Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7e72e00-b9c8-46bf-aa99-37c022efb774/1/32332e3137362e3138342e302f32342d3234203d3e203336363830.roa
File:                     32332e3137362e3138342e302f32342d3234203d3e203336363830.roa (raw, json)
Hash identifier:          OALypan9aozYESbY2ge2/N4vSrBQONlMeF3Tb9y60Eo=
Subject key identifier:   49:A8:C2:43:12:5D:C6:C0:DD:C3:E5:02:F9:79:BC:A8:E0:53:23:24
Certificate issuer:       /CN=2b75ca250f10a6d223fa5bcb5d706f1704f864c33e1c55ed51
Certificate serial:       20095BF22F85B9ABE28C36F0618188E0BF8AFCF6
Authority key identifier: A9:E6:44:E6:E2:C8:B2:4F:DE:A7:74:1E:75:40:08:6D:94:14:11:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/2b75ca250f10a6d223fa5bcb5d706f1704f864c33e1c55ed51.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7e72e00-b9c8-46bf-aa99-37c022efb774/1/32332e3137362e3138342e302f32342d3234203d3e203336363830.roa
Signing time:             Fri 26 Apr 2024 16:07:09 +0000
ROA not before:           Fri 26 Apr 2024 16:02:09 +0000
ROA not after:            Fri 25 Apr 2025 16:07:09 +0000
asID:                     36680
IP address blocks:        23.176.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:09:5b:f2:2f:85:b9:ab:e2:8c:36:f0:61:81:88:e0:bf:8a:fc:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b75ca250f10a6d223fa5bcb5d706f1704f864c33e1c55ed51
        Validity
            Not Before: Apr 26 16:02:09 2024 GMT
            Not After : Apr 25 16:07:09 2025 GMT
        Subject: CN=49A8C243125DC6C0DDC3E502F979BCA8E0532324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:dc:af:f0:62:13:61:7d:2e:2b:87:d8:00:b9:
                    80:64:25:da:c4:54:22:72:cb:d0:91:d3:18:58:2e:
                    ed:db:a2:05:f9:ae:75:0d:81:e9:aa:44:c5:bf:c3:
                    9f:58:41:8e:99:a9:01:6d:39:5b:65:80:cd:ca:2d:
                    f3:c1:27:64:8b:f4:34:37:6c:e1:2d:98:44:8f:65:
                    26:d0:a5:2c:0c:a1:62:5b:1b:b6:0d:83:7e:3a:5e:
                    7a:9c:b1:cf:d1:61:ea:68:b9:c1:b9:fb:84:1d:e1:
                    98:ce:39:c6:ad:c9:f5:30:ce:b7:42:27:72:26:7c:
                    01:17:e5:f4:18:40:0e:90:06:04:43:a5:ef:c5:70:
                    0c:70:33:e5:6f:93:9b:d7:8c:b1:51:8b:32:83:9c:
                    f0:4d:48:93:51:39:94:dc:f8:34:f7:01:05:10:b7:
                    75:26:8d:6e:91:3b:0e:6c:e2:ba:02:20:44:2b:fe:
                    5c:62:1f:82:f5:27:38:72:26:38:62:14:a0:9d:c0:
                    cf:1c:4a:20:e0:28:55:fc:d7:4a:31:b6:fd:c0:bf:
                    85:71:19:31:cf:5a:73:70:b0:21:7b:97:ee:4b:94:
                    93:f9:41:75:de:fd:45:f1:81:8e:9d:51:56:fd:50:
                    6c:d1:a4:08:ec:c0:75:a4:65:93:39:bc:bb:d4:f2:
                    b4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A8:C2:43:12:5D:C6:C0:DD:C3:E5:02:F9:79:BC:A8:E0:53:23:24
            X509v3 Authority Key Identifier:
                keyid:A9:E6:44:E6:E2:C8:B2:4F:DE:A7:74:1E:75:40:08:6D:94:14:11:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7e72e00-b9c8-46bf-aa99-37c022efb774/1/A9E644E6E2C8B24FDEA7741E7540086D941411B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/2b75ca250f10a6d223fa5bcb5d706f1704f864c33e1c55ed51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7e72e00-b9c8-46bf-aa99-37c022efb774/1/32332e3137362e3138342e302f32342d3234203d3e203336363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:07:e6:ca:c7:d6:13:ad:9b:43:a7:30:9d:cb:db:5a:d5:43:
         2b:e6:cf:09:23:ee:b4:8e:c6:fa:3e:37:e2:1a:1a:23:d1:e1:
         45:bf:56:71:2e:fb:77:70:1b:67:be:f2:78:05:00:4e:76:e7:
         2e:49:77:04:86:e9:6c:36:32:8b:21:67:11:76:cc:9e:44:83:
         5d:0f:d3:5a:38:f9:fa:44:8c:7a:9e:5a:a5:b5:c0:9d:93:41:
         9c:e0:33:15:95:48:a8:93:c1:ef:c6:9c:58:79:ef:aa:db:46:
         94:f4:79:01:47:59:7b:99:40:39:84:a4:6c:cf:cd:30:8a:ce:
         3d:02:be:9b:be:a1:fb:6e:5f:a3:39:9c:dc:c2:95:d1:6d:ca:
         f2:5b:b3:c3:d7:80:bb:4a:dd:9f:b2:a4:a1:a8:fe:1c:37:0b:
         19:79:34:52:86:73:c0:7e:cd:e8:89:e6:54:50:29:04:c5:fc:
         e5:05:18:2f:18:c8:ae:e6:ad:ad:0f:64:86:56:56:df:7b:31:
         f4:ec:0d:f3:e3:17:98:f8:23:45:1d:12:84:9b:46:e2:a3:17:
         6e:8d:27:7e:20:60:b9:c2:bb:a4:86:8d:06:1f:df:64:19:3a:
         9d:99:37:ba:66:8d:4f:27:a7:c0:5d:db:06:3b:05:59:26:e1:
         b2:85:0f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----