Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3234312e3134392e302f32342d3234203d3e20333937343233.roa
File:                     3138352e3234312e3134392e302f32342d3234203d3e20333937343233.roa (raw, json)
Hash identifier:          eNxEtf6cfL8+I5ugseD0NsBC3fW6WuKojcqxCDHZhrg=
Subject key identifier:   61:19:94:C2:9F:1B:C8:AE:9C:C8:D9:D3:07:F1:B2:7C:8B:2F:6A:06
Certificate issuer:       /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial:       03FB48306CF2EA118EAC14250E560A0A4CB896FF
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3234312e3134392e302f32342d3234203d3e20333937343233.roa
Signing time:             Mon 27 Mar 2023 08:27:14 +0000
ROA not before:           Mon 27 Mar 2023 08:22:14 +0000
ROA not after:            Mon 25 Mar 2024 08:27:14 +0000
asID:                     397423
IP address blocks:        185.241.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:fb:48:30:6c:f2:ea:11:8e:ac:14:25:0e:56:0a:0a:4c:b8:96:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
        Validity
            Not Before: Mar 27 08:22:14 2023 GMT
            Not After : Mar 25 08:27:14 2024 GMT
        Subject: CN=611994C29F1BC8AE9CC8D9D307F1B27C8B2F6A06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6d:fc:2e:f3:48:38:83:05:40:74:c3:e1:b6:
                    5b:91:9f:0a:0f:f2:30:a3:b8:7c:b2:e4:b1:5d:0b:
                    e3:d0:dd:45:34:17:08:52:ac:ed:a5:d5:3d:2e:97:
                    e4:38:85:ab:12:01:ce:d2:0f:63:a3:9f:93:4d:1e:
                    a2:5d:70:a4:bf:fa:bb:22:a4:f4:22:7c:ad:cc:0b:
                    a7:30:29:53:c6:48:71:7b:87:e5:5c:6e:e8:a8:1b:
                    4c:22:ff:82:a0:62:11:5d:ba:77:b6:f4:0b:0e:fc:
                    94:20:d6:92:4e:be:66:f5:eb:98:07:81:99:ab:2b:
                    22:0d:ee:40:a2:a8:22:5a:ac:6a:32:d3:b9:2c:55:
                    88:67:90:8f:41:db:3d:43:6d:c2:a6:4d:0b:56:33:
                    86:41:e8:66:ed:68:3d:7b:17:de:e2:d2:e0:0c:37:
                    f2:70:4d:54:ee:e7:12:23:b7:f6:0b:10:63:64:21:
                    1a:56:8a:b6:bc:21:e0:08:e4:c8:33:2f:05:73:84:
                    8b:53:74:c9:65:bb:67:f8:5d:10:b6:98:dd:6f:94:
                    09:c0:c8:ad:e7:57:5d:81:52:46:47:7e:94:d7:08:
                    3d:16:80:ad:1f:69:2b:f9:18:82:f4:dd:68:d7:b6:
                    d0:df:c3:e9:a5:e9:a5:6e:26:6a:4e:89:70:1b:a1:
                    52:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:19:94:C2:9F:1B:C8:AE:9C:C8:D9:D3:07:F1:B2:7C:8B:2F:6A:06
            X509v3 Authority Key Identifier:
                keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3138352e3234312e3134392e302f32342d3234203d3e20333937343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.241.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:b4:26:27:5b:bb:50:01:9d:96:18:6a:c9:45:71:27:bd:d2:
         fd:73:de:3a:90:fb:df:b9:f0:23:1c:87:77:3d:24:de:0c:a1:
         99:fd:e5:d9:e6:03:42:0b:9b:a7:35:72:f6:8a:8a:d3:b2:e1:
         1d:4f:04:f0:c4:f4:a5:d6:48:3e:16:19:dd:d0:0a:96:73:d0:
         f9:76:84:48:0a:96:bb:0f:a9:3f:48:02:28:89:c7:93:65:3f:
         29:47:74:e0:46:fb:12:41:47:fe:d3:aa:ec:1d:df:c7:dc:dc:
         49:03:fc:e6:b6:32:0d:95:7e:e8:d4:d3:17:f9:e0:2a:9d:ff:
         f0:82:1a:b5:85:6e:8a:ce:61:88:1f:70:0a:c1:ee:93:e2:07:
         f8:93:15:5d:98:38:79:de:0d:4a:e7:eb:67:fb:bb:3d:6b:c4:
         36:95:cd:02:a1:c9:d2:4b:d5:54:c5:a2:62:9d:79:77:06:ab:
         3d:f3:0e:4e:4c:59:13:67:1a:9d:e3:20:27:81:fe:4b:81:3f:
         31:62:ea:f1:96:f7:0c:67:89:8f:6a:be:f6:11:f3:3c:56:3a:
         d8:43:34:b5:83:01:ff:60:5e:61:55:38:d9:1b:be:59:46:38:
         14:ab:68:38:46:c0:3d:f9:23:cc:7e:74:b6:d9:a5:28:91:23:
         4a:40:8b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 12:48:46 2023 by rpki-client on console-ams.rpki-client.org