Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623030303a3a2f33362d3438203d3e20323135333637.roa
File:                     326131343a3763303a623030303a3a2f33362d3438203d3e20323135333637.roa (raw, json)
Hash identifier:          OEy0tfw/aza4tydWhCoCCkxaOabfbA/YQDh2Cq1aCWY=
Subject key identifier:   61:EA:46:99:66:04:85:3D:84:BE:6B:65:31:4A:B9:F2:8E:82:60:0E
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       2EBCC35ECE087C32E5B4A107A0754AA508EB2B96
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623030303a3a2f33362d3438203d3e20323135333637.roa
Signing time:             Fri 15 Mar 2024 19:50:28 +0000
ROA not before:           Fri 15 Mar 2024 19:45:28 +0000
ROA not after:            Fri 14 Mar 2025 19:50:28 +0000
asID:                     215367
IP address blocks:        2a14:7c0:b000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:bc:c3:5e:ce:08:7c:32:e5:b4:a1:07:a0:75:4a:a5:08:eb:2b:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Mar 15 19:45:28 2024 GMT
            Not After : Mar 14 19:50:28 2025 GMT
        Subject: CN=61EA46996604853D84BE6B65314AB9F28E82600E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:01:93:f1:e3:06:c2:94:df:cf:97:43:aa:1b:
                    00:e5:83:96:b7:38:af:67:f2:41:28:e1:e0:4f:9b:
                    e8:76:ab:96:61:ae:e5:69:b5:64:a0:ad:23:ce:b0:
                    06:07:4a:b5:8a:0e:4c:70:b0:8e:3c:33:08:38:12:
                    f6:85:76:6e:e4:a8:dc:56:c5:d0:5b:d9:20:eb:de:
                    7f:a9:1c:c8:e0:75:80:63:ef:fc:85:19:f3:0b:f3:
                    cb:31:ce:54:6a:b0:ef:27:9b:6f:bc:da:2c:3e:75:
                    60:60:6c:34:13:d2:8d:da:dd:8d:0b:7c:6f:e2:97:
                    43:5d:3a:c3:97:df:cb:38:f3:7d:bb:b1:a6:9b:55:
                    fd:d9:3d:bb:5b:61:28:22:b9:2b:39:f4:cb:27:8d:
                    ef:1a:e3:3b:20:9c:0a:18:a8:32:d1:f9:cf:14:08:
                    38:58:99:20:dc:61:df:34:74:f9:a2:d1:45:12:76:
                    4e:a0:8a:c8:9d:ff:2e:d5:df:e3:c3:bd:5b:d7:1a:
                    1e:9f:9a:5e:a7:9c:76:f2:31:8d:b6:01:4a:7d:ad:
                    e9:66:f6:2a:0c:5a:18:b2:ca:b8:9e:83:20:e2:d8:
                    7d:bd:6a:62:36:e5:94:6a:47:3e:83:5e:58:3e:20:
                    9e:8c:aa:3a:31:74:a6:78:1f:f6:ea:3f:57:3a:1b:
                    46:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EA:46:99:66:04:85:3D:84:BE:6B:65:31:4A:B9:F2:8E:82:60:0E
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763303a623030303a3a2f33362d3438203d3e20323135333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         37:06:d8:76:1f:fa:0a:85:1b:8f:26:94:66:d0:06:f8:48:54:
         62:e4:b8:0f:e2:c9:d4:fb:5f:e3:ce:ee:4f:b8:76:6a:48:a8:
         00:34:a2:3e:bd:cd:35:32:96:14:86:00:37:08:43:b6:b1:60:
         72:dd:bb:72:f2:6d:a5:ce:85:60:f7:08:97:db:e0:2a:be:8d:
         50:54:e5:de:fa:2b:a4:85:5f:72:3d:8a:85:f1:12:56:87:cf:
         03:f4:a3:32:5e:a8:4f:d1:14:a2:95:f5:87:50:a4:93:76:bd:
         9d:78:2f:12:99:db:6f:e6:1a:c9:4b:3c:cf:df:ba:74:7f:e0:
         8d:39:48:c4:0f:81:ec:fa:b7:40:64:4f:f3:2e:f3:0a:85:d0:
         df:3e:32:ef:98:db:97:6c:21:31:bd:ab:54:0f:07:9f:43:81:
         95:af:cd:c2:45:6d:da:c9:10:32:ff:9c:86:95:22:62:d7:f6:
         84:72:74:bf:b6:e5:7e:25:47:cd:63:18:60:0f:bc:a9:45:43:
         56:d7:26:4d:03:e1:3e:f1:fb:f5:25:5c:35:71:64:d4:21:1b:
         3f:25:11:32:09:77:c4:2e:49:0a:88:79:37:e5:a0:5b:56:82:
         c6:02:66:e0:af:4d:03:ec:12:1c:58:6b:bc:26:c1:ff:ec:dc:
         62:c2:30:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org