrhEG85M3Akbzmz8Ur3VF0TzOAwHwYDVR0j
BBgwFoAUdEQuM6j2FYC2tN/Ego2V4HiR9LwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWQ5OTgwODItYTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4
NjM5LzAvNzQ0NDJFMzNBOEY2MTU4MEI2QjRERkM0ODI4RDk1RTA3ODkxRjRCQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RFUXVNNmoyRllDMnROX0VnbzJWNEhp
UjlMdy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWQ5OTgwODIt
YTE3ZS00NmMxLWE1YTgtN2QxOTdjOTU4NjM5LzAvMzI2MTMxMzQzYTM3NjMzMDNh
MzMzMzMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjMxMzQzOTM2Mzcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAqFAfAMzANBgkqhkiG9w0BAQsFAAOCAQEAggIkKjUSU4bbj/zHTyER
aak2eiBJLlAhGaDqWodWFT5LiOcD9r2O8TwtGMR95T89phbpN5kZnT/TW+6IiwML
izfrgbAvMeC+AhL9Xm4agUJLuUIdKQU+Qw7MVxJjJi/C7O6shw/HjmPxYVaoUJif
hn/OKaVNZImqDbp5T9uqTsUJzDU/Hp5N2BG/e/LzBupmKbdY5usccEY0pM4I55Gm
srVBiyLeeLTpaZ3ZX/H5A9FzaemuoiQDmHr9+ezoQScQTN1aot9EW2UTWj5J/Oxh
JCBYMp97hXmtMEMkBx+zxsloZWWhXcGXeqkYp/hfs8keq6TvxtuSFM9NJNDYFL2R
cA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:07 2024 by rpki-client on console-ams.rpki-client.org