Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a393130303a3a2f34342d3438203d3e20323135333137.roa
File:                     326131343a3763303a393130303a3a2f34342d3438203d3e20323135333137.roa (raw, json)
Hash identifier:          x2Fmvwt7xK2sBlAYPLlED9MC6VaAeG91eK+If6Br04M=
Subject key identifier:   02:C4:71:EB:C3:84:3B:86:3D:FA:66:F0:3C:BE:71:06:4E:A3:21:87
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       613170C798B3C22585E974BFE8FF4120E704EC68
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a393130303a3a2f34342d3438203d3e20323135333137.roa
Signing time:             Sun 17 Mar 2024 23:50:34 +0000
ROA not before:           Sun 17 Mar 2024 23:45:34 +0000
ROA not after:            Sun 16 Mar 2025 23:50:34 +0000
asID:                     215317
IP address blocks:        2a14:7c0:9100::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:31:70:c7:98:b3:c2:25:85:e9:74:bf:e8:ff:41:20:e7:04:ec:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Mar 17 23:45:34 2024 GMT
            Not After : Mar 16 23:50:34 2025 GMT
        Subject: CN=02C471EBC3843B863DFA66F03CBE71064EA32187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:30:f6:17:d8:77:6d:c7:61:34:80:2d:05:9f:
                    e6:10:ed:a3:fa:a0:d9:7a:0e:67:63:67:0c:36:23:
                    60:e1:f8:b8:ef:9e:48:73:06:02:2a:3f:02:30:8e:
                    e7:52:9a:10:b2:b7:6e:73:d7:58:fd:a3:ba:2e:e1:
                    96:21:48:e2:d1:f6:fe:79:77:45:56:dd:86:f0:9f:
                    e0:a7:16:f9:27:14:ad:78:2b:1d:42:5d:2a:09:f1:
                    ae:b5:dd:27:42:e6:2b:2f:88:33:29:91:8a:eb:a5:
                    32:9d:b5:08:13:1d:71:ae:ad:ff:61:d7:22:d2:e6:
                    22:89:35:cc:d3:76:0b:df:74:0a:22:b7:0c:d2:33:
                    f4:8c:01:73:1b:0f:72:0d:2a:01:17:d6:dd:1f:cc:
                    d5:a0:58:da:46:89:c3:5c:22:55:ec:73:d1:ff:80:
                    59:1b:a6:2f:72:97:1e:a7:ec:e3:41:91:77:c4:a2:
                    8e:bc:7b:a1:d9:f5:03:56:ac:c3:2d:83:da:92:ae:
                    7f:c8:ef:86:37:a6:ab:18:23:4a:b8:72:6f:10:a1:
                    c9:19:9b:6f:30:87:8d:8f:c7:f4:53:99:3d:2a:50:
                    b1:9b:59:08:09:be:ec:f9:c8:3e:e6:50:ae:42:60:
                    ce:cb:3a:d7:87:6e:d3:4a:57:7b:f0:48:23:ae:3c:
                    bd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C4:71:EB:C3:84:3B:86:3D:FA:66:F0:3C:BE:71:06:4E:A3:21:87
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a393130303a3a2f34342d3438203d3e20323135333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:9100::/44

    Signature Algorithm: sha256WithRSAEncryption
         a7:e0:1d:39:df:23:af:b3:81:e3:8b:ba:a9:51:8e:b3:15:f8:
         ef:af:75:06:b0:28:21:08:82:00:78:14:ec:9a:c2:b5:e7:92:
         93:9b:76:0d:e2:1a:34:68:66:a4:ff:de:0e:f6:d8:7b:d2:5e:
         83:0e:c6:76:b9:3b:53:15:6d:e1:d6:15:25:ed:52:14:8e:dd:
         b6:61:25:3f:8f:e5:40:d9:78:2f:49:3a:d0:55:0e:ff:54:51:
         35:7d:d9:93:18:06:ab:34:b7:9e:b0:f0:50:46:d2:ac:5a:ae:
         6c:c9:8d:84:ce:af:e1:5f:b1:56:5f:63:2e:6f:a9:d7:08:80:
         27:19:30:f7:55:f3:63:f5:f6:bd:c9:1b:6d:ee:e2:c0:4e:66:
         ec:44:d1:22:62:cb:02:a0:8f:f6:2f:f2:59:dd:5a:d1:3b:90:
         a0:ee:69:0a:20:61:01:ff:a1:11:ac:d7:be:eb:77:65:d8:f5:
         fa:9e:f1:b4:8f:93:c9:fa:6f:46:d7:9c:e0:36:52:84:42:99:
         e1:cd:d4:84:54:d8:89:b4:dd:8e:20:d4:3c:5b:4c:9e:02:e5:
         bf:6a:8f:7c:e6:4b:5b:da:e0:9d:ff:eb:15:6b:a8:c5:2c:03:
         ac:5e:87:c8:78:e0:8c:b4:c9:00:2a:79:8f:00:a2:bc:60:cf:
         51:1e:7a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org