Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/ZPFRFQ-DCsgZnLulGo3lWkE8Pl8.roa
File:                     ZPFRFQ-DCsgZnLulGo3lWkE8Pl8.roa (raw, json)
Hash identifier:          XFBSKvO3AXqul7/rMdzRAoOUwpL7ZySozQjAeofn4JY=
Subject key identifier:   64:F1:51:15:0F:83:0A:C8:19:9C:BB:A5:1A:8D:E5:5A:41:3C:3E:5F
Certificate issuer:       /CN=38e14f92fdc7ccfbfc182361523ae27d697e952f
Certificate serial:       05
Authority key identifier: 38:E1:4F:92:FD:C7:CC:FB:FC:18:23:61:52:3A:E2:7D:69:7E:95:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OOFPkv3HzPv8GCNhUjrifWl-lS8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/ZPFRFQ-DCsgZnLulGo3lWkE8Pl8.roa
Signing time:             Tue 23 Feb 2021 18:57:17 +0000
ROA not before:           Tue 23 Feb 2021 18:57:17 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     15562
IP address blocks:        2001:67c:208c::/48 maxlen: 48
                          2a0e:b240::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38e14f92fdc7ccfbfc182361523ae27d697e952f
        Validity
            Not Before: Feb 23 18:57:17 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=64F151150F830AC8199CBBA51A8DE55A413C3E5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a2:ba:3c:a0:d2:a0:8e:86:c6:94:cb:1c:3a:
                    02:7b:78:f1:9d:49:57:ac:2f:2c:af:23:80:7a:80:
                    19:f9:97:2f:9f:20:8d:c7:18:8c:3d:6b:f0:e2:5e:
                    f1:6b:3d:d3:9c:14:a6:eb:fd:42:18:ba:70:d5:af:
                    23:66:c9:99:1e:98:03:72:30:55:6f:85:26:d4:8e:
                    31:3c:6d:12:29:b6:6f:ee:12:a4:8e:ef:eb:b3:58:
                    1a:3a:b5:b7:ea:5c:16:30:d4:af:77:95:52:e1:8d:
                    c9:48:00:7f:0e:4b:d0:38:81:00:85:2a:8f:c8:1a:
                    28:b4:05:41:1a:3a:f3:5c:85:53:71:7d:f2:24:69:
                    93:e9:0e:b5:04:65:43:58:75:bb:91:c4:75:8f:d3:
                    7f:02:75:19:83:73:b1:9c:41:d5:f8:50:11:48:5e:
                    08:5d:63:56:20:9d:4a:04:40:79:bc:6b:54:96:a4:
                    86:b1:8f:22:b4:ce:b2:f1:d4:3f:6b:e8:1a:49:2b:
                    26:bd:ac:8f:40:8d:4c:0b:d0:99:27:2a:98:d9:8d:
                    b5:1e:4b:3b:f1:e8:f7:f4:62:20:bb:e4:67:f5:87:
                    5a:e1:0f:fd:98:07:91:a8:85:bd:02:2c:b0:9b:26:
                    17:2e:0d:d2:61:55:9a:fe:c9:7b:a7:df:6d:d5:5a:
                    d2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F1:51:15:0F:83:0A:C8:19:9C:BB:A5:1A:8D:E5:5A:41:3C:3E:5F
            X509v3 Authority Key Identifier:
                keyid:38:E1:4F:92:FD:C7:CC:FB:FC:18:23:61:52:3A:E2:7D:69:7E:95:2F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/OOFPkv3HzPv8GCNhUjrifWl-lS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOFPkv3HzPv8GCNhUjrifWl-lS8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/ZPFRFQ-DCsgZnLulGo3lWkE8Pl8.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:208c::/48
                  2a0e:b240::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:2a:37:36:6f:a4:cb:bc:8e:8a:58:40:46:7c:4b:20:fb:94:
         8e:e3:2f:f9:a8:4c:c9:28:d3:b7:31:d0:f9:95:9e:00:4f:16:
         2a:53:76:ea:2b:15:fd:b5:4b:4f:48:d4:e2:11:f6:e3:0f:79:
         fd:e7:6b:57:54:c8:72:01:39:60:ed:93:cb:b4:e8:a6:9d:98:
         6b:ac:d5:87:c7:63:ed:1c:dd:f2:5a:60:9d:09:61:d2:b8:7f:
         27:75:12:2d:43:02:19:a5:a7:a1:d7:64:df:be:2b:39:bd:43:
         b4:b3:37:bf:ba:c0:44:cc:34:db:ff:06:f5:8c:9d:b7:71:5c:
         6a:ba:b2:38:26:7f:a0:77:ba:32:33:e8:1d:f2:63:db:bf:aa:
         fa:2d:06:6d:e4:9e:38:53:5f:06:16:d7:c4:aa:e3:94:bb:75:
         59:31:bb:59:3c:89:56:29:bc:38:f0:f6:e8:f5:1a:80:73:d0:
         52:33:2d:d4:0f:34:23:ad:f5:9f:65:7f:1e:d3:ad:0a:c8:ae:
         88:56:21:99:45:1a:45:f1:73:e7:e7:a8:2f:59:56:b6:94:19:
         e8:f5:7f:92:a1:e0:ef:a8:02:d4:36:41:7b:3d:25:7f:6c:8c:
         a0:94:c7:c5:0d:ee:7c:cc:b3:f8:7f:5b:a1:d5:d8:d0:da:6f:
         dd:c1:77:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:38 2023 by rpki-client on console-fra.rpki-client.org