Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a393130303a3a2f34342d3434203d3e20323135333137.roa
File:                     326131343a3763303a393130303a3a2f34342d3434203d3e20323135333137.roa (raw, json)
Hash identifier:          GAvU9LQMIv8xGdafnzdBaIVGk3oZveLI47ye180l99I=
Subject key identifier:   5B:C3:F9:B6:96:9B:10:36:68:D5:93:52:04:28:CE:69:FC:61:DC:45
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       69793A9D4ADBF73E36936BFACA2A6F099F84D965
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a393130303a3a2f34342d3434203d3e20323135333137.roa
Signing time:             Thu 14 Mar 2024 16:45:33 +0000
ROA not before:           Thu 14 Mar 2024 16:40:33 +0000
ROA not after:            Thu 13 Mar 2025 16:45:33 +0000
asID:                     215317
IP address blocks:        2a14:7c0:9100::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:79:3a:9d:4a:db:f7:3e:36:93:6b:fa:ca:2a:6f:09:9f:84:d9:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Mar 14 16:40:33 2024 GMT
            Not After : Mar 13 16:45:33 2025 GMT
        Subject: CN=5BC3F9B6969B103668D593520428CE69FC61DC45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:88:da:9f:50:d5:c7:e4:7e:61:a1:d4:7d:a6:
                    a4:24:05:de:ce:d0:44:25:96:c4:2a:cd:ac:8a:6a:
                    92:b2:9c:90:db:b9:f3:b3:17:31:31:10:7d:8a:05:
                    7f:22:6f:41:77:57:b6:39:48:bf:92:96:be:76:63:
                    41:7c:dd:e0:7d:78:58:9c:9a:d9:77:f1:32:c8:34:
                    21:fa:26:cc:c4:e9:61:bd:bb:96:2b:ea:8f:48:48:
                    70:53:95:f7:6e:65:1f:29:e4:ad:75:9c:1d:77:5e:
                    e2:ce:f2:34:97:5d:10:66:51:6f:86:0e:47:cd:29:
                    b2:ef:90:72:08:0f:d9:35:9c:47:79:00:ea:80:1d:
                    c7:5f:2d:c8:22:f0:eb:9f:b9:fc:77:09:8e:e4:ba:
                    a6:99:05:24:86:1f:a4:01:72:d5:2e:ad:65:6d:88:
                    3e:2a:20:4c:ac:39:2f:91:38:7f:00:38:4c:cb:e7:
                    59:86:1e:bf:f2:1d:7a:ad:78:3b:fe:da:c1:cc:2b:
                    88:50:d7:49:f7:ce:07:89:84:d8:dc:44:1c:d6:39:
                    1d:56:27:c7:9a:c7:09:67:d1:17:9b:b9:b5:86:7e:
                    5d:3e:05:4e:19:75:36:6b:0c:10:77:24:7b:98:7b:
                    d9:ba:10:2d:39:0b:f9:f2:68:1d:e5:91:a0:3b:c6:
                    e4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C3:F9:B6:96:9B:10:36:68:D5:93:52:04:28:CE:69:FC:61:DC:45
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a393130303a3a2f34342d3434203d3e20323135333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:9100::/44

    Signature Algorithm: sha256WithRSAEncryption
         88:05:c7:80:5d:b4:0d:80:e1:b9:7e:1e:ad:a9:80:57:8b:fc:
         c6:b9:9b:4d:6a:fd:a5:54:e3:6d:19:bc:82:7c:d2:9c:b2:25:
         ad:4d:70:b9:76:49:26:ac:9b:1c:e8:74:5e:da:16:f2:7b:65:
         25:40:99:3c:c6:13:07:92:e9:dc:43:56:fb:85:b4:df:e9:e1:
         a4:a5:e2:22:b4:11:e2:27:60:65:5b:56:b3:e8:66:12:32:fa:
         ab:c3:bc:93:bd:97:db:ca:28:7d:7b:f0:9d:b7:3d:e1:dc:6e:
         c3:10:25:e5:65:97:c6:2e:ea:0f:a2:0c:d3:4d:3b:51:e4:46:
         9f:f9:3f:36:75:0e:91:af:65:a2:19:1d:7c:15:4c:e4:62:95:
         ea:f3:54:1c:5f:1f:93:e2:52:c0:50:a0:b0:d6:03:44:f2:53:
         56:61:e8:c2:cd:2e:7f:0b:5d:33:8b:90:98:cd:d0:1f:f3:9f:
         c2:c6:92:72:ef:ca:09:ef:ca:c1:8d:32:42:2a:0c:58:2f:58:
         a8:3a:17:8f:d6:63:0d:68:79:78:0a:c8:72:c7:45:c7:3f:5c:
         81:a5:19:20:36:fa:38:e5:b8:8c:4e:5a:bd:8a:0b:99:94:e8:
         e7:28:4b:34:76:32:f0:4f:9f:21:af:e7:82:72:cc:4d:6c:5d:
         cd:5f:df:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:07 2024 by rpki-client on console-ams.rpki-client.org