Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208076.roa
File:                     AS208076.roa (raw, json)
Hash identifier:          U1qr69Xa5dOGV+1fnhb/zPyqTCg2SGGLavFvdG2ZSf4=
Subject key identifier:   1E:1A:32:62:60:8D:E7:48:1F:C9:30:4E:D1:8E:8D:98:81:78:44:73
Certificate issuer:       /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial:       3E627383D56E6E2D334CAD921C2D93A0BEED4713
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208076.roa
Signing time:             Sun 01 Jan 2023 23:59:17 +0000
ROA not before:           Sun 01 Jan 2023 23:54:17 +0000
ROA not after:            Sun 31 Dec 2023 23:59:17 +0000
asID:                     208076
IP address blocks:        2a06:a005:5ae::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:62:73:83:d5:6e:6e:2d:33:4c:ad:92:1c:2d:93:a0:be:ed:47:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
        Validity
            Not Before: Jan  1 23:54:17 2023 GMT
            Not After : Dec 31 23:59:17 2023 GMT
        Subject: CN=1E1A3262608DE7481FC9304ED18E8D9881784473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:90:aa:63:ae:4f:98:0c:74:75:1d:a0:fe:3d:
                    9a:98:18:3e:7a:a7:42:07:ed:b7:ed:d7:c4:ce:7f:
                    56:38:5c:5e:8c:90:69:c0:ec:01:74:8d:c5:42:4d:
                    ed:c8:13:62:e8:cc:b9:60:3a:a6:25:13:2d:35:21:
                    0c:0c:ed:dc:38:a9:b2:db:a0:d6:6b:65:1b:8e:53:
                    a8:b3:b8:22:3a:17:cb:56:30:3b:a2:49:ca:01:ce:
                    bf:6d:49:3d:ed:1d:f9:5b:8d:b4:3e:44:6f:29:5c:
                    49:84:07:3c:f6:0f:f2:b3:bc:26:d4:de:5c:23:06:
                    ff:8a:00:d8:0d:e2:0e:e2:28:27:ff:a1:1c:d3:3f:
                    ed:0e:c8:28:e9:8f:81:1d:d6:50:09:b1:3b:e7:4b:
                    e8:49:c0:60:e6:83:2b:62:81:cb:71:6a:80:c0:7e:
                    89:bf:74:57:e0:73:d8:23:bd:d2:e6:c3:07:95:dd:
                    c6:66:0f:38:3c:19:10:27:ef:f6:5f:31:05:15:c4:
                    7b:fd:b8:f5:81:6f:86:b1:14:35:62:9f:48:d5:04:
                    3e:47:a5:a6:ae:2d:10:14:6c:26:0d:68:49:de:37:
                    28:12:da:05:25:17:18:71:79:c4:35:e2:e4:28:bd:
                    75:22:12:38:c9:22:6a:1d:4a:9f:cc:55:42:ad:b9:
                    5a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1A:32:62:60:8D:E7:48:1F:C9:30:4E:D1:8E:8D:98:81:78:44:73
            X509v3 Authority Key Identifier:
                keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208076.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5ae::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:8e:16:55:ae:a4:ae:71:ab:c8:c2:ed:6c:16:40:5f:ac:e0:
         fd:57:e3:34:e4:30:67:ef:92:18:94:2a:84:ed:8f:64:6f:79:
         86:03:47:e2:75:d1:58:04:85:33:12:72:9c:d7:ca:f5:a7:dc:
         d6:60:0a:10:c9:e4:e0:3c:69:b6:ad:4c:a2:4f:1d:04:f2:7e:
         28:b5:d8:0e:33:eb:38:a0:17:70:6f:6b:81:6d:e2:22:98:db:
         30:b9:1b:63:d4:42:35:db:b5:f9:62:e2:87:78:12:1f:85:b2:
         08:30:12:c6:43:6e:ae:05:3e:6e:83:d3:80:44:fe:d8:ba:44:
         f0:87:e2:b6:60:82:9a:90:8e:8a:55:4b:ab:b2:04:6e:79:87:
         b7:b8:a2:f7:b0:2f:f5:d8:db:4e:4d:1f:7f:91:13:f8:ee:88:
         67:1a:e0:00:fb:1b:d4:72:c1:76:d9:43:e1:a3:70:d1:34:42:
         1a:c9:ff:1e:e3:a4:fe:43:b7:27:dc:15:9b:a0:0d:e3:2f:a7:
         eb:89:ab:a0:00:da:35:0a:99:09:85:c2:98:81:e3:02:06:a8:
         bf:91:77:b8:23:b8:e8:96:2b:3a:aa:37:e2:36:ab:13:67:d9:
         7b:a0:c4:72:f7:29:3f:0d:a6:3f:50:dc:14:17:d0:7f:a9:b6:
         e5:1e:09:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org