Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS50310.roa
File:                     AS50310.roa (raw, json)
Hash identifier:          CyKYKDOFZw1NijQAxoqE5i6SJl5wSWubilV99PWBqlw=
Subject key identifier:   E5:99:16:90:C3:03:EC:1A:DD:F1:B2:D0:AD:53:FD:76:59:2A:26:8D
Certificate issuer:       /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial:       1ABFABCDDE3CF5CDEEC00820C55020A82E8B53D3
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS50310.roa
Signing time:             Sun 01 Jan 2023 23:59:17 +0000
ROA not before:           Sun 01 Jan 2023 23:54:17 +0000
ROA not after:            Sun 31 Dec 2023 23:59:17 +0000
asID:                     50310
IP address blocks:        2a06:a005:1d55::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:bf:ab:cd:de:3c:f5:cd:ee:c0:08:20:c5:50:20:a8:2e:8b:53:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
        Validity
            Not Before: Jan  1 23:54:17 2023 GMT
            Not After : Dec 31 23:59:17 2023 GMT
        Subject: CN=E5991690C303EC1ADDF1B2D0AD53FD76592A268D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4a:aa:04:f4:6d:24:46:77:93:5e:ba:65:ff:
                    25:f7:23:70:22:24:65:da:8c:21:16:b6:31:ff:18:
                    c6:cc:7e:1e:94:34:20:13:e1:7b:ba:a6:98:60:73:
                    4b:88:ad:46:e2:3f:99:03:97:b1:01:3e:34:0d:31:
                    da:49:dd:d0:a2:ae:e5:57:9b:a6:b5:40:0a:51:6a:
                    84:ea:cd:ff:94:98:ef:5c:ba:67:c6:a4:de:bd:33:
                    3c:12:da:b7:b3:c2:0f:e4:be:13:ec:27:ed:a4:97:
                    fe:75:32:00:18:47:4d:22:f0:9f:35:d9:e3:41:af:
                    4b:3b:e3:46:a4:da:20:7b:a1:f8:62:8b:08:18:85:
                    f5:14:dd:bd:28:73:87:4f:e8:bb:52:c5:e5:8d:a6:
                    09:93:ef:24:f5:57:17:24:70:df:5f:06:09:31:d7:
                    10:74:6c:da:52:9f:11:1f:8f:33:f1:04:f4:bd:07:
                    57:f9:09:8b:a6:d9:b6:8d:b4:c5:31:95:74:e3:28:
                    36:df:66:6e:be:25:fd:eb:c0:ec:0c:78:4a:ab:d1:
                    89:6c:9a:00:be:f7:8c:f1:71:c0:e5:32:b6:d1:88:
                    2e:bb:33:10:e7:79:d7:3b:0a:be:67:f3:ab:c7:00:
                    44:c7:44:c2:f2:a0:34:dc:1e:5d:fa:9e:f4:45:8b:
                    82:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:99:16:90:C3:03:EC:1A:DD:F1:B2:D0:AD:53:FD:76:59:2A:26:8D
            X509v3 Authority Key Identifier:
                keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS50310.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1d55::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:c4:74:bb:c5:bf:3a:af:71:45:b3:ab:8b:f3:18:2b:13:68:
         19:05:3c:b9:f8:96:91:04:d9:2e:9f:ba:34:ae:51:b2:bb:73:
         5b:9c:10:f4:c7:88:3a:fc:b5:db:ce:74:54:2a:9c:e4:cb:59:
         fe:84:2a:3f:10:99:fe:5d:22:15:95:5b:97:70:39:1c:c4:35:
         bc:71:f3:f3:6d:c5:4a:b8:ab:07:6e:b0:5f:33:3e:f2:a0:0f:
         fa:26:f2:b4:a8:1f:86:7b:63:4f:1f:ae:74:6c:cc:96:d2:b0:
         d9:35:ec:74:9d:f1:5d:58:d9:b0:58:e5:83:a2:25:7f:5f:b8:
         1a:df:dc:ca:e3:07:c8:b1:d6:a2:60:fb:c3:ce:c7:08:15:19:
         4b:8c:bb:28:f1:2e:70:36:bb:57:10:13:a2:b7:39:08:ae:51:
         4a:74:ec:0c:cc:18:3a:dc:02:fe:5a:4b:4a:34:ea:b4:95:f5:
         fe:fa:1a:7d:bf:d8:47:fc:8c:6c:fc:53:56:57:ec:34:48:5d:
         34:34:51:43:01:05:fc:d7:98:27:a8:ed:d2:1a:8e:42:d6:97:
         aa:d3:dc:bb:82:79:28:3d:4c:6e:35:c0:c9:ff:a1:de:7a:18:
         50:32:db:d1:97:6b:5b:5a:ea:05:7f:ff:74:2b:5b:32:8f:d7:
         19:f4:bd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org