Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a623030623a3a2f34382d3438203d3e20323135333637.roa
File:                     326131343a3763373a623030623a3a2f34382d3438203d3e20323135333637.roa (raw, json)
Hash identifier:          gj0HlX4NIOxrSUPc2OQwzzhVFWRT2tux1G/cRjd7exE=
Subject key identifier:   82:A8:B3:A3:A0:89:E1:C4:8E:E1:96:9D:D1:9C:F2:7B:29:77:2A:99
Certificate issuer:       /CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
Certificate serial:       2354840D248AAB9C083A27F84C9817C4C908A9BE
Authority key identifier: 74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a623030623a3a2f34382d3438203d3e20323135333637.roa
Signing time:             Fri 15 Mar 2024 20:11:04 +0000
ROA not before:           Fri 15 Mar 2024 20:06:04 +0000
ROA not after:            Fri 14 Mar 2025 20:11:04 +0000
asID:                     215367
IP address blocks:        2a14:7c7:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:54:84:0d:24:8a:ab:9c:08:3a:27:f8:4c:98:17:c4:c9:08:a9:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74442e33a8f61580b6b4dfc4828d95e07891f4bc
        Validity
            Not Before: Mar 15 20:06:04 2024 GMT
            Not After : Mar 14 20:11:04 2025 GMT
        Subject: CN=82A8B3A3A089E1C48EE1969DD19CF27B29772A99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:13:3b:8c:a6:1e:3e:e4:ff:0a:4a:1d:ee:93:
                    bb:78:c7:47:ac:31:ea:92:32:bd:11:91:c8:ef:2c:
                    fd:88:89:ef:78:0c:74:ed:8a:89:d5:e9:92:65:9c:
                    62:c9:88:29:a2:5e:5e:39:0c:ae:ef:3c:05:61:68:
                    79:51:57:b0:cd:1f:f3:67:5c:c1:84:bc:35:38:e2:
                    e8:f1:b7:14:41:41:4c:f2:3d:b6:0c:48:33:97:5f:
                    8a:f0:64:e2:9a:61:e4:91:fe:57:df:f1:01:6a:aa:
                    a3:29:69:a3:4f:69:be:4c:ba:93:56:07:11:f6:a4:
                    5b:3c:7a:94:0d:5a:f8:59:b4:99:d0:29:a4:35:e1:
                    3e:ed:bc:79:53:b2:01:a9:39:c1:09:38:85:cb:79:
                    b2:12:63:02:03:d0:9d:6c:ec:33:8a:b7:60:b3:41:
                    49:e8:0f:66:59:d3:59:f1:88:79:b2:2d:ca:52:df:
                    01:a5:0d:b8:56:85:b7:fa:dc:f0:b3:34:f2:cc:74:
                    14:cf:d1:48:09:a3:f0:fd:f6:02:3c:1f:14:90:3a:
                    66:3e:93:44:3c:b4:eb:c7:c4:65:47:18:81:93:f9:
                    e5:57:ff:49:55:67:c8:52:28:16:f7:ed:9d:87:14:
                    0c:e5:ea:ab:1f:ad:98:29:83:95:be:bc:23:2c:df:
                    d8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A8:B3:A3:A0:89:E1:C4:8E:E1:96:9D:D1:9C:F2:7B:29:77:2A:99
            X509v3 Authority Key Identifier:
                keyid:74:44:2E:33:A8:F6:15:80:B6:B4:DF:C4:82:8D:95:E0:78:91:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/74442E33A8F61580B6B4DFC4828D95E07891F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEQuM6j2FYC2tN_Ego2V4HiR9Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed998082-a17e-46c1-a5a8-7d197c958639/0/326131343a3763373a623030623a3a2f34382d3438203d3e20323135333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c7:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:21:ca:c7:fc:f4:4c:12:03:aa:82:e6:37:14:cd:63:eb:df:
         89:94:a8:d6:3f:86:08:54:37:7c:a0:37:62:bd:c2:71:b3:6f:
         78:69:4d:7d:55:01:f8:c4:0a:11:f3:d0:88:f0:97:89:40:7f:
         1f:22:7d:80:54:7e:55:dd:f0:55:27:7a:18:3f:0f:28:56:26:
         c9:29:df:4c:fd:58:53:b9:89:5b:02:68:e6:d4:bb:b0:88:8f:
         09:cf:0f:71:d8:b2:57:97:d4:82:2a:a7:a6:ba:f1:10:0b:f3:
         48:8a:9b:43:46:7f:c9:97:3a:da:88:f5:15:9e:4b:6d:5a:b5:
         17:78:2a:a7:4f:19:b3:9e:ef:00:b1:28:ca:25:72:f4:cb:27:
         44:03:85:06:5c:c7:45:6d:f5:c6:fd:8a:c8:91:fe:89:e1:f7:
         8c:91:ea:a5:c8:67:14:d2:c4:7b:eb:1f:dc:d8:84:18:8e:38:
         82:20:00:be:17:cf:37:56:c8:95:24:ad:6a:d5:77:b9:e5:3e:
         56:d2:b4:2c:ff:65:e7:51:c8:00:13:65:29:4a:10:66:96:bd:
         27:84:0a:b0:b5:32:2b:83:40:43:0c:f3:8e:10:28:ab:4e:72:
         11:4f:79:a6:5c:32:15:59:9f:42:f5:46:44:b7:bc:15:44:5c:
         44:76:98:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org