Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS51930.roa
File:                     AS51930.roa (raw, json)
Hash identifier:          t0yOPvk/Tl0DxNRrer957H9f1MIg0lc6Brby0dtF6bY=
Subject key identifier:   D0:5C:0F:B7:32:01:EC:2E:44:9A:AA:A8:F5:39:5C:E7:6B:23:C9:BF
Certificate issuer:       /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial:       2D126AF514E368E05D0F87D4F5041478226E5BD2
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS51930.roa
Signing time:             Sun 01 Jan 2023 23:59:18 +0000
ROA not before:           Sun 01 Jan 2023 23:54:18 +0000
ROA not after:            Sun 31 Dec 2023 23:59:18 +0000
asID:                     51930
IP address blocks:        2a06:a005:1d10::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:12:6a:f5:14:e3:68:e0:5d:0f:87:d4:f5:04:14:78:22:6e:5b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
        Validity
            Not Before: Jan  1 23:54:18 2023 GMT
            Not After : Dec 31 23:59:18 2023 GMT
        Subject: CN=D05C0FB73201EC2E449AAAA8F5395CE76B23C9BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:49:d8:d4:ae:72:64:14:84:bb:63:bd:c0:26:
                    0e:04:09:57:b7:7f:0b:45:0c:28:31:6d:b0:54:b9:
                    78:25:5d:0d:4d:11:05:13:cb:95:c9:8a:67:51:35:
                    76:e4:0c:d8:66:86:1e:50:bc:51:94:c4:56:6f:1b:
                    e3:03:c6:62:e4:2b:3e:33:46:bb:ed:e9:90:7f:09:
                    cb:5b:bd:05:41:e4:b2:7c:91:4d:98:87:22:20:39:
                    94:3d:73:cf:30:e2:5a:20:f3:5f:17:5d:03:24:5d:
                    08:10:c4:69:eb:fd:bc:49:6a:ea:42:45:8a:54:e4:
                    24:55:13:08:51:66:53:5e:ae:26:d2:31:0a:ef:30:
                    9d:3b:62:27:2f:5f:bb:db:0d:8f:60:d8:4d:c7:53:
                    96:4e:b9:47:12:f8:97:85:da:2c:c9:42:25:24:bc:
                    dd:5b:5e:18:9d:89:57:a0:39:4b:73:df:8d:35:41:
                    87:ac:f1:a4:17:c8:5a:e7:05:53:e6:09:42:aa:36:
                    e8:40:13:52:87:5e:90:e4:14:a5:1a:0c:65:b8:fa:
                    f2:72:a2:b9:2a:5c:b3:13:e3:a8:ed:52:cd:f0:e1:
                    35:4c:51:82:02:13:43:6b:34:47:c6:f5:bd:60:70:
                    d8:57:9d:95:67:b2:51:da:16:38:eb:4b:f9:fe:9e:
                    0b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5C:0F:B7:32:01:EC:2E:44:9A:AA:A8:F5:39:5C:E7:6B:23:C9:BF
            X509v3 Authority Key Identifier:
                keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS51930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1d10::/44

    Signature Algorithm: sha256WithRSAEncryption
         04:03:47:ad:93:01:2c:1e:12:39:b4:7e:8f:04:13:c0:65:3d:
         35:d7:b3:7f:b8:69:c5:71:14:91:d2:31:55:0a:85:9d:18:f2:
         82:c0:e5:71:90:43:5c:e1:09:b3:a7:49:ee:ec:9d:32:3a:44:
         85:89:e0:e9:52:d9:51:c5:15:f5:77:5d:53:ed:38:0f:2a:bf:
         df:fe:8f:f4:79:6b:de:c3:22:24:eb:38:e1:b3:64:e7:20:5e:
         83:88:98:a9:b3:7b:12:41:99:e5:cb:2d:3e:ab:e2:92:35:f8:
         30:fb:e0:69:32:58:41:28:7a:aa:34:dc:af:c6:b7:b7:37:43:
         9e:d4:c6:c3:3e:8f:b7:ab:ff:37:fe:f4:e0:bd:b6:69:67:64:
         cb:ae:e1:e8:1f:df:65:56:18:36:e5:b6:36:41:86:ed:92:15:
         d3:ea:1e:6e:64:9f:9f:82:92:37:4d:bd:34:47:40:fe:2e:ac:
         c1:31:e6:a0:cf:ed:c3:ca:d1:f7:49:63:de:7b:df:1a:a6:84:
         be:8f:c3:fb:1f:22:54:28:49:49:ea:ef:71:3e:43:cc:af:1a:
         88:5d:50:82:65:23:6d:b5:7b:9f:5a:4d:59:2f:79:45:ff:7f:
         fd:73:df:75:7f:1e:af:03:89:6a:23:e4:ac:f4:4a:f5:74:22:
         7c:a1:06:e9
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIULRJq9RTjaOBdD4fU9QQUeCJuW9IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MThaFw0yMzEyMzEyMzU5MThaMDMxMTAvBgNV
BAMTKEQwNUMwRkI3MzIwMUVDMkU0NDlBQUFBOEY1Mzk1Q0U3NkIyM0M5QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDASdjUrnJkFIS7Y73AJg4ECVe3
fwtFDCgxbbBUuXglXQ1NEQUTy5XJimdRNXbkDNhmhh5QvFGUxFZvG+MDxmLkKz4z
Rrvt6ZB/CctbvQVB5LJ8kU2YhyIgOZQ9c88w4log818XXQMkXQgQxGnr/bxJaupC
RYpU5CRVEwhRZlNeribSMQrvMJ07YicvX7vbDY9g2E3HU5ZOuUcS+JeF2izJQiUk
vN1bXhidiVegOUtz3401QYes8aQXyFrnBVPmCUKqNuhAE1KHXpDkFKUaDGW4+vJy
orkqXLMT46jtUs3w4TVMUYICE0NrNEfG9b1gcNhXnZVnslHaFjjrS/n+ngtlAgMB
AAGjggIMMIICCDAdBgNVHQ4EFgQU0FwPtzIB7C5Emqqo9Tlc52sjyb8wHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTNTE5MzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqBqAF
HRAwDQYJKoZIhvcNAQELBQADggEBAAQDR62TASweEjm0fo8EE8BlPTXXs3+4acVx
FJHSMVUKhZ0Y8oLA5XGQQ1zhCbOnSe7snTI6RIWJ4OlS2VHFFfV3XVPtOA8qv9/+
j/R5a97DIiTrOOGzZOcgXoOImKmzexJBmeXLLT6r4pI1+DD74GkyWEEoeqo03K/G
t7c3Q57UxsM+j7er/zf+9OC9tmlnZMuu4egf32VWGDbltjZBhu2SFdPqHm5kn5+C
kjdNvTRHQP4urMEx5qDP7cPK0fdJY9573xqmhL6Pw/sfIlQoSUnq73E+Q8yvGohd
UIJlI221e59aTVkveUX/f/1z33V/Hq8DiWoj5Kz0SvV0InyhBuk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org