Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS57349.roa
File:                     AS57349.roa (raw, json)
Hash identifier:          F0pweJepJwed3VKlaMknk4ad5KB3eE54LyrX3JQUoFw=
Subject key identifier:   C7:E5:CC:11:4B:23:01:39:99:0E:25:D6:19:04:E0:18:3D:7F:39:AC
Certificate issuer:       /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial:       231E3E74FCEC9601744C198B7CAFA14CF33B4A11
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS57349.roa
Signing time:             Sun 01 Jan 2023 23:59:10 +0000
ROA not before:           Sun 01 Jan 2023 23:54:10 +0000
ROA not after:            Sun 31 Dec 2023 23:59:10 +0000
asID:                     57349
IP address blocks:        2a06:a005:a15::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:1e:3e:74:fc:ec:96:01:74:4c:19:8b:7c:af:a1:4c:f3:3b:4a:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
        Validity
            Not Before: Jan  1 23:54:10 2023 GMT
            Not After : Dec 31 23:59:10 2023 GMT
        Subject: CN=C7E5CC114B230139990E25D61904E0183D7F39AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:72:e6:99:07:b1:7a:54:36:75:a0:70:d7:9a:
                    ab:9b:7a:62:f6:a2:ff:4e:52:a9:54:6c:c8:58:14:
                    b4:6b:97:c3:6c:9f:30:8f:a5:63:f6:3e:64:ea:96:
                    ef:63:b4:58:2d:30:20:3e:78:81:cb:0f:27:d8:e1:
                    3a:e3:4a:ea:d4:9b:a7:82:8a:c6:1e:2f:7e:db:c2:
                    a8:ae:12:e0:de:ef:6b:8b:66:27:fa:e9:2b:d2:1a:
                    89:51:10:56:fa:23:86:a3:55:ee:24:4e:e3:79:75:
                    58:ae:a1:04:47:24:a7:59:8a:d8:dd:8e:1b:37:60:
                    77:75:8a:bf:16:0b:bb:c5:1a:4f:2f:8b:7f:2e:54:
                    f1:2d:95:2e:68:ab:2d:41:bf:b6:ce:e4:91:05:48:
                    a9:f0:6e:e0:01:05:1f:08:b0:3f:0f:ae:e3:37:37:
                    7b:86:93:f5:1e:59:34:86:ab:74:b4:06:96:2e:11:
                    c8:47:6d:1c:84:32:17:d1:30:28:da:b7:42:fa:cd:
                    72:56:24:a1:dd:8e:3c:79:8d:d0:53:9a:26:42:4e:
                    54:6a:04:71:ec:3f:17:8e:80:77:3c:fd:bb:4e:54:
                    d3:9a:b7:dc:41:7d:c7:6c:f1:ae:62:50:fa:66:64:
                    8a:3b:0f:9c:e0:96:40:bb:9c:5f:a4:6c:e2:2a:7a:
                    81:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E5:CC:11:4B:23:01:39:99:0E:25:D6:19:04:E0:18:3D:7F:39:AC
            X509v3 Authority Key Identifier:
                keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS57349.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:a15::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:77:b6:6b:b7:11:b4:c7:89:4c:a6:90:a7:24:74:3d:1f:c9:
         e9:1c:36:2c:48:77:00:9c:7c:17:f8:4c:e0:12:5e:39:ca:0e:
         84:fe:da:4b:32:c3:a8:6a:bc:c6:c1:88:e7:bd:3d:21:76:4e:
         e6:16:21:91:48:41:57:81:1a:fd:d7:a9:84:43:d1:60:fe:ce:
         f7:cc:59:f0:75:bd:87:c1:9f:03:fe:12:35:9f:a4:cd:51:f7:
         53:6f:1a:25:c4:96:95:11:57:7c:c0:d2:74:f8:3c:ab:8b:38:
         73:f2:c7:28:d3:9d:7b:4f:8e:1d:a3:44:87:58:bc:93:2c:ae:
         34:b8:70:49:a2:bb:9b:0b:ff:20:24:9a:3f:33:60:7e:3f:b7:
         42:75:fa:96:75:15:fe:ad:27:0c:e6:09:fb:79:e9:3a:50:0d:
         2b:94:e5:3b:03:13:d4:90:a5:94:9a:05:14:50:46:95:c1:d3:
         07:22:42:28:8d:dd:40:8a:20:27:c8:73:42:d1:e2:25:62:c8:
         07:72:47:a0:3f:48:9f:68:c0:2e:d0:df:fb:02:5c:da:e0:6b:
         da:d1:2f:83:75:d7:43:4b:8a:85:1e:81:af:4e:5d:00:30:92:
         64:e8:68:ee:ec:4b:18:4a:65:9f:5e:31:96:34:e5:55:53:2b:
         2b:00:0c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org