Route Origin Authorization

$ rpki-client -vvf krill-eval-ctec.charter.com/repo/Charter_CTEC_Lab/3/3139322e3231392e3231362e302f32312d3231203d3e203136373837.roa
File:                     3139322e3231392e3231362e302f32312d3231203d3e203136373837.roa (raw, json)
Hash identifier:          mdFFriIFspEOGpGoc4bO+a6bL3/q+CmF/g83UVNr/Sw=
Subject key identifier:   E0:21:DB:42:5C:64:5C:BC:CD:5F:1D:C2:49:BE:57:ED:3F:5B:7D:3B
Certificate issuer:       /CN=15151ee44ce9e8e3000750add1f5412b7bbaf781062a5fdb78
Certificate serial:       6F1323787A79379BEEAC0C0C96B70EFFC96C0479
Authority key identifier: 47:CA:36:B6:8F:7E:BB:87:A8:E7:44:A7:07:2F:9E:3D:86:02:63:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e35cfcfc-940d-4d53-b96c-8c71b8674fd9/15151ee44ce9e8e3000750add1f5412b7bbaf781062a5fdb78.cer
Subject info access:      rsync://krill-eval-ctec.charter.com/repo/Charter_CTEC_Lab/3/3139322e3231392e3231362e302f32312d3231203d3e203136373837.roa
Signing time:             Tue 09 Feb 2021 20:53:39 +0000
ROA not before:           Tue 09 Feb 2021 20:48:39 +0000
ROA not after:            Tue 08 Feb 2022 20:53:39 +0000
asID:                     16787
IP address blocks:        192.219.216.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:13:23:78:7a:79:37:9b:ee:ac:0c:0c:96:b7:0e:ff:c9:6c:04:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15151ee44ce9e8e3000750add1f5412b7bbaf781062a5fdb78
        Validity
            Not Before: Feb  9 20:48:39 2021 GMT
            Not After : Feb  8 20:53:39 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:11:1e:09:d7:8c:e0:0d:86:45:2e:5c:9e:41:
                    c8:01:84:d6:7a:d4:81:f5:b2:6d:ba:06:a8:2e:83:
                    25:bf:6e:83:aa:a2:9c:4c:2f:1b:1e:ed:02:53:98:
                    94:12:3d:a8:44:26:a6:fc:84:94:58:ec:69:c6:47:
                    a6:e9:be:ef:7e:b3:9a:9a:84:bc:0a:8f:7f:e1:8e:
                    96:01:87:89:ed:02:91:5c:34:bf:8c:0e:1b:74:15:
                    f8:0f:42:06:0c:04:56:04:4f:1e:2c:c9:13:01:9c:
                    e0:eb:b7:c6:78:e0:e8:21:69:f0:6d:a9:fd:25:1f:
                    a2:14:e2:a2:c7:54:fd:ae:ca:f7:58:bb:ca:98:58:
                    2a:2d:ef:f5:cf:26:bf:58:19:ae:39:e8:4a:c3:19:
                    53:c7:2b:04:b2:cc:c3:3c:41:75:79:0b:af:e5:7e:
                    05:6b:c3:9b:90:33:99:18:00:0c:51:0b:b3:17:20:
                    6b:c7:5b:3a:79:a9:06:66:9d:67:47:80:32:3a:60:
                    54:7c:ba:ec:a2:84:9b:77:42:46:2e:49:4c:98:c7:
                    bd:46:0b:55:6d:bd:4e:e3:90:81:25:42:de:01:b3:
                    72:84:d8:03:7b:cc:a7:52:3f:3a:1a:77:10:84:75:
                    ef:a5:de:33:ae:aa:e7:23:b8:bf:97:35:76:8b:f9:
                    fb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:21:DB:42:5C:64:5C:BC:CD:5F:1D:C2:49:BE:57:ED:3F:5B:7D:3B
            X509v3 Authority Key Identifier:
                keyid:47:CA:36:B6:8F:7E:BB:87:A8:E7:44:A7:07:2F:9E:3D:86:02:63:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill-eval-ctec.charter.com/repo/Charter_CTEC_Lab/3/47CA36B68F7EBB87A8E744A7072F9E3D860263A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e35cfcfc-940d-4d53-b96c-8c71b8674fd9/15151ee44ce9e8e3000750add1f5412b7bbaf781062a5fdb78.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill-eval-ctec.charter.com/repo/Charter_CTEC_Lab/3/3139322e3231392e3231362e302f32312d3231203d3e203136373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.219.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3f:3a:5b:65:c5:81:ef:4c:a8:42:48:1f:45:ab:e7:70:7f:36:
         f9:1e:76:b4:50:01:0c:63:7b:db:88:8d:0e:34:82:cc:92:d7:
         1d:ae:b9:ca:97:0d:60:80:5b:ac:48:7c:40:d9:c0:fb:c2:21:
         89:61:c7:c1:aa:4d:21:0d:cd:c3:29:39:3f:63:1f:f3:48:8a:
         d6:c5:d2:66:06:c3:72:a3:82:ce:f3:70:bc:5e:c5:47:61:c1:
         86:61:1e:4e:18:66:69:4f:24:0e:99:24:4c:ee:d2:87:06:af:
         70:0c:f3:09:dd:7c:19:50:d2:66:ba:64:a3:8e:b8:fd:0a:89:
         cf:d0:32:43:51:d0:f0:85:7d:1f:b2:ca:15:3d:59:e7:a9:b8:
         00:19:8f:f8:5b:81:a4:fb:77:22:99:81:2f:ec:fc:11:22:72:
         ff:bf:f7:79:ea:7e:e9:8a:6e:f1:8d:ac:e4:04:25:77:aa:6f:
         12:87:83:c2:37:24:7c:4b:6f:88:e6:2d:d6:a7:f4:96:94:fd:
         29:bc:f5:5c:e1:49:c9:0b:ab:62:0e:c9:1e:94:3d:22:14:f5:
         8f:12:ba:db:81:56:78:0e:40:cd:76:d6:c2:6f:9a:ed:9f:66:
         70:55:2c:25:c1:b9:88:7c:dd:f5:4b:35:c2:f6:86:f6:b0:a8:
         9d:95:b4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org