Route Origin Authorization

$ rpki-client -vvf krill-eval-ctec.charter.com/repo/Charter_CTEC_Lab/3/323630353a316330303a316666303a3a2f34342d3434203d3e203136373837.roa
File:                     323630353a316330303a316666303a3a2f34342d3434203d3e203136373837.roa (raw, json)
Hash identifier:          4Tdz1bLxxLonvzARSqQNXpR80wQt7P008O659yp3sDQ=
Subject key identifier:   C9:FA:65:8B:41:50:F2:89:A8:4E:C7:31:2A:D5:12:DC:BC:13:14:08
Certificate issuer:       /CN=15151ee44ce9e8e3000750add1f5412b7bbaf781062a5fdb78
Certificate serial:       2C048E4D730801F83F6D1D2638656FDF86B145AB
Authority key identifier: 47:CA:36:B6:8F:7E:BB:87:A8:E7:44:A7:07:2F:9E:3D:86:02:63:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e35cfcfc-940d-4d53-b96c-8c71b8674fd9/15151ee44ce9e8e3000750add1f5412b7bbaf781062a5fdb78.cer
Subject info access:      rsync://krill-eval-ctec.charter.com/repo/Charter_CTEC_Lab/3/323630353a316330303a316666303a3a2f34342d3434203d3e203136373837.roa
Signing time:             Tue 09 Feb 2021 20:53:39 +0000
ROA not before:           Tue 09 Feb 2021 20:48:39 +0000
ROA not after:            Tue 08 Feb 2022 20:53:39 +0000
asID:                     16787
IP address blocks:        2605:1c00:1ff0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:04:8e:4d:73:08:01:f8:3f:6d:1d:26:38:65:6f:df:86:b1:45:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15151ee44ce9e8e3000750add1f5412b7bbaf781062a5fdb78
        Validity
            Not Before: Feb  9 20:48:39 2021 GMT
            Not After : Feb  8 20:53:39 2022 GMT
        Subject: CN=3082010A0282010100D04780D2A801737A238929B82A686D96DF734512938A1E0B7B1D69C5975BF24AEA1CB343F5E1E286A660F94B52F90B025088D83D7B5E28B56CF99ED3DFAFFF51390513C0D6A1564A5522E1DC857001CD9AEE9C8505E51A5D572D7E86D93F63F83EF38017E7C6E0D44F4CBE86A001F94EB8AB9DE0CF8E9D6792563271B3A7CEAE93395B28942D1BC5AB3E94D87FEECE78EEFB97D1D5DEE6943B3962EE339F1B1176D1DFC63C334AEAC4A0976CC7CF196A936B52F2F67DCC66E84614E8ECF4252E3E70B24E9112C9429B66F0CBF9536F89CB8CC6BAAF2DC6DB9B52BB2144013249DC9E4F965653D5E0FD7ED14C88323E5618CA5FD542EC8DCA09CA077ED668432B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:47:80:d2:a8:01:73:7a:23:89:29:b8:2a:68:
                    6d:96:df:73:45:12:93:8a:1e:0b:7b:1d:69:c5:97:
                    5b:f2:4a:ea:1c:b3:43:f5:e1:e2:86:a6:60:f9:4b:
                    52:f9:0b:02:50:88:d8:3d:7b:5e:28:b5:6c:f9:9e:
                    d3:df:af:ff:51:39:05:13:c0:d6:a1:56:4a:55:22:
                    e1:dc:85:70:01:cd:9a:ee:9c:85:05:e5:1a:5d:57:
                    2d:7e:86:d9:3f:63:f8:3e:f3:80:17:e7:c6:e0:d4:
                    4f:4c:be:86:a0:01:f9:4e:b8:ab:9d:e0:cf:8e:9d:
                    67:92:56:32:71:b3:a7:ce:ae:93:39:5b:28:94:2d:
                    1b:c5:ab:3e:94:d8:7f:ee:ce:78:ee:fb:97:d1:d5:
                    de:e6:94:3b:39:62:ee:33:9f:1b:11:76:d1:df:c6:
                    3c:33:4a:ea:c4:a0:97:6c:c7:cf:19:6a:93:6b:52:
                    f2:f6:7d:cc:66:e8:46:14:e8:ec:f4:25:2e:3e:70:
                    b2:4e:91:12:c9:42:9b:66:f0:cb:f9:53:6f:89:cb:
                    8c:c6:ba:af:2d:c6:db:9b:52:bb:21:44:01:32:49:
                    dc:9e:4f:96:56:53:d5:e0:fd:7e:d1:4c:88:32:3e:
                    56:18:ca:5f:d5:42:ec:8d:ca:09:ca:07:7e:d6:68:
                    43:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FA:65:8B:41:50:F2:89:A8:4E:C7:31:2A:D5:12:DC:BC:13:14:08
            X509v3 Authority Key Identifier:
                keyid:47:CA:36:B6:8F:7E:BB:87:A8:E7:44:A7:07:2F:9E:3D:86:02:63:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill-eval-ctec.charter.com/repo/Charter_CTEC_Lab/3/47CA36B68F7EBB87A8E744A7072F9E3D860263A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e35cfcfc-940d-4d53-b96c-8c71b8674fd9/15151ee44ce9e8e3000750add1f5412b7bbaf781062a5fdb78.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill-eval-ctec.charter.com/repo/Charter_CTEC_Lab/3/323630353a316330303a316666303a3a2f34342d3434203d3e203136373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1c00:1ff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         5c:b9:14:2c:af:21:9c:8c:55:ea:62:8d:35:12:84:c0:7c:dd:
         a0:73:34:ce:db:a4:30:e3:0c:ef:82:72:d9:f0:91:a6:0f:bc:
         48:6b:d2:23:3a:8c:0b:a2:a7:fe:cb:a3:44:f8:48:34:9c:56:
         b2:80:34:3f:e6:5b:54:70:de:0d:a8:45:d8:94:58:02:89:9d:
         8d:a0:50:ce:b8:f9:fb:ef:05:65:cd:89:1f:76:bc:30:ad:98:
         93:64:20:f6:59:77:bf:46:69:1b:75:6c:f9:12:b6:9c:e1:7a:
         62:c5:45:00:6f:73:80:c8:59:a3:ac:c1:f9:22:4b:ad:34:9f:
         10:0c:13:27:30:7b:21:0a:3a:e4:78:9e:92:b1:a9:58:0e:ce:
         3a:47:79:d4:02:6e:d2:72:64:15:6f:ea:b6:3d:45:9b:93:09:
         32:4e:64:e2:6c:c8:32:3c:2b:3d:62:ef:4f:35:fa:7a:6e:67:
         fb:5a:a4:63:42:22:46:81:b2:5c:2b:43:d0:d0:4b:cf:de:26:
         51:d6:27:cd:61:d9:43:7b:ed:e3:db:a1:54:fe:84:a1:60:63:
         b7:b8:78:0e:5d:61:0f:34:22:c4:4f:03:e4:9f:f8:85:84:22:
         83:e5:9f:5f:93:54:21:51:74:0f:36:54:14:2d:3b:e2:c9:c6:
         d5:9c:f1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org