Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/uplift/k3_RUSZuZqutB5Uiu2TwjULf8L4.roa
File:                     k3_RUSZuZqutB5Uiu2TwjULf8L4.roa (raw, json)
Hash identifier:          zR8Xn+yKyC/oQVHhDPDLRKHjEMhU8LgNnG+z49kABQ0=
Subject key identifier:   93:7F:D1:51:26:6E:66:AB:AD:07:95:22:BB:64:F0:8D:42:DF:F0:BE
Certificate issuer:       /CN=51164cee3cf55397cbcd8079a520a8d0952061d2
Certificate serial:       04
Authority key identifier: 51:16:4C:EE:3C:F5:53:97:CB:CD:80:79:A5:20:A8:D0:95:20:61:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/URZM7jz1U5fLzYB5pSCo0JUgYdI.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/uplift/k3_RUSZuZqutB5Uiu2TwjULf8L4.roa
Signing time:             Fri 05 Feb 2021 09:33:11 +0000
ROA not before:           Fri 05 Feb 2021 09:33:11 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     1880
IP address blocks:        2001:67c:2938::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51164cee3cf55397cbcd8079a520a8d0952061d2
        Validity
            Not Before: Feb  5 09:33:11 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=937FD151266E66ABAD079522BB64F08D42DFF0BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cf:0d:c8:b9:c1:0d:a8:24:b2:6e:db:38:ee:
                    a1:e1:94:64:c6:7e:0a:e4:27:66:f1:b7:3e:92:43:
                    f6:7d:b4:f9:83:fb:28:eb:48:5f:f7:61:6d:86:35:
                    c0:7a:94:6e:f7:5e:56:46:4b:4a:ce:71:71:60:fd:
                    94:e8:b8:36:13:e8:12:97:42:a1:68:6a:95:80:a6:
                    d1:98:3a:af:4e:cc:a9:f5:83:64:06:7b:5c:53:a0:
                    58:80:98:c0:13:b9:48:b0:0d:2f:5f:bd:14:35:46:
                    7d:77:8b:22:88:fd:c0:db:72:ef:05:e4:0f:74:39:
                    db:7c:5d:91:93:28:c5:06:c2:c1:d5:8f:83:a1:6f:
                    25:db:db:06:5a:d5:1f:31:ba:ac:64:e1:34:75:0e:
                    0f:a3:20:b2:b0:55:0c:e5:5f:4b:2c:14:66:f9:84:
                    82:33:54:cb:ea:74:31:ef:c6:2d:f3:82:e1:91:43:
                    92:68:35:4d:16:e2:fc:d0:ad:47:02:53:76:35:3c:
                    1f:33:36:02:34:42:58:b6:d3:50:55:83:66:2a:4a:
                    02:75:43:0a:0b:a7:6a:b8:06:50:bb:d1:13:d2:19:
                    30:f2:4e:4e:20:27:8a:ac:bd:bb:58:0f:f6:d1:8d:
                    d1:ca:8c:11:aa:bd:a6:15:64:44:22:62:94:2c:a2:
                    1e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7F:D1:51:26:6E:66:AB:AD:07:95:22:BB:64:F0:8D:42:DF:F0:BE
            X509v3 Authority Key Identifier:
                keyid:51:16:4C:EE:3C:F5:53:97:CB:CD:80:79:A5:20:A8:D0:95:20:61:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/uplift/URZM7jz1U5fLzYB5pSCo0JUgYdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/URZM7jz1U5fLzYB5pSCo0JUgYdI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/uplift/k3_RUSZuZqutB5Uiu2TwjULf8L4.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news-public.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2938::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:7d:a6:39:ca:c0:58:1b:0f:9b:c6:19:a3:6d:0b:66:42:21:
         42:6c:72:f2:e8:be:9d:05:43:ef:50:a2:8e:e6:2a:33:5d:1e:
         c8:28:2f:cf:3a:8c:28:d6:ee:46:8d:22:8b:f0:45:61:f1:7c:
         59:b0:1e:7d:cb:8c:b0:78:6f:bd:3f:95:3b:bb:75:68:cf:b0:
         25:bc:44:46:84:ab:b4:3b:5a:c2:8b:59:66:65:92:60:4e:a7:
         a2:6d:fc:1d:60:a3:28:3a:5e:cf:a5:4d:f3:a8:05:8c:ff:18:
         6e:01:20:96:76:4d:8f:34:c3:e0:d9:79:fd:fb:0f:0d:e1:6d:
         85:82:2b:5f:c9:67:3e:39:99:f5:05:ac:84:39:bc:8f:98:17:
         7b:cf:46:d4:de:ba:41:b3:cd:96:42:a1:af:6c:dd:a8:05:b8:
         e2:15:83:72:a5:18:94:42:d2:2a:05:53:19:6e:93:16:c2:d8:
         f3:d7:0a:45:b7:dc:8e:45:46:1d:e9:0b:1b:cf:c1:ed:23:79:
         46:d1:6a:7e:96:5e:6c:f1:3e:52:3d:16:c1:c8:21:95:ce:2f:
         d2:71:a0:a6:5e:d4:e8:c9:36:61:a7:29:ea:5e:08:ac:a7:c2:
         d5:f4:81:de:58:30:6c:95:99:8e:77:21:04:09:cd:1d:b0:4e:
         ae:2f:d3:5b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org