Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3134312e39382e37322e302f32342d3234203d3e20383334.roa
File:                     3134312e39382e37322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          nSL40018UH/yMzjTqpUPV51UU5D9C0hmseU+Q77Uec8=
Subject key identifier:   E7:17:E9:22:46:8A:9E:55:41:1B:95:72:04:1E:4C:2B:74:2E:D8:CB
Certificate issuer:       /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial:       20C1F6C582F1083E217DF447BBB41DB5ACFACA04
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3134312e39382e37322e302f32342d3234203d3e20383334.roa
Signing time:             Sun 01 Sep 2024 00:02:59 +0000
ROA not before:           Sat 31 Aug 2024 23:57:59 +0000
ROA not after:            Sun 31 Aug 2025 00:02:59 +0000
asID:                     834
IP address blocks:        141.98.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c1:f6:c5:82:f1:08:3e:21:7d:f4:47:bb:b4:1d:b5:ac:fa:ca:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
        Validity
            Not Before: Aug 31 23:57:59 2024 GMT
            Not After : Aug 31 00:02:59 2025 GMT
        Subject: CN=E717E922468A9E55411B9572041E4C2B742ED8CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f2:75:5c:33:41:9c:ec:c2:c2:80:b0:e9:69:
                    ba:6a:2b:83:6a:4d:7e:3c:de:ac:e9:dd:2d:b0:dc:
                    d3:19:8c:78:f3:f1:68:d5:c2:d7:e9:1c:b2:92:72:
                    82:94:d9:a1:ea:07:3f:e0:a9:0a:40:3f:57:6d:97:
                    a4:d4:2d:9c:d4:66:64:c7:0d:b7:31:24:18:ad:f2:
                    dc:e0:74:71:f8:fb:87:ba:36:e1:30:3e:be:c3:23:
                    f2:52:a5:a3:93:08:c3:92:5a:0c:75:32:f3:9b:6f:
                    51:07:c0:57:47:ad:06:9f:7a:5d:86:61:6d:46:4b:
                    51:b4:72:fb:49:ae:77:71:a6:6f:96:74:38:07:05:
                    13:e1:bb:68:fa:86:ae:76:54:7b:2b:ea:b8:7c:46:
                    a0:38:e9:b5:cc:3b:2c:26:69:ca:f4:14:87:ce:69:
                    2d:2c:30:60:87:94:01:07:bc:ff:18:4a:49:ff:79:
                    d0:dd:e5:20:a3:b8:03:50:6c:17:6f:63:ce:a2:55:
                    ec:d5:10:6a:42:12:63:71:ad:2e:b4:fd:8c:10:a2:
                    3b:c7:1a:0e:86:4b:49:91:69:74:8c:92:e8:bd:03:
                    fe:f3:9f:c7:a0:f1:86:ce:fb:97:a1:f1:df:3e:a1:
                    08:30:e5:f9:a6:14:db:54:13:fa:6e:a3:a4:ef:79:
                    f8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:17:E9:22:46:8A:9E:55:41:1B:95:72:04:1E:4C:2B:74:2E:D8:CB
            X509v3 Authority Key Identifier:
                keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3134312e39382e37322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.98.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:a9:3f:fd:dc:74:2c:a8:95:87:ee:09:95:d9:e7:96:33:42:
         3e:5c:05:a5:1a:a3:83:4c:bc:64:44:eb:6d:12:d8:58:ad:e8:
         f6:da:5a:c5:90:7e:6d:25:16:a1:7d:a0:db:38:49:89:f1:cb:
         be:91:e7:88:9b:fb:6e:a9:6d:5c:78:74:9d:a8:81:81:e3:fd:
         ae:46:72:fa:fe:ae:74:84:f2:f8:73:2b:e6:34:63:0f:e7:cc:
         21:81:8e:0c:10:de:70:a6:5d:a1:d3:98:6b:5e:56:fd:5d:8e:
         21:52:52:53:28:00:d4:9c:2e:fb:27:b5:26:e9:a2:91:af:66:
         e6:4f:1a:9c:b6:5b:94:79:73:04:73:0d:15:af:48:f5:80:ea:
         2d:37:8e:3a:fe:8c:c9:b0:92:8a:03:9c:d3:e6:06:94:8d:a3:
         1b:14:e0:2d:bb:60:3c:40:a8:2e:02:b0:a2:98:0b:5b:bc:5d:
         d8:b3:4f:7d:ac:3c:d3:da:1f:fd:dc:81:68:a6:d3:46:2a:14:
         78:7b:6d:65:09:9b:22:35:1a:8c:03:c7:23:bf:a6:97:b8:e3:
         dc:66:d8:da:56:02:ed:0f:d9:8f:95:f2:41:6c:ae:34:f4:17:
         c1:33:c5:91:c4:fc:4d:a1:10:04:6f:f7:02:3e:d4:9b:33:02:
         25:ae:3a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 06:27:59 2024 by rpki-client on console.sobornost.net