Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203415.roa
File:                     AS203415.roa (raw, json)
Hash identifier:          OMfW6nILk/NOo6mwAmVQ5m6uzVfjA6fH1n9vIqvXrjg=
Subject key identifier:   5F:89:7B:92:95:F6:57:A6:22:2E:9B:F8:84:0D:F9:45:A5:7C:4D:87
Certificate issuer:       /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial:       6A852E56AEE9970E2072BE1D210BD8EF09C4E555
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203415.roa
Signing time:             Sun 01 Jan 2023 23:59:11 +0000
ROA not before:           Sun 01 Jan 2023 23:54:11 +0000
ROA not after:            Sun 31 Dec 2023 23:59:11 +0000
asID:                     203415
IP address blocks:        2a06:a005:5ac::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:85:2e:56:ae:e9:97:0e:20:72:be:1d:21:0b:d8:ef:09:c4:e5:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
        Validity
            Not Before: Jan  1 23:54:11 2023 GMT
            Not After : Dec 31 23:59:11 2023 GMT
        Subject: CN=5F897B9295F657A6222E9BF8840DF945A57C4D87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:88:2f:e0:d6:e0:2a:03:44:2e:f8:f2:9a:5e:
                    cc:13:5a:15:7e:56:eb:85:cf:d8:b1:ad:2e:c2:a2:
                    63:ca:48:43:98:38:9a:80:59:a8:68:ed:d2:d0:24:
                    16:fc:ad:32:ac:ac:e8:16:e6:31:53:3d:a4:60:c8:
                    24:47:74:5b:aa:52:24:a1:49:58:28:7c:e5:f8:0c:
                    0a:14:88:dd:fb:e6:ba:99:df:7a:a7:d2:1f:81:c9:
                    9f:c6:81:53:d5:d4:7d:22:9d:4e:a7:ba:02:66:95:
                    89:76:06:5f:fd:a1:3a:fb:8d:70:a2:c0:e5:68:45:
                    e8:13:3b:2a:f6:12:ff:48:e7:ad:be:da:1c:c2:ce:
                    05:35:ae:e6:3a:af:3f:82:ec:d3:a0:bf:22:9a:1b:
                    fa:b4:5f:09:bc:78:83:8f:20:dd:cf:ad:e4:1d:23:
                    7f:da:3d:22:0e:65:08:f2:5f:85:9b:92:7b:bc:44:
                    f0:45:c8:90:db:ef:8d:d5:81:2b:cb:76:ca:1e:29:
                    d3:ea:3f:01:4d:8e:32:f1:ee:3e:4e:a8:2e:10:03:
                    6f:9b:aa:9a:cb:1e:b6:c2:28:9a:5f:1d:4e:af:34:
                    dc:91:46:bd:b4:72:d4:76:6f:8c:ec:c7:32:f7:64:
                    6b:94:1c:fd:db:0a:ff:45:0b:00:cb:76:7a:00:64:
                    03:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:89:7B:92:95:F6:57:A6:22:2E:9B:F8:84:0D:F9:45:A5:7C:4D:87
            X509v3 Authority Key Identifier:
                keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203415.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5ac::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:93:c8:4d:d1:19:13:41:71:0d:bc:1f:cb:0f:1a:a3:c7:b9:
         ab:2e:dd:ba:41:6e:b9:f8:bb:0c:c6:cf:3e:22:e1:63:9e:d2:
         a1:36:5d:36:d9:dd:ca:33:7e:1e:3f:c0:4b:a5:bc:77:04:b8:
         1d:ed:b3:64:92:2f:e1:a8:36:58:fa:fc:65:76:72:18:83:b1:
         4e:7c:9a:e9:9b:65:0c:22:b5:2d:1c:02:29:5a:e6:70:ed:cc:
         89:df:35:50:38:20:55:cd:b6:36:a2:ab:4f:e6:5a:fb:23:b4:
         3b:15:dd:c4:0a:88:e1:70:15:e8:4a:83:d1:3b:ed:55:02:66:
         4e:6d:cc:86:27:ca:06:ad:6f:c0:26:2c:69:0d:c6:b8:10:a4:
         2a:0c:51:97:c1:7d:c9:ca:1b:3c:a0:61:c7:16:e4:db:a1:21:
         a5:22:b4:75:73:d2:78:05:d6:53:dd:ad:2d:b5:d5:f7:98:85:
         c7:e9:86:2b:a0:e2:25:ee:38:85:75:96:07:0e:89:a1:af:38:
         e1:7a:6c:a3:1a:d7:dd:5c:4a:d0:9d:18:ee:43:ad:30:83:6d:
         7d:20:c4:81:55:99:07:a8:d7:10:93:c2:ef:0f:6e:65:d8:5c:
         a3:99:21:32:30:1f:f8:69:7d:c2:36:b4:7e:33:d7:e5:be:75:
         3e:0a:2c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org