Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210758.roa
File:                     AS210758.roa (raw, json)
Hash identifier:          L2qTq3+kRrrsSLwNGq/kAorWzSldpotOAQ8CEXXdb5M=
Subject key identifier:   16:36:4A:B9:DC:AA:C2:ED:A3:A6:B0:D8:FC:7E:14:C1:A4:B9:D2:A3
Certificate issuer:       /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial:       044BA68A23900471E39E0D06B01C34C08E97AF0A
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210758.roa
Signing time:             Sun 01 Jan 2023 23:59:19 +0000
ROA not before:           Sun 01 Jan 2023 23:54:19 +0000
ROA not after:            Sun 31 Dec 2023 23:59:19 +0000
asID:                     210758
IP address blocks:        2a06:a005:5a9::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:4b:a6:8a:23:90:04:71:e3:9e:0d:06:b0:1c:34:c0:8e:97:af:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
        Validity
            Not Before: Jan  1 23:54:19 2023 GMT
            Not After : Dec 31 23:59:19 2023 GMT
        Subject: CN=16364AB9DCAAC2EDA3A6B0D8FC7E14C1A4B9D2A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:67:b1:b1:f1:09:f6:6b:05:88:4a:43:be:17:
                    7f:af:2c:18:67:7f:0b:28:8c:21:71:e1:c0:8c:37:
                    ea:10:00:a2:45:3c:1b:3c:40:ee:34:0b:85:27:4d:
                    22:da:5a:90:cc:2c:89:ee:60:ce:43:02:d7:52:30:
                    d5:bd:04:e3:e0:b7:48:69:e2:f3:07:83:0c:77:4e:
                    4e:81:a2:ba:ea:8b:30:21:25:38:1c:a2:fd:b6:e0:
                    b3:d7:15:a4:61:ec:72:ac:64:75:57:93:71:4e:e9:
                    f5:35:bf:f1:11:11:1b:7e:3a:b9:0c:cf:19:f1:1d:
                    34:23:ea:f4:34:87:0d:b6:99:11:5e:7f:04:d8:6f:
                    74:52:90:bd:3d:b3:8d:51:f8:7a:24:f0:6d:fa:4a:
                    21:cb:66:71:c7:64:52:2c:9e:89:85:1f:77:04:8a:
                    a2:c7:6a:e4:b9:4a:25:ad:1f:84:f5:39:ab:61:85:
                    6e:95:cc:8f:8c:b3:2f:fe:c6:3e:8d:43:6f:30:e1:
                    d5:79:15:b8:96:e7:c1:ab:20:c0:65:28:3a:ed:7b:
                    6a:55:d5:fa:7c:6b:25:4e:dd:ed:b6:70:bc:60:e1:
                    d8:dd:db:7b:b8:01:7d:71:f9:b4:2b:65:b7:30:3f:
                    39:41:da:b1:1a:5d:16:cf:b5:2f:5b:62:9e:c2:f9:
                    ed:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:36:4A:B9:DC:AA:C2:ED:A3:A6:B0:D8:FC:7E:14:C1:A4:B9:D2:A3
            X509v3 Authority Key Identifier:
                keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210758.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5a9::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:36:6d:aa:6a:a4:34:5b:6d:55:f3:ea:26:14:ea:9f:b5:ef:
         46:5f:bb:9f:34:e1:ef:57:16:40:6c:dc:bb:92:76:fd:ce:5a:
         dc:18:f9:76:a8:9e:89:8d:92:58:73:27:39:94:09:ad:0d:12:
         4b:cd:be:97:17:a9:18:9b:24:83:57:14:45:c3:7e:f3:23:63:
         b1:43:e2:3d:a4:c1:30:85:12:8d:f3:08:3c:97:c3:22:7f:98:
         fa:92:25:32:3f:a7:26:18:87:ba:26:bb:e5:a7:17:23:4c:75:
         51:25:e1:82:2d:26:69:aa:ff:12:cc:96:f2:25:b9:98:bc:e8:
         37:e7:29:35:dd:ea:c3:7e:96:bd:c5:1c:76:d6:c6:03:b2:96:
         69:97:7e:89:c8:51:e0:62:97:ac:e2:2a:6f:e0:9b:6b:9c:8d:
         b9:6f:8f:ae:37:90:71:86:c0:10:c0:bd:4d:08:2c:0d:14:b0:
         73:37:dd:cb:bb:58:1b:84:0d:de:c0:5a:c2:44:d6:ae:15:fd:
         85:79:9c:40:b0:9a:8a:c8:59:dc:1b:2a:56:31:e3:52:84:7e:
         1d:41:72:58:cc:84:85:52:fd:38:b2:bc:a3:57:62:20:ed:47:
         23:82:82:21:23:18:06:bd:be:fc:82:73:de:2d:ac:3d:78:70:
         9d:42:45:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org